Privacy Policy

1. Introduction

TailoredResume ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights over your data. By using our Service, you agree to the collection and use of information in accordance with this Policy.

2. What Data We Collect

• Account Data: Your email address and hashed password (or OAuth token) managed securely through Supabase Auth.
• Master Profile: Employment history, education, skills, certifications, and any other professional information you enter. This is the core data used to generate your resumes.
• Job Descriptions: The job posting text you submit for tailoring. This is processed transiently and not retained beyond your session.
• Generated Resumes: The AI-produced resume outputs are stored and linked to your account. Only your 10 most recent generations are retained; older ones are automatically deleted.
• Usage Data: Anonymized analytics such as feature usage, page views, and error logs used to improve the Service. We do not sell this data.
• Billing Data: Payments are processed by Stripe. We store only your Stripe customer ID and subscription status — never raw card numbers or CVV codes.

3. How We Use Your Data

• To deliver, maintain, and improve the resume tailoring Service.
• To process payments and manage subscriptions.
• To send you transactional emails (e.g., email confirmation, billing receipts).
• To enforce our Terms of Service and prevent abuse.
• We do not sell, rent, or trade your personal data to any third parties.

4. Third-Party Services & AI Processing

To provide the tailoring Service, your Master Profile and job description are transmitted to Google Gemini API for AI processing under a server-side API call. This transmission occurs over TLS-encrypted connections.

Other third-party services we use:

• Supabase — Database, authentication, and file storage (hosted in a secure cloud environment)
• Stripe — Payment processing
• Netlify/Vercel — Hosting and serverless API execution

5. Data Security

We implement industry-standard security measures including:

• Row Level Security (RLS) in Supabase — your data is only accessible by your authenticated session
• All data in transit is encrypted via TLS 1.2+
• All data at rest is encrypted in the Supabase PostgreSQL database
• Server-side API keys are never exposed to the client

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction (including BC, Canada and EU/EEA under GDPR), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data (the "right to be forgotten")
• Port your data in a machine-readable format
• Object to processing of your data in certain circumstances

To exercise any of these rights, email privacy@tailoredresume.online. We will respond within 30 days.

7. Cookies

We use only essential session cookies required for authentication. We do not use advertising trackers, third-party marketing cookies, or fingerprinting scripts.

8. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the Service at least 14 days before the changes take effect.

10. Contact

For privacy-related inquiries or data deletion requests, contact:
privacy@tailoredresume.online