Privacy

What we store

• Account — email, name, password hash (via Better Auth). Paid plans are currently off; every product feature is free.
• Cloud library — resumes and named history snapshots you save while signed in. Guest saves stay on this device / local server storage until you claim them into an account.
• Private share links — a secret token, expiry, optional comments, and a snapshot of the resume shown on that link.
• Operational logs — health checks and recent product errors (no resume body in the default ops buffer) so we can keep the service reliable.

AI processing

Import, rewrite, bilingual, cover-letter, and freeform edit features send the resume text (and any job description you paste) to our language-model provider to generate a response. We do not use your resume to train a public model from this product path. Do not paste secrets you would not put in a job application.

Private share links

Share links are unlisted secret URLs with an expiry (default 72 hours). Anyone with the link can view the resume and leave comments until the link expires or you revoke it. Treat the link like a password.

Billing

The product is currently free. If paid plans return, payments will be processed by Stripe and we will store plan status and Stripe ids — never full card numbers.

Retention & deletion

Cloud resumes remain until you delete them or delete your account. You can download your cloud library and delete your account from the account menu when signed in. Share links expire automatically; revoked links stop resolving.

Contact

Questions about privacy or data: [email protected]. This product is offered as an individual prosumer tool, not an enterprise DPA platform.