Privacy Policy
Last updated: March 2026
1. What we collect
We collect only what is necessary to provide our service. This includes:
- Email address — used for account authentication via magic links. We do not require a password.
- Career profile data — your name, job titles, skills, experience descriptions, and bullet points that you enter when building your profile.
- Job descriptions — the text of job postings you paste into the application for analysis.
- Resume content — text extracted from resumes you upload or create within the application.
- Tailored resumes — the results of each tailoring run (job title, company, and the tailored resume content), saved to your account so you can find them later.
- Usage data — basic analytics such as pages visited and features used, to improve the product.
2. How we use it
Your data is used to:
- Authenticate your account and send you magic link sign-in emails.
- Analyze job descriptions and compare them against your career profile to generate match reports.
- Generate AI-powered suggestions for reframing resume bullets and identifying skill gaps.
- Export tailored resumes as PDF or DOCX documents.
- Process payments if you buy a credit pack.
We do not sell your personal data. We do not use your resume content for advertising. We do not share your data with third parties for their marketing purposes.
3. Third-party services
We use the following third-party services to operate AutoTailorMyResume. Each processes data only as necessary to provide their service:
- Supabase — database hosting and authentication (stores your account and profile data).
- OpenAI — AI processing for job analysis, profile extraction, match scoring, and bullet reframing. Job description text and resume content are sent to OpenAI for processing. OpenAI does not use this data to train their models when accessed via their API.
- Stripe — payment processing for credit pack purchases. We do not store your credit card details; Stripe handles all payment data.
- Vercel — application hosting and deployment.
- PDFShift — PDF document generation for resume exports.
4. Data storage and security
Your data is encrypted in transit (TLS) and at rest. We use industry-standard security practices to protect your information. Access to production data is restricted to authorized personnel only.
We retain your data, including your saved tailored resume results, for as long as your account is active. Results that are not tied to a verified email address are deleted after 7 days. When you ask us to delete your data, we remove it within 30 days. Payment and tax records held by Stripe and by us are kept as long as the law requires.
5. Your rights
You have the right to:
- Access your data — you can view all your profile data within the application at any time.
- Export your data — you can download your resume content as PDF or DOCX.
- Delete your data — there is no delete button; we delete it for you on request.
To delete your data, contact us at . We delete it by hand after confirming the request comes from you, within 30 days.
- Correct your data — you can edit your profile information at any time through the application.
If you are located in a jurisdiction with specific data protection rights (such as the EU or California), we will honor those rights. Contact us and we will respond promptly.
6. Cookies
We use only essential cookies required for the application to function. These include authentication session cookies that keep you signed in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
7. Changes to this policy
We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice within the application. Continued use of the service after changes constitutes acceptance of the updated policy.
8. Contact
If you have questions about this privacy policy or how we handle your data, reach out via our contact page.