Privacy Policy

Last updated: July 24, 2026

This policy explains what data Resume Tailor Agent ("we", "us") handles, why, how long we keep it, and the choices you have. It covers both our web application and our Chrome browser extension. Questions? Email privacy@resumetailoragent.ai.

The short version

• We collect only what's needed to tailor your resume and fill applications for you.
• The resume parsing that builds your profile happens locally in your browser — that step uploads nothing.
• When you tailor a resume, your resume text and the job description are sent to our own servers and processed by an AI subprocessor under contract.
• We never sell your data and never use it to assess creditworthiness.
• Passwords and credential fields are never sent to AI models.
• You can export or delete your data at any time.

What we collect and why

Information you give us

• Account information — your email and authentication credentials so you can sign in (handled by our provider, Supabase).
• Your resume — the file and its extracted text (contact details, work history, education, skills, links), used to build your profile, tailor your resume, and fill applications.
• Profile details you add or edit — anything you correct or add to the profile the extension pre‑fills from your resume.

Information the extension reads to do its job

• Job‑posting content — when you open a posting and click the extension, it reads that page so it can tailor your resume and score the match.
• Application form content — during Auto Apply, it reads the fields of the application form on the employer's site so it can fill them with your information.
• The extension reads a page only after you act on it. It does not track your browsing history or read pages in the background.

Information created by using the service

• Tailored resumes and match scores you generate.
• Application activity (which jobs you tailored for and applied to) for your dashboard.
• Technical diagnostic logs used to make auto‑apply reliable and to debug failures, kept free of sensitive field values.

What we do NOT collect

• No health, financial, or payment data (the beta is free).
• No GPS/IP‑based location tracking.
• No personal communications (emails, texts, chats).
• No clickstream or keystroke logging. The extension generates input to fill forms; it does not record your activity.

Local, on‑device processing

The step that reads your uploaded resume to pre‑fill your profile runs entirely in your browser. The parsed fields are shown to you for review and are not uploaded as part of that parsing step. Data leaves your device only when you take an action that requires it — signing in, saving your profile, tailoring a resume, or applying to a job.

When your data leaves your device, where it goes

AI processing

To tailor resumes and score matches we use third‑party AI providers as subprocessors, under agreements that prohibit them from using your data to train their models. We send only what's needed (your resume text and the job description). Password and credential fields are filtered out before any AI call and are never included in AI prompts.

Advanced users may optionally enable a "bring‑your‑own‑key" mode and route AI processing through their own provider account or a local model. This is off by default; if you enable it, your data goes to the provider you configured under that provider's terms.

Third parties / subprocessors

We share data only with service providers who process it on our behalf to run the service:

• Supabase — authentication, database, and storage.
• Our hosting / AI providers — to generate tailored resumes.
• Google Drive — only if you connect it, and only to save your resumes to your own Drive.

We do not sell or rent your personal data, and we do not share it for advertising.

How long we keep data

We keep your account, profile, resumes, and application history until you delete them or close your account. Diagnostic logs are retained for a limited period for reliability and debugging, then deleted. When you delete your account, we delete your personal data from our active systems within 30 days, except where we must retain limited records to comply with law.

Your choices and rights

• Access / export — download your data from your dashboard or by request.
• Correction — edit your profile at any time in the extension or web app.
• Deletion — delete individual resumes/applications, or your whole account.
• Disconnect Google Drive — revoke access anytime from settings; this deletes the stored tokens.
• Regional rights — depending on where you live (e.g. GDPR/UK GDPR, CCPA/CPRA) you may have additional rights to access, delete, or restrict processing, and to not have your data sold (we don't sell it). Email us to exercise them.

Security

Data is encrypted in transit (HTTPS). Access to backend systems is restricted, and rows in our database are protected by per‑user access controls. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.

Children

Resume Tailor Agent is not intended for anyone under 16, and we do not knowingly collect data from children.

Chrome Web Store compliance

Our use of information received from Chrome Web Store APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use the data described above only to provide and improve the single purpose of the extension — tailoring resumes and completing applications — and we do not transfer or sell it for unrelated purposes, advertising, or creditworthiness.

Changes to this policy

If we make material changes we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

Contact

Questions or requests: privacy@resumetailoragent.ai.