How we handle your data

Account data. When you sign up or sign in, we process identifiers needed to operate your account — for example, your email address, authentication events, and basic profile fields you choose to provide.

Resume and project data. Content you enter in the resume editor (text, structured fields, section choices, previews, and related metadata) is stored so we can provide editing, autosave, export, and support when you ask for help tied to a specific project.

Technical and security data. Like most web apps, we receive limited technical information from your browser and our infrastructure partners (for example, request logs and diagnostics) to keep the service reliable, secure, and abuse-resistant.

Purchases (such as PDF export unlocks) are processed by Stripe. Stripe collects payment details on their checkout flows. We do not receive or store your full card number on our servers; we may receive limited billing metadata needed to confirm your purchase and provide support (for example, payment status, amount, currency, and identifiers that link your order to your account).

Stripe's handling of payment information is described in Stripe's privacy policy.

When you choose AI-assisted actions inside the product, portions of your resume or related prompts may be sent to our AI provider to generate suggestions. You control when those features run; we use the output to display suggestions and improve the specific workflow you invoked.

AI output can be imperfect — please review it carefully. A fuller explanation lives in our AI disclaimer.

We use the categories above to provide and secure the service: host your projects, render previews and PDFs, authenticate you, process payments through Stripe, send transactional emails (such as purchase receipts or account notices when enabled), troubleshoot issues you report, and understand aggregated product usage. We do not sell your resume text to data brokers or use it for third-party advertising.

We keep account and project data while your account is active and for a reasonable period afterward where needed for backups, fraud prevention, accounting, or legal compliance. Records tied to payments may be retained longer where required to meet tax, accounting, or regulatory obligations.

Deletion requests. To request deletion of personal data associated with your account, contact us using the options below. We will verify ownership where needed and respond within a reasonable timeframe. Some information may be retained in de-identified or aggregated form, or where we must keep limited records by law.

We rely on reputable infrastructure providers (including Supabase for authentication and database services) and follow common security practices for a web application. No online service can promise perfect security — use a strong password, keep your email account secure, and let us know promptly if you suspect unauthorized access.

Questions about this policy, access requests, or deletion may be sent through our contact form. To show a public support address here, set NEXT_PUBLIC_CONTACT_EMAIL in your deployment environment..

If you are in a region that provides specific privacy rights, you may have additional choices depending on applicable law. We will honor verified requests to the extent we can identify your account and the request is consistent with our legal obligations.