saadq / resumake.io

📝 A website for automatically generating elegant LaTeX resumes.
https://resumake.io
MIT License
3.27k stars 444 forks source link

Add a privacy policy #162

Open karlbrown-va opened 3 years ago

karlbrown-va commented 3 years ago

Is your feature request related to a problem? Please describe. It would be nice if there was a privacy policy describing the approach to user data collected by the website.

Describe the solution you'd like A privacy policy that states that the website will not store, sell, or use any data entered in it (I didn't check but I'm assuming this is the case...)

saadq commented 3 years ago

Hey, sorry for getting to this late. I think that's a good point, I will include this in v3

be-rock commented 3 years ago

until that time, @saadq can you please share your comments here on how user data is kept safe, secure, private? is user data persisted anywhere?

saadq commented 3 years ago

Sure, so I don't persist any data at all (there is no database for Resumake). I can go into some more technical details below:

When a user clicks the Make button to generate the resume, it sends the user data to my server. My server will then transform that data into a LaTeX document and then run a LaTeX subprocess in a tmp folder. So a PDF file for the resume as well as other miscellaneous tex files will get generated and put inside that temp folder before I send it back to the user. Once the output PDF has finished being sent, I delete the generated folder so the output PDF and any corresponding files will be deleted (https://github.com/saadq/node-latex/blob/master/index.js#L202). For an extra layer of protection, I also have a cron job that runs once per minute to automatically delete any of the LaTeX generated stuff inside the temp folder if it was somehow not deleted.

So you can rest assured I am not doing anything with user data :D. I will leave this issue open until a privacy policy has been added though.

be-rock commented 3 years ago

Thank you for the thorough response and for your approach to privacy.