Privacy policy

Tharshan VISHNUKUMAR EI, whose details appear in the legal notice, determines the purposes and means of the processing described below. For any question about your data, write to hello@koumastudio.com.

No data protection officer has been appointed: the activity meets none of the mandatory cases listed in article 37 GDPR. Requests are handled directly by the publisher.

The service collects only what it needs to function. You are never asked for data you would not want on your résumé.

An email address is required to create an account: without it, we can neither send you a sign-in code nor identify you. The name asked for at sign-up is optional. Your résumé content is entirely optional: you alone choose what you write in it. To subscribe to the Pro plan, Stripe asks for the information the payment needs.

No data is sold, rented or transferred to third parties. No advertising profiling takes place. No decision producing legal effects concerning you is made by automated means within the meaning of article 22 GDPR: the assistant suggests text, it decides nothing.

Plume asks for no special category data within the meaning of article 9 GDPR (health, disability, trade union membership, religious or philosophical beliefs, political opinions, origin, sexual orientation) and provides no field to collect any. A résumé can still reveal such data, for instance through voluntary work or a recognised disability you choose to mention.

Date of birth and nationality are not special category data under that article, but they can expose you to discrimination in hiring. These fields are optional and not recommended, as the help shown under them in the résumé editor says.

Four features call a language model: the import that extracts the structure of an existing résumé, the assistant that rewrites your content, the style recommendation and the job-offer analysis. None runs unless you trigger it. Each sends the model the following data, and nothing else:

• Import: the whole résumé, as text or, where it has none (a scanned document, a photo), as images of its pages. It usually includes your identity and contact details.
• Assistant: the professional content of your résumé (job title, summary, experience, education, skills and other sections), its layout settings (colours, fonts, template, order and visibility of sections, per-section or per-entry styles), its page count, the messages you write to it and, with each message you send, an image of each page of the résumé as it is displayed (four pages at most). In that image, your name, contact details, photo, date of birth and nationality, your references' identity and the address of your links are replaced by sample text; what you write yourself in the other sections appears as it is. The assistant therefore receives neither your name, nor your contact details, nor your photo, nor your date of birth, nor your nationality, nor your references' contact details, nor the address of your links.
• Style recommendation: the job title, layout measurements (density, whether there is a photo, number of skills and languages) and excerpts of the résumé: the first 500 characters of the summary, positions with employers and dates, degrees with schools, skills.
• Job-offer analysis: the text of your résumé without name or contact details, capped at 6,000 characters, and the text of the offer you paste.

This data goes through Vercel AI Gateway, the gateway of Vercel Inc. (United States), which passes it to the feature's model. The import, the style recommendation and the job-offer analysis use Google's Gemini 2.5 Flash-Lite model, served by Google Cloud (Vertex AI). The assistant uses the Claude Haiku 5.5 model of Anthropic, PBC (United States), served by Anthropic itself: every assistant request excludes the other hosts of this model. Google LLC and Anthropic, PBC act as sub-processors of Vercel.

Every request requires a provider that keeps no data after the response and never uses it to train a model, under the agreements Vercel has with its providers. If no provider meets both conditions, the request fails rather than going elsewhere. Vercel states that its gateway retains neither requests nor responses. Nor does the publisher retain this content: only the résumé you decide to keep is saved.

Neither Google nor Anthropic guarantees that these requests are processed in the European Union: assume they may be processed elsewhere, in particular in the United States (section 7).

Your data is accessible to the publisher and to the technical providers below. Unless the table says otherwise, they act on the publisher's instructions, under a processing agreement compliant with article 28 GDPR.

A Plume administrator may access your account to handle a support request or to moderate the service. Every access and every action is recorded in a log, and administrative access requires a second authentication factor.

Plume also writes to your account's address, in its language, when something changes on your account, your pass or your subscription: Pro activated, pass activated, reminder a few days before a pass ends, end of a pass, cancellation scheduled or subscription resumed, end of the subscription, failed payment, account suspended (with the reason given by the administrator, how long it lasts and how to contest it) and suspension lifted, Pro access gifted or withdrawn, account deleted. These service e-mails are part of the service (performance of the contract): like the sign-in code, they are sent even if you refused the messages described in the next paragraph. They carry no advertising, no tracking pixel and no tracked link. The one confirming the account's deletion goes out once the deletion is done, to the address read just before: Plume keeps it nowhere afterwards.

We may write to your account's address about the service, for instance to ask for your opinion. These e-mails rest on our legitimate interest in improving Plume; each one carries a link to stop them, and your refusal is recorded on your account.

Signing in with Google only happens if you choose it. Google then acts as a separate controller for the data attached to your Google account; its own privacy policy applies in that respect.

Audience measurement has no third-party recipient: it is carried out by Moka, the publisher's own tool (section 6).

We measure traffic on plume.koumastudio.com with Moka, the publisher's own audience-measurement tool: a Kouma Studio product whose servers are located in France. The measured data stays with the publisher: it is neither sold nor passed to third parties, with the sole exception of the identifier attached to your payment if you accept full measurement (below).

Without your consent, measurement is limited to visit statistics, built from pseudonymous identifiers stored in the cookies moka_aid (13 months from when it is first set, not extended) and moka_session_id (30 minutes, extended with each page viewed): pages viewed, referrer, actions tracked on the site, outbound links, device type, browser, screen size, country, region and city (the IP address is not kept). This data is neither linked to your purchases nor combined with other processing.

If you accept audience measurement in our banner, the cookies moka_visitor_id and moka_consent (13 months from when they are first set, not extended, set only after your consent) also let us follow your journey on the site and link it to your purchases, to identify the channels that bring us customers: the moka_visitor_id identifier is then attached to your payment at Stripe. This measurement relies on your consent (art. 6(1)(a) GDPR).

Your choice is kept for 6 months in your browser, together with the version of the banner wording. When it expires, or if that wording changes, you are asked again; Moka first receives a withdrawal, which deletes the moka_visitor_id, moka_consent and moka_session_id cookies. You can withdraw your consent at any time from the “Cookie settings” link at the bottom of the page, which reopens the banner.

Browsing data is kept for 25 months. If you accepted audience measurement, your purchases and the channel that brought you are kept with our sales records.

You can object to any measurement by clicking the link below. The choice is stored in this browser: repeat it on each of your devices.

Stop Moka measuring my visits

Several providers are established in the United States. For those certified under the EU–US Data Privacy Framework, transfers rely on the European Commission's adequacy decision of 10 July 2023 (art. 45 GDPR): the certification of Vercel Inc., Railway Corporation, Resend, Inc., Cloudflare, Inc., Upstash, Inc. and Google LLC was active on 7 October 2026 on dataprivacyframework.gov. The processing agreements that provide for them add the standard contractual clauses adopted by the European Commission (art. 46(2)(c) GDPR), which also frame Stripe's transfers.

Content sent to the artificial-intelligence features goes through Vercel Inc., then is processed, in a region that is not guaranteed, by Google LLC (Google Cloud, Vertex AI) for the import, the style recommendation and the job-offer analysis, and by Anthropic, PBC for the assistant: assume it is processed outside the European Union, including in the United States. The transfer to Google relies on the Data Privacy Framework certification of Vercel Inc. and Google LLC. Anthropic, PBC was not on the Data Privacy Framework list checked on 12 October 2026: the transfer to Anthropic relies solely on the standard contractual clauses of Vercel's processing agreement. Each request requires that none of these providers keeps this content after the response or uses it to train a model, under the agreements Vercel has with its providers (section 4).

The application runs in the Paris region and the database is stored in Amsterdam, which keeps transfers to what operating the service strictly requires.

As an exception, an account suspended for breaching the terms of use is neither warned nor deleted for inactivity while the suspension lasts, since deleting it would lift the suspension. Once the suspension ends, the account follows the ordinary rule.

Deleting a résumé from your dashboard is immediate and permanent. You can delete your account yourself from the My account page: the account, all its résumés (photos included), its sessions and its link to Google are erased at once, and a running Pro subscription is cancelled immediately at Stripe. The copies of your email address in the administration tools (log, email recipient lists) are erased at the same time; only the account's technical identifier stays in the log until its 12-month term. Erased data may remain in the database backups until they expire. An e-mail confirms the deletion once it is done, whoever made it (you, the administrator or the purge of inactive accounts); Plume keeps your address nowhere after that message, of which only the record remains in Resend's sending log, for as long as that provider keeps it.

Deleting the account does not delete your customer record at Stripe (email address, name, saved payment method, payment history): it stays at Stripe, which keeps it under its own obligations. To ask for its deletion, write to hello@koumastudio.com; invoices remain kept for the legal period.

• Traffic to and from the site is encrypted in transit (HTTPS).
• No password is stored: you sign in with a one-time code sent by email, kept as a hash for as long as it is valid, or with Google.
• Access to a résumé is restricted to its authenticated author; no résumé is public or indexed.
• Database access is limited to the application's own processing.
• Administrative access requires a second authentication factor, and every action of the administrator is logged.
• Abuse counters hold no IP address or email address in clear text, only hashes computed with a secret key.

In the event of a data breach likely to result in a high risk to your rights, you will be informed without undue delay, in accordance with article 34 GDPR.

You have the following rights over data concerning you:

• Right of access (art. 15): obtain a copy of the data processed.
• Right to rectification (art. 16): correct inaccurate or incomplete data.
• Right to erasure (art. 17): delete your data, subject to legal retention obligations.
• Right to restriction (art. 18): freeze contested processing while it is verified.
• Right to object (art. 21): object to processing based on legitimate interests.
• Right to portability (art. 20): receive your data in a structured, machine-readable format.
• Right to withdraw consent at any time, where processing relies on it.
• Right to give directives on the fate of your data after your death (art. 85 of the French Data Protection Act).

Several of these rights can be exercised directly from the My account page, with no request to make:

• Access and portability: the “Export my data (JSON)” button downloads your profile (including the language of your e-mails), all your résumés, with their full content, and the feedback you sent, in a JSON file you can reuse elsewhere (5 exports an hour at most).
• Erasure: the “Delete my account” button erases the account and all its résumés, and cancels a running Pro subscription at Stripe (section 8).
• Rectification: each résumé can be edited or deleted from the editor and the dashboard, and exported as a PDF as well.

For anything else, for instance to obtain data the export does not contain (sessions, administration log) or to ask for the deletion of your customer record at Stripe, write to hello@koumastudio.com. You will receive a reply within one month, extendable by two months for complex requests. Proof of identity may be requested where there is reasonable doubt as to who is asking.

If, after contacting us, you consider your rights are not being respected, you may lodge a complaint with the French data protection authority — CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr — or with the supervisory authority of your country of habitual residence.

This policy may change along with the service. The date of last update appears at the top of the page. Any substantial change will be notified to you by email or by a notice in the application before it takes effect.