Terms of Service
Last updated: March 12, 2026
1. Definitions
In these Terms of Service the following terms shall have the meanings assigned below:
- "Service" means the Resume Mapper AI-powered CV parsing API, npm widget (@resume-mapper/widget), dashboard, and all related software operated by the Provider at resume-mapper.dev.
- "Provider" means Code Wizard, operator of resume-mapper.dev.
- "Customer" means any individual or legal entity that registers for an account and uses the Service under a paid or trial plan.
- "Candidate" means any natural person whose CV or resume is submitted for parsing through the Service.
- "API Key" means the unique credentials issued to Customer to authenticate requests to the Service.
- "Parsed Data" means the structured JSON output produced by the Service after processing a CV file.
- "Webhook" means the Customer-configured HTTP endpoint to which Parsed Data is transmitted.
- "Subscription" means a paid monthly or annual plan (Starter or Pro) granting access to the Service.
- "Trial" means the free-tier grant of 25 CV parses available upon registration without payment.
2. Acceptance of Terms
By registering for an account, accessing the dashboard, or making API calls using an API Key, Customer agrees to be legally bound by these Terms of Service and our Privacy Policy. If Customer does not agree to all terms and conditions, they may not access or use the Service. If Customer is acting on behalf of a legal entity, they represent that they have the authority to bind that entity to these Terms.
3. Description of Service
Resume Mapper provides an API and embeddable widget that accept CV files in PDF, DOCX, and TXT format, extract structured candidate data using AI models (currently OpenAI GPT-4o-mini / GPT-4o), and optionally transmit Parsed Data to Customer's configured Webhook endpoint. The Service is provided on a business-to-business (B2B) basis and is not intended for direct use by Candidates.
- File formats accepted: PDF (including Canva/image-based PDFs via direct GPT-4o vision), DOCX, DOC, TXT.
- Maximum file size: 10 MB per request.
- Extracted fields include: personal information, work experience, education, skills, languages, certifications, and projects.
- Pro plan Customers may configure custom field mappings to transform Parsed Data to their own schema.
- The Provider reserves the right to modify, suspend, or discontinue any feature of the Service at any time, with reasonable prior notice where practicable.
4. Account Registration and API Keys
Customer must register with a valid email address and maintain accurate account information. Customer is solely responsible for:
- Maintaining the confidentiality of their API Key and dashboard credentials.
- All API calls made using their API Key, whether or not authorised by Customer.
- Immediately notifying the Provider at legal@resume-mapper.dev upon discovery of any unauthorised use or suspected compromise of an API Key.
- Rotating the API Key promptly if a compromise is suspected; the Provider may invalidate any Key believed to be compromised.
- Ensuring that any employees, contractors, or systems using the API Key comply with these Terms.
5. Acceptable Use Policy
Customer agrees to use the Service only for lawful purposes and in compliance with applicable law. The following uses are strictly prohibited:
- Processing CV files without a legally valid basis (e.g., consent of the Candidate or legitimate interest under applicable data protection law).
- Uploading files containing malware, ransomware, or any malicious code.
- Attempting to reverse-engineer, decompile, or extract the underlying AI models or source code.
- Circumventing or attempting to circumvent rate limits, usage caps, or authentication mechanisms.
- Reselling or sublicensing access to the Service to third parties without written permission from the Provider.
- Using the Service in any application targeted at children under the age of 16.
- Engaging in any activity that could overload, damage, or impair the Service infrastructure.
- Processing sensitive special-category data (Article 9 GDPR) such as health data, racial origin, or biometric data, unless explicitly agreed in writing with the Provider.
6. Subscription, Billing, and Cancellation
Subscriptions are managed through Stripe, a third-party payment processor. By subscribing, Customer authorises Stripe to charge the payment method on file on a recurring basis.
6.1 Plans and Pricing
- Trial: 25 CV parses, no payment required. Trial credits do not roll over.
- Starter: 200 CV parses per calendar month, Webhook integration, Resume Mapper branding. $19/month (billed monthly) or $182/year (billed annually, equivalent to $15.17/month).
- Pro: Unlimited CV parses, custom field mappings, analytics, white-label, rate limit 1,000 req/min. $49/month (billed monthly) or $390/year (billed annually, equivalent to $32.50/month).
6.2 Billing
Paid plans are billed in advance at the start of each billing period (monthly or annual). All amounts are in USD. Applicable taxes (including VAT for EU customers) may be added by Stripe at checkout.
6.3 Non-Refund Policy
All fees are non-refundable except as required by mandatory applicable law (including EU/EEA consumer protection law where it applies) or as explicitly agreed in writing by the Provider.
6.4 Price Changes
The Provider reserves the right to change pricing with at least 30 days' written notice by email to the registered account address. Price changes take effect at the next billing cycle after the notice period.
6.5 Cancellation
Customer may cancel a Subscription at any time via the dashboard Billing page. Cancellation takes effect at the end of the current billing period. Access to the Service continues until the end of the paid period.
6.6 Non-Payment
If payment fails, the Provider will notify Customer by email. If payment is not settled within 7 days, the account may be downgraded or suspended. Repeated non-payment may result in account termination.
7. Service Levels and Limitations
- The Provider targets reasonable availability but does not guarantee any specific uptime SLA on non-enterprise plans.
- The Service may be temporarily unavailable due to maintenance, upgrades, or events beyond the Provider's reasonable control (force majeure).
- Rate limits apply per plan: Trial — 10 req/min; Starter — 60 req/min; Pro — 1,000 req/min. Requests exceeding these limits will receive HTTP 429 responses.
- Monthly parse quotas (Trial: 25; Starter: 200) are measured per calendar month and reset on the 1st of each month. Unused parses do not roll over.
- Pro plan parse limits are set to a technical maximum (999,999 per month) and are functionally unlimited for normal commercial use.
8. Data Processing Responsibilities
This section constitutes the data processing agreement (DPA) between the Provider (acting as data processor) and Customer (acting as data controller) required under Article 28 of the General Data Protection Regulation (GDPR) 2016/679.
8.1 Roles
- Customer is the data controller for all Candidate personal data submitted to the Service.
- Provider acts as a data processor processing Candidate data on behalf of Customer solely to deliver the Service.
- Provider is an independent data controller for account data (Customer's own personal data used for registration and billing).
8.2 Provider's Obligations as Processor
- Process Candidate personal data only on documented instructions from Customer (i.e., API requests made using Customer's API Key).
- Ensure that personnel authorised to process the data are bound by confidentiality.
- Implement appropriate technical and organisational security measures as described in Section 11.
- Assist Customer, insofar as possible, in responding to data subject rights requests under Articles 15–22 GDPR.
- Delete or return all Candidate personal data upon termination of the agreement (see Section 8.4).
- Make available all information necessary to demonstrate compliance with Article 28 GDPR upon reasonable request.
- Notify Customer without undue delay (and in any event within 72 hours) upon becoming aware of a personal data breach affecting Candidate data.
8.3 Sub-processors
Provider engages the following sub-processors to deliver the Service. Customer consents to their use by accepting these Terms:
- OpenAI, L.L.C. (USA) — AI inference (GPT-4o-mini, GPT-4o) for CV text extraction. Data transferred under Standard Contractual Clauses.
- Google LLC / Firebase (USA) — authentication and Firestore database. Data transferred under Standard Contractual Clauses.
- Stripe, Inc. (USA) — payment processing. Customer billing data only. Governed by Stripe's own DPA.
- Vercel, Inc. (USA) — cloud hosting and edge network. Data transferred under Standard Contractual Clauses.
8.4 Candidate Data Retention
- CV files are processed in-memory and are NOT stored on Provider's servers after parsing.
- Parse history logs (file name, type, size, timestamp, success flag — no CV content) are retained for 90 days and then deleted.
- Parsed Data (structured JSON) is transmitted to Customer's Webhook and is not retained by Provider.
- Rate-limit counters contain no personal data and expire automatically after 24 hours.
8.5 Customer's Obligations as Controller
- Ensure a valid legal basis under applicable data protection law exists for each CV submitted for parsing.
- Inform Candidates about the processing of their data, including transmission to Resume Mapper, in Customer's own privacy notice.
- Not submit special-category data unless separately agreed in writing with Provider.
- Ensure that the Webhook endpoint receiving Parsed Data is secured and compliant with applicable law.
9. Intellectual Property
All intellectual property rights in the Service, including the API, widget, dashboard, documentation, and underlying AI extraction logic, remain the exclusive property of the Provider or its licensors. Customer is granted a limited, non-exclusive, non-transferable, revocable licence to use the Service during the Subscription term for the purposes described in these Terms. Customer retains all rights to the Parsed Data generated from their Customers' CVs. The Provider does not claim any rights to CV content submitted by Customer or to Parsed Data.
10. Confidentiality
Each party agrees to keep confidential all non-public information disclosed by the other party that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information. This obligation does not apply to information that: (a) is or becomes publicly known through no breach of this agreement; (b) was rightfully known before disclosure; (c) is independently developed without use of confidential information; or (d) must be disclosed by law. API Keys are deemed confidential information of Customer.
11. Disclaimers of Warranties
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE PROVIDER DOES NOT WARRANT THAT:
- The Service will be uninterrupted, error-free, or free from viruses or other harmful components.
- Parsed Data will be 100% accurate or complete — AI extraction may produce errors, omissions, or hallucinations.
- The Service will meet every specific business requirement of Customer.
- Results obtained through the Service will be suitable for any particular decision-making purpose (including candidate selection).
12. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
- Neither party shall be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, including loss of profits, loss of data, or loss of goodwill, even if advised of the possibility of such damages.
- The Provider's total cumulative liability arising from or related to the Service shall not exceed the greater of: (a) the total fees paid by Customer in the twelve (12) months immediately preceding the claim, or (b) EUR 100.
- Nothing in these Terms limits liability that cannot be excluded by mandatory law, including liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation.
13. Indemnification
Customer agrees to indemnify, defend, and hold harmless the Provider and its representatives from any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to: (a) Customer's use of the Service in violation of these Terms; (b) Customer's violation of applicable law, including data protection law; (c) any claim by a Candidate arising from Customer's processing of their data; or (d) any content submitted by Customer to the Service.
14. Term and Termination
14.1 Term
These Terms take effect upon account registration and continue until the Subscription is cancelled or the account is terminated.
14.2 Termination by Customer
Customer may terminate at any time by cancelling their Subscription via the dashboard and ceasing all use of the Service.
14.3 Termination by Provider
Provider may suspend or terminate Customer's account immediately upon written notice if: (a) Customer breaches these Terms and fails to cure within 7 days of notice; (b) Customer fails to pay fees after a cure period; (c) Customer engages in fraudulent, abusive, or illegal use; or (d) continued provision would expose the Provider to legal or regulatory risk.
14.4 Effect of Termination
- Upon termination, Customer's access to the Service and API Key will be revoked.
- Account data (organisation record, settings, parse history) will be retained for 90 days, then permanently deleted.
- Provisions that by their nature should survive termination shall survive, including Sections 9, 10, 12, 13, 15, and 16.
15. Governing Law and Dispute Resolution
These Terms are governed by and construed in accordance with the law of Poland, without regard to its conflict-of-law rules. The parties agree that any dispute, controversy, or claim arising out of or relating to these Terms shall be subject to the exclusive jurisdiction of the competent courts of Poland. Customer waives any objection to the jurisdiction of Polish courts. If Customer is a consumer (which is not the primary intent of these Terms, as the Service is B2B), mandatory consumer protection provisions of Customer's country of habitual residence may apply.
16. General Provisions
16.1 Entire Agreement
These Terms, together with the Privacy Policy and any order form or subscription confirmation, constitute the entire agreement between the parties with respect to the Service and supersede all prior agreements.
16.2 Amendments
Provider may update these Terms at any time. Material changes will be notified by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.
16.3 Severability
If any provision of these Terms is held invalid or unenforceable, the remaining provisions will continue in full force and effect.
16.4 Waiver
Failure to enforce any provision of these Terms shall not constitute a waiver of the right to enforce it in the future.
16.5 Assignment
Customer may not assign these Terms without prior written consent of Provider. Provider may assign these Terms in connection with a merger, acquisition, or sale of substantially all assets.
16.6 Contact
For legal matters and notices: legal@resume-mapper.dev. Code Wizard, Poland.