Privacy Policy

Account data: your name, email address, and profile photo from Google when you sign in. We never see your Google password.

Content you provide: the professional background you enter, job descriptions you paste or point us to, and the resumes we generate for you.

Billing data: handled entirely by Stripe. We never see or store your card number — only a Stripe customer reference and your credit balance.

Your content is used for exactly one purpose: generating your resume. We send it to Anthropic's Claude API for processing; under Anthropic's commercial API terms it is not used to train models. We do not sell your data, show ads, or share your content with anyone except the service providers below.

All traffic is encrypted in transit (TLS). Your background, job text, and resume content are additionally encrypted at the application layer (AES-256-GCM) before being stored, on top of database-level disk encryption. Resume content is never written to logs.

Raw job descriptions and generated resume files are automatically purged 90 days after creation. You can delete any generation immediately from its page, and you can delete your entire account — including all profiles, jobs, generations, and billing history — at any time from the account page. Deletion is immediate and irreversible, satisfying GDPR Article 17 and CCPA deletion rights.

Vercel (hosting), a managed PostgreSQL provider (storage), Google (sign-in), Stripe (payments), Anthropic (resume generation), and Upstash (rate-limiting counters only — no content). Each receives only what its function requires.

Privacy questions or data requests: [SUPPORT_EMAIL]. We respond to verified requests within 30 days.