Privacy Policy

What we collect

What you hand us.

• Your resume file, and the contents we parse out of it: work history, education, skills, dates, and anything else printed on it.
• Your name, email address, phone number, city and state, and LinkedIn URL.
• What you are looking for: target titles, salary floor, remote and onsite preference, and whether you need visa sponsorship.
• The 5 intake answers. What you love doing, what drains you, what a good team looks like, what postings ask for that you honestly do not have, and anything else you want the operator to know.
• Your account login. Passwords are stored hashed. If you sign in with Google, GitHub or LinkedIn, we get the basic profile that provider hands over.
• Anything you type into the support chat or email us.

What we collect automatically.

• Pages you visit and what you click, plus product events like uploading a resume or starting a trial.
• Error reports, and session recordings of what happened in the browser around a crash.
• Your IP address, browser and device.

Payment details. Your card never touches our servers. Stripe collects it and holds it. We keep a Stripe customer id and the state of your subscription. We never see the full card number.

Cookies, including one set before you agree to anything

• A session cookie that keeps you logged in. Without it there is no site.
• rr_attr, the attribution cookie. A script on the Reverse Recruiter landing page and on the reverse-recruiting explainer pages writes it, and it records the ad or link that brought you: utm tags, an ad click id, the referring site, the page you landed on, and the time. It is only written when there is something to record — arrive with no utm tags and no outside referrer and no cookie is set at all. It is set on arrival, before you have an account and before you have agreed to anything. It lasts 90 days. First touch wins, so it is written once and never overwritten. Clearing your cookies removes it.
• rt_anonymous_id, which ties the pages you looked at before signing up to your account afterwards.
• Cookies set by the analytics, support and anti-bot services named below.

We do not run an advertising pixel that follows you around other sites.

Who sees it, by name

This is the whole list. If a company is not on it, it does not get your data.

• The operator, Brayan Londono. He reads your resume, your answers and your audit, because he is the person doing the work. LinkedIn.
• The employers we apply to. Your resume, your contact details and whatever their application form asks for. This is the point of the service. What they then do with it is governed by their own privacy policy, not ours.
• OpenAI. Parses your uploaded resume into fields so you do not retype it, and rewrites it for a specific job. Your resume text and the job description go to their API.
• Stripe. Payments and subscriptions. Your name, email and card.
• Resend. Sends every email we send you: account verification, role announcements, the trial-ending notice.
• Fly.io. Hosts the application and the database, in the United States. Your resume file is stored there.
• Sentry. Error monitoring, including a replay of the session around an error.
• PostHog. Product analytics. Which pages, which clicks, which step people quit on.
• LogRocket. Session recording for signed-in users, identified with your name and email.
• Crisp. The support chat. It receives your email, name and username so a conversation is not anonymous.
• HubSpot. Receives your name and email when you create an account, so we have a way to reach you.
• Google. Tag Manager loads our analytics tags, and reCAPTCHA checks that a sign-up, a sign-in, a password reset or a resume upload came from a person rather than a script. It sees your IP address on those pages and nowhere else on the site.

We also disclose data if the law genuinely requires it, and if the business is ever sold your data moves with it under this same policy.

We do not sell your personal data

Your resume goes to employers because you asked us to send it there. That is the only place it travels for a commercial reason.

How long we keep it

• Setup you never finished. If you upload a resume and stop before paying, the whole thing expires after 14 days. We then wipe the file, the parsed contents and your answers, and delete the stored file itself.
• Members. Kept while your membership is live, because the operator needs it to do the work, and afterwards until you delete your account.
• Billing records. Stripe keeps what it has to for tax and accounting, on its own schedule.
• Analytics, error and session data. Held by PostHog, Sentry and LogRocket on their own retention schedules, not ours.

Deleting it

There is a Delete Profile button on your profile page. It removes your account, your membership, your applications, your worklog and your saved resumes. It is not reversible.

One honest caveat, because a privacy policy that overpromises is worthless: the uploaded resume file is stored as a separate record, and that button does not always remove it. Email hello@resumetailor.ai and we delete the file by hand, same day. We are fixing this so the button does all of it.

Cancelling is not deleting. Cancelling stops the billing. Deleting removes the data. You may want both.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@resumetailor.ai and we answer within 30 days. We will not make you jump through a support queue, and we will not charge you for it.

You can unsubscribe from marketing email at any time. Service email is different: a role announcement, or a notice that your card is about to be charged, is part of the product and stays on while you are a member.

Security

Traffic is encrypted in transit. Passwords are hashed, never stored in the clear. The database sits on a private volume at our host. One person has access to member data.

We are a small operation and we hold no security certification. We are not going to claim otherwise. If we ever lose control of your data, we will email you and tell you what happened.

Children

This is a job search service for adults. It is not for anyone under 18, and we do not knowingly collect their data. If a child has signed up, email us and we will delete the account.

Changes

If this policy changes in a way that affects what we collect or who sees it, we email members before it takes effect. The date at the top of this page always tells you when it last moved. The Terms of Service cover the rest of the relationship.

Contact

hello@resumetailor.ai. One person reads it, and that person is the operator.