MyDigitalSpace Privacy Policy
Last Updated: December 12, 2025
Introduction
MyDigitalSpace is a product of Zyene, Inc., a company incorporated in the State of Delaware, with headquarters located in San Francisco, California. MyDigitalSpace ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at mydigitalspace.co.
Information We Collect
Personal Information
When you create an account or sign in, we collect:
- Email address: For account creation and authentication
- Name: First and last name (via Clerk, including when you sign in with Google or other providers)
- Password: Encrypted and stored by our authentication provider (email/password sign-up only)
- Profile image: If you sign in with a provider that supplies one (e.g., Google)
Resume & Portfolio Data (Personal Information)
You may voluntarily provide:
- Resume files (PDF): Uploaded to create your portfolio. These may include name, contact details (email, phone, links), work history, education, skills, and projects.
- Parsed resume content: Sections we derive from your resume (contact, summary, experience, education, skills, projects) to generate and edit your portfolio.
- Portfolio content: The HTML, CSS, and text you create, edit, or publish (including your chosen template and customizations).
- Published portfolio URL and username: If you publish your portfolio (e.g., /live/yourusername).
Important: Resume and portfolio content are treated as personal information. We use them only to provide and improve our service and do not sell or share them with third parties for marketing or unrelated purposes.
Subscription & Payment Data
If you use paid features, we and our payment provider process:
- Email and payment-related identifiers (e.g., Stripe customer ID, session IDs)
- Transaction details: Amount, currency, plan, and status (e.g., succeeded, refunded), stored for billing and support.
Usage Data
We automatically collect:
- Browser type and version
- Authentication and activity timestamps (e.g., sign-in, generations, publishes)
- IP address: In server logs or for usage, abuse prevention, and rate limiting (we do not use IP for long-term profiling in our main databases)
- Template and feature usage: e.g., which template you use and whether a generation or publish succeeded, to operate limits and improve the product.
How We Use Your Information
We use your information to:
- Provide and maintain the service (generating, editing, and publishing portfolios)
- Authenticate your account and secure your data
- Enforce generation limits and subscription status (free vs. premium)
- Process payments for premium features
- Improve our services and user experience
- Respond to support requests
How We Use Your Resume and Portfolio Data with AI
Your resume sections and portfolio content are used for:
- Portfolio generation: We send the parsed resume text and the chosen HTML template to Groq (an AI/LLM provider) to produce the initial portfolio HTML. This is necessary to power the "resume to portfolio" feature.
- Editing and publishing: Your edits and published portfolio are stored so you can view, change, and republish.
We do not:
- Share your resume or portfolio content with third parties except as needed to run the service (e.g., Groq for generation, Supabase for storage, as described below)
- Use your resume or portfolio data for advertising, unrelated AI training, or selling to data brokers
- Use Groq or other AI providers to build models on your personal data beyond what is required to fulfill your request.
Data Storage and Security
Where We Store Data
Your data is stored using Supabase (PostgreSQL and object storage):
- Encryption: Encrypted at rest and in transit (TLS/SSL)
- Access control: Row-Level Security (RLS) and storage policies so you can access only your own data
- Resumes: Stored in Supabase Storage ( mydigitalspace-resume bucket, under paths tied to your account)
- Portfolios: Stored as HTML/CSS in the same bucket and/or in our database, with references in tables such as user_generations and user_subscriptions.
Other Infrastructure
- Netlify: Hosting and serverless functions (e.g., portfolio generation, resume management).
- Clerk: Authentication; they store and process your login credentials and profile data in line with their privacy policy.
Data Sharing and Disclosure
We do not sell, rent, or share your personal information with third parties except in these limited circumstances:
Service Providers
- Supabase: Database and storage (supabase.com/privacy)
- Clerk: Authentication (clerk.com/privacy)
- Stripe: Payment processing for premium features (stripe.com/privacy)
- Groq: AI-based portfolio generation from your resume and template (groq.com — see their privacy policy)
- Netlify: Hosting and serverless functions
These providers are used only to operate our service and are required to protect your data in line with reasonable industry standards and our instructions.
Legal Requirements
We may disclose your information when required by law or in response to valid legal process (e.g., subpoenas, court orders).
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your information in account or app settings
- Deletion: Request deletion of your account and associated data (resumes, portfolios, subscriptions, and related records)
- Portability: Receive your data in a machine-readable format where feasible
- Opt-out: Unsubscribe from marketing or non-essential emails at any time
To exercise these rights, contact us at: support@mydigitalspace.co
Data Retention
We retain your personal information for as long as your account is active. If your account is dormant (e.g., no login for an extended period, such as 24 months), we may notify you before taking action on your data.
If you delete your account:
- Your personal data (including resumes, portfolio content, and subscription-related records) is permanently deleted within a reasonable period (e.g., 30 days), except where we must retain data for legal, tax, or audit purposes.
- Aggregated, anonymized data may be retained for analytics and improvement.
Data Breach Notification
If a data breach affects your personal information, we will:
- Notify affected users via email within 72 hours of discovering the breach, where we have contact details
- Describe what data was involved and what we are doing in response
- Suggest steps you can take to protect yourself
- Report to relevant authorities as required by law
Business Transfers
If MyDigitalSpace or Zyene is involved in a merger, acquisition, or sale of assets:
- We will notify you by email and/or a clear notice on the website before your data is transferred
- Your data will be transferred only to entities that agree to protect it in line with this Privacy Policy
- You may have the option to delete your account and data before the transfer
If MyDigitalSpace or Zyene ceases operations, we will provide advance notice where possible and securely delete or anonymize user data in line with our retention practices.
Cookies and Tracking
We use minimal cookies for authentication and session management:
- Clerk: Session and authentication cookies
- Supabase (when used in the browser): As needed for auth and API access
We do not use third-party advertising or analytics trackers (e.g., Google Analytics) on the MyDigitalSpace product.
Children's Privacy
MyDigitalSpace is intended for professional and educational use. We do not knowingly collect information from anyone under 13.
International Users
Your data is stored in the United States. By using MyDigitalSpace, you consent to the transfer of your information to the U.S. and to the practices described in this policy.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to Know: You may request the categories and, where applicable, specific pieces of personal information we have collected about you
- Right to Delete: You may request deletion of your personal information
- Right to Opt-Out of Sale: You may opt out of the "sale" of personal information. We do not sell personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact support@mydigitalspace.co. We will respond to verified requests within 45 days.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do:
- We will update the "Last Updated" date at the top
- For material changes, we will send an email to registered users and/or show a prominent notice on the site
- We will provide a short summary of what changed
- Where required, we may ask for your consent (e.g., checkbox) before new terms take effect
- You may review the changes and, if you disagree, delete your account
Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Company: Zyene, Inc.
- Headquarters: San Francisco, California
- Email: support@mydigitalspace.co
- Website: mydigitalspace.co