Legal
Data Processing Agreement
Last updated: 18 September 2026|~2 min read
For teams and Pro customers with GDPR / UK GDPR data-processing requirements
When you upload a CV or paste a job description into ResumeLens, we act as a data processor on your behalf for that content. If your organisation needs a signed Data Processing Agreement (DPA) to formalise that relationship under UK GDPR or EU GDPR, we provide one on request.
A DPA is separate from our Privacy Policy, which already describes what we collect and how it's used. The DPA is the contractual paperwork some businesses need on file alongside it.
Consistent with our existing Privacy Policy, the agreement confirms that:
- Resume and job description content is processed only to generate your analyses, tips, and tailored versions — never to train AI models.
- Data is encrypted at rest and can be deleted by you, or on request, at any time.
- Any sub-processors we rely on (hosting, storage, and AI providers) are bound by their own data-protection terms.
Email legal@resumelens.ai with your company name and the ResumeLens account email in use. We'll send over a DPA for signature — typically within a couple of business days.
Need a DPA on file?
Email our legal contact and we'll get one over to you.