Privacy Policy

Last updated on November 5, 2026

1. Introduction

This Privacy Policy explains how ResumeUp.AI (“we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use Twinny at https://twinny.pro. It covers people who create a Twinny (“owners”) and people who visit a Twinny page or talk to one (“visitors”).

Twinny and ResumeUp share the same accounts and database, so your account and profile appear on both. Your use of ResumeUp is also covered by the ResumeUp Privacy Policy. By using Twinny, you agree to the practices described here. If you do not agree, please do not use it.

2. Information We Collect

From owners:

  • Account and identity data: your name, email address, and the identifiers used to create and secure your account.
  • Profile data: your photo, what you do, and the details you add or that we read from a document you give us, such as your work history, education, skills, and contact details.
  • What you teach your Twinny: documents, links, notes, stories, answers to questions, and your settings for how it should reply.

From visitors:

  • Conversations: the questions you ask a Twinny and the answers it gives.
  • Visit data: an anonymous visitor key saved in your browser so you can return to your conversation, your browser type, the page that referred you, and your IP address, which we use to prevent abuse.

From everyone:

  • Usage, log, and device data generated as you use the service, such as timestamps, IP address, and browser and device information.
  • Cookies and similar technologies, used to keep you signed in (see Section 10).

3. How We Use Your Information

  • Provide the service: build your Twinny, show your public page, and answer questions from what you shared.
  • Power AI features: read your documents and generate answers, questions, and suggestions using artificial-intelligence models.
  • Show owners their conversations: so you can read what people asked and answer what your Twinny could not.
  • Manage your account: authentication, support, and account administration.
  • Improve and secure the service: debugging, performance, fraud prevention, and abuse protection.
  • Communicate with you: service and security messages, and emails about your Twinny, which you can turn off in your settings.
  • Comply with law: meet legal obligations and enforce our terms.

We do not use your content to train our own general-purpose models.

4. Public Pages and Conversations

If you own a Twinny: once you publish, your public page and anything your Twinny has been told to share can be seen by anyone with the link, and your Twinny can use what you shared in its answers. You can take your Twinny offline at any time.

If you talk to a Twinny: the owner of that Twinny can read your conversation. Please do not share anything you would not want them to see. Answers are generated by AI and can be wrong.

5. How We Share Your Information

We do not sell your personal data, and we do not share it for third-party advertising. We use trusted service providers that process data on our behalf. By category:

  • AI model providers, for generating answers and reading documents (OpenAI, Z.ai, used directly and through the Vercel AI Gateway). Content you share and the questions visitors ask are sent to these providers.
  • Search and memory for your Twinny, so it can find the right facts to answer from (Voyage AI, Qdrant).
  • Cloud hosting, database, and file storage (Amazon Web Services, Supabase).
  • Content delivery and security (Cloudflare).

We may also disclose information: (a) to comply with law, legal process, or valid government requests; (b) to protect the rights, safety, and security of ResumeUp.AI, our users, or the public; and (c) in connection with a merger, acquisition, or sale of assets, in which case we will notify you and this policy will continue to apply to your information.

6. Data We Do Not Collect

We do not intentionally collect full payment card data, protected health information, government identifiers such as Social Security or national ID numbers, or authentication secrets. Please do not include any of these in what you share with Twinny or ask a Twinny.

7. Sensitive Information

What you share is content you control, and it may include information considered sensitive in some places, such as your nationality or date of birth. Include only what you are comfortable with, and avoid special-category data such as health, religion, or political views.

8. Data Retention

We keep personal information only as long as needed for the purposes described here. Account, profile, and Twinny data, including conversations, are kept while the account is active. If you ask us to delete your account or data, we respond within 48 hours, start the deletion within 48 hours, and complete it within 30 days, except where we must keep some data to comply with law.

9. Your Rights and Controls

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing or withdraw consent. You can:

  • Edit your profile and remove what your Twinny knows from your dashboard.
  • Take your Twinny offline at any time.
  • Delete your account and data by emailing [email protected].
  • Ask for a copy of your data by contacting us.
  • Control cookies through your browser settings.

To exercise any right, email [email protected]. We will respond within 48 hours and within the time required by applicable law. We will not discriminate against you for exercising your rights. If you are in the EEA or UK, our processing relies on legal bases including performance of our contract with you, your consent where required, and our legitimate interests, and you may lodge a complaint with your local data-protection authority.

10. Cookies and Similar Technologies

We use cookies to keep you signed in, and browser storage to remember a visitor's anonymous key and conversation. You can control these through your browser settings, though disabling them may affect how Twinny works. We do not use your data for cross-site behavioral advertising.

11. International Data Transfers

We and our service providers may process your information in the United States and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards for these transfers.

12. Security

We take reasonable technical and organizational measures to protect your information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These include encryption in transit, access controls, and hosting with reputable cloud providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children's Privacy

Twinny is not intended for children, and we do not knowingly collect data from children under the age of 13.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new date and, for material changes, notify you by email. Your continued use of Twinny after an update means you accept the revised policy.

15. Contact Us

If you have questions or requests about this Privacy Policy or your data, email us at [email protected].