Your information, explained plainly.
When you use a tool, we process the text and options you provide. With PostgreSQL connected, extracted resume text and relevant results are retained for temporary history. Uploaded PDF, DOCX, and TXT files are read in memory. The local preview uses a SQLite database until PostgreSQL is connected. Builder drafts stay in your open page until you download them. Contact submissions include the email address and message you provide.
An anonymous, signed, HttpOnly cookie identifies your guest browser for up to one year. We use it for history and usage limits. We also maintain keyed hashes of network addresses as secondary abuse protection. Guests can use a tool once. Optional Firebase sign-in enables ten free uses total; Firebase processes account credentials and sign-in information. We do not use advertising cookies or third-party analytics. Dodo Payments is the selected payment provider; checkout is not yet connected. When enabled, Dodo will process payment details; we retain order references, amounts, payment status and credit balances, not card information. Billing records and balances are stored separately from temporary resume history and are not removed by the session-content deletion control.
When AI is enabled, your supplied tool input is sent to OpenAI for generation. We request that responses not be stored through the API’s response-storage setting. OpenAI may retain data under its own API data policies; this application cannot guarantee zero provider retention.
Report and message content is retained for up to seven days, with a scheduled cleanup each hour. Separate minimal allowance counters remain so deleting content, signing out, or restarting does not reset your free uses. Counters store a derived account or browser identifier and a count, not your resume. Signed-in account records retain the Firebase account ID, email, access role and disabled status to manage permissions. Administrator settings and audit records remain until the operator removes them.
Use “Delete my stored session content” in a tool to remove your current session’s stored analyses, generated documents, feedback, and contact messages. Lifetime allowance and abuse-protection counters remain to prevent abuse. Access from another browser or after cookie loss cannot identify your earlier session.
Logs include request IDs, routes, status, timing, and error types. They do not intentionally include resume text, job descriptions, or API keys. Contact us through the contact form with privacy questions. Do not upload information you are not authorized to share.