Privacy Policy

Resume Reviewer ("Resume Reviewer," "we," "us," or "our") is a project built and operated by Caleb and David. This Privacy Policy explains what information we collect when you use the Resume Reviewer website and review tool (the "Service"), how we use it, who it's shared with, and the choices you have. It's written to describe what the Service actually does today, not a generic template — if you have questions after reading it, use the contact details at the bottom.

Information we collect

We collect information in three ways: what you type or upload, what we generate on your behalf, and a small amount of technical information collected automatically.

What you provide

• Resume content. When you upload a resume file, we extract the text from it to run the review. We don't keep the original file — only the extracted text is stored.
• Career details. The target positions you're going for, jobs you've liked, your interests, your "story & values" answers, and any formatting requirements you enter (e.g. "keep it to one page," a required template).
• Your answers to the follow-up questions the reviewer asks about your background.
• Cover letter details (if you generate one): the target company, role title, job description, and the details you give us to connect your resume to that specific role.
• Account information, if you create a free account: your email address and a password. Your password is never stored in plain text — only a one-way cryptographic hash of it is kept, which cannot be reversed back into your actual password.
• Feedback you submit through the two short survey questions shown at the end of a review.
• An email address to receive a copy, if you choose to have your review or a "resume your draft" link emailed to you.

What we generate

The AI-generated output tied to your session or account: the interview questions, our recommendations, the rewritten resume, the review write-up, and any cover letter — stored so we can show it to you again, and, if you're logged in, so you can come back later and find it.

Collected automatically

• IP address and browser/user-agent string, logged when you submit a review.
• IP address, briefly, when you log in or when the AI-powered features are used — this is anti-abuse logging only, to prevent excessive login attempts and to keep any one visitor from running up AI costs, and isn't linked to your resume content.
• A session identifier, used to connect your in-progress answers to your browser session.
• Usage metadata — which AI action ran and roughly how much it cost us to run — used only to understand and manage our own operating costs, not to read or profile the content of your resume.

Stored only on your device

Your light/dark theme choice, your selected resume font, and whether you've already seen the example-answers walkthrough are saved in your browser's local storage. These never leave your device or reach our servers.

How we use it

• To run the review: generate your follow-up questions, analysis, rewritten resume, and cover letter.
• To email you a copy of your review or a link back to an unfinished draft, if you ask for one.
• To let a free account save your progress and your finished resume so you can log back in later and find it.
• To understand, in aggregate, how much the AI features cost to run and how the tool is being used — not to read individual resumes for any purpose other than generating your review.
• To read and act on the feedback you send us.
• To respond if you contact us directly.

We do not sell your information. We do not use your resume or the details you provide to train our own AI models, and we do not use them to serve you ads — we don't run any advertising on this site.

Who we share it with

We keep the list of people and companies who see your information as short as possible. Here's everyone:

That's the complete list. We don't run analytics or tracking scripts, we don't share information with data brokers or advertisers, and we don't have any other integrations today. If we add paid features that require a payment processor, we'll add it to this table and update the "last updated" date before that processor sees any of your information.

Cookies & local storage

The Service uses one functional session cookie to keep you signed in and to remember where you are in the review flow. It's required for the Service to work and isn't used for advertising or cross-site tracking. We don't use third-party analytics or ad cookies. See "Stored only on your device" above for what's kept in local storage instead of a cookie.

Data retention

The resume text you upload is deleted within 24 hours of your review being generated, along with the IP address and browser user-agent recorded with it. This runs automatically on a schedule — you don't have to ask.

If you don't create an account, that's the whole story: your review, your answers, and everything else tied to your session are deleted within 24 hours too. Nothing of yours is left.

If you do create an account, we still delete the uploaded resume text on the same 24-hour clock — but we keep what we generated for you (your review, your rewritten resume, its revision history, and your cover letters) until you delete them or close your account. That's the feature you signed up for: logging back in later and finding your finished resume. If you'd rather nothing be retained at all, don't create an account.

Account profile data. If you create an account, we also retain a structured profile of information you've told us about your career goals, preferences, and feedback on past drafts — for example, target roles, seniority level, and clarifications you've given us. This profile does not include the text of any resume or document you upload, or the raw text of your answers — those are deleted within 24 hours regardless of account status, same as above. We keep your profile so that each new resume, rewrite, or cover letter we generate for you reflects what you've told us, rather than starting over each time. You can view, edit, or delete individual facts in your profile — or clear it entirely — at any time from your dashboard, and deleting your account deletes it permanently.

You can ask us to delete account-retained data sooner at any time; see "Your choices & rights" below. Anonymous, aggregated operating metrics (how many reviews ran and roughly what they cost us) are kept longer — they contain no personal information and can't be traced back to you.

Your choices & rights

You can ask us, at any time, to:

• Access a copy of the information we hold about you.
• Correct information that's inaccurate.
• Delete your account, saved reviews, and associated data.
• Export your saved resume, review, and cover letter in a readable format.

Your account profile (see "Data retention" above) is self-service today — view, edit, or delete any fact, or clear the whole profile, from your dashboard. There's no self-service "delete my account" button in the product yet for everything else — email us at the address in "Contact us" below and we'll handle it by hand. We aim to complete these requests within 30 days.

If you're a California resident, the rights above are consistent with what the California Consumer Privacy Act gives you (access, deletion, correction, and portability), and we don't sell or "share" your personal information as those terms are defined under California law. If you're in the UK, EU, or another jurisdiction with its own data protection law, the same rights apply, along with the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority — the basis we rely on to process your information is your consent (when you submit your resume and answers) and, for account features, performance of the arrangement you asked us for by creating an account.

Children's privacy

The Service isn't directed at children under 13, and we don't knowingly collect information from anyone under 13. You must be at least 16 to use the Service, or have a parent or guardian's permission if you're younger — see the Eligibility section of our Terms. If we learn we've collected information from a child under 13, we'll delete it — contact us if you believe that's happened.

Security

We use reasonable administrative and technical safeguards to protect your information — for example, account passwords are stored as one-way hashes, never in plain text, and the admin dashboard used to view submissions is password-protected and not linked from any public page. That said, no method of transmission or storage is 100% secure, and we can't guarantee absolute security. If you believe you've found a security issue with the Service, please contact us — we'd genuinely rather hear about it directly than have it found some other way.

Where your data lives

The Service is hosted in the United States. If you're using it from outside the US, your information will be transferred to, stored, and processed in the US, where privacy laws may differ from those in your country.

Changes to this policy

If we make material changes to how we handle your information, we'll update the "last updated" date at the top of this page and, where practical, note the change on the site. Continuing to use the Service after an update means you accept the revised policy.

Contact us

Questions, feedback, or a request about your information — access, correction, deletion, export? The end-of-review feedback questions are the fastest way to reach us right now; we read every one directly. We'll add a dedicated support email here once we have a domain to run it from.