Privacy Policy

1. Who We Are

ResumeForge.ai ("ResumeForge," "we," "us," or "our") is an AI-powered resume coaching and job search platform operated by B.J. Blaker. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at app.resumeforge.ai and related services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google OAuth, we receive your name and email from Google. We do not receive or store your Google password.

Profile Information

You may optionally provide your phone number, LinkedIn URL, portfolio URL, and GitHub URL. This information is used to populate your resumes and cover letters.

Resume Content

When you upload or paste a resume, we store the extracted text content. This is sensitive personal information and is encrypted at rest in our database. Your resume content is only used to provide the AI coaching and document generation services you request.

Application Tracking Data

If you use the Application Tracker, we store the companies, roles, statuses, dates, and notes you enter. You control what you log and can delete any entry at any time.

Usage Data

We track session counts for billing and rate limiting purposes. We do not use third-party analytics or tracking pixels.

3. How We Use Your Information

• To provide AI-powered resume coaching and document generation
• To populate your resumes and cover letters with your contact information
• To track your session usage for billing purposes
• To process payments through Stripe
• To improve our services (only using anonymized, aggregate data with your explicit opt-in consent)

We never use your personal data to train AI models. Your resume content is sent to our AI providers (Google Gemini and Anthropic Claude) only to process your specific requests, and is subject to their respective data processing agreements.

4. Data Storage and Security

Your data is stored in Supabase (hosted on AWS) with the following protections:

• All data encrypted at rest and in transit (TLS 1.2+)
• Row Level Security (RLS) policies ensure users can only access their own data
• API keys and secrets stored as environment variables, never in source code
• Authentication handled by Supabase Auth with secure session management

5. Payment Processing

Payments are processed by Stripe. We never see, store, or have access to your credit card number. Stripe's privacy policy governs the handling of your payment information. We only store your Stripe customer ID to associate purchases with your account.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• AI Providers: Resume content is sent to Google (Gemini) and Anthropic (Claude) to process your AI requests. These providers process data according to their data processing agreements and do not use your data for model training.
• Payment Provider: Stripe processes your payment information.
• Legal Requirements: We may disclose data if required by law, court order, or governmental authority.

If you opt in to aggregate data contribution, your application outcome data may be included in anonymized, aggregate reports. Individual user data is never identifiable in these reports. You can opt out at any time.

7. Your Rights

Regardless of your location, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Export: Download your data in a portable format
• Correction: Update or correct your personal information
• Deletion: Request permanent deletion of all your data
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your data for specific purposes

To exercise any of these rights, contact us at privacy@resumeforge.ai. We will respond within 30 days.

8. GDPR Compliance (European Users)

If you are in the European Economic Area, we process your data under the following legal bases: consent (for account creation and AI processing), contract performance (for providing our services), and legitimate interest (for service improvement using anonymized data). You have the right to lodge a complaint with your local data protection authority.

9. CCPA Compliance (California Users)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@resumeforge.ai.

10. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

11. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data including resumes, generated documents, conversation history, and application tracking data is permanently deleted within 30 days. Payment records may be retained as required by law for accounting purposes.

12. Children's Privacy

ResumeForge is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of ResumeForge after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: privacy@resumeforge.ai