This Privacy Policy explains how resumeFORGE ("we", "us", "our") collects, uses, and protects your information when you use our service. We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

Account information: Email address and authentication credentials (managed via Supabase Auth).

Resume data: Personal information you provide for resume generation, including name, contact details, work history, education, skills, and any other information you enter into your profile or resume configuration.

Job data: Job titles, company names, job descriptions, and related information you provide or that is scraped from LinkedIn at your request.

Usage data: Feature usage counts (generations, analyses), subscription status, and basic interaction data to operate the Service.

Payment information: Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other payment credentials. We retain only your Stripe customer ID and subscription status.

2. How We Use Your Information

We use your information solely to:

Provide the Service: generating resumes, cover letters, and fit analyses
Process payments and manage subscriptions via Stripe
Enforce usage limits for free tier accounts
Communicate with you about your account, service updates, or material changes to these policies
Improve the Service based on aggregate, anonymized usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate resumeFORGE:

Supabase — Authentication and database storage. Your account data and resume configuration are stored in Supabase (hosted on AWS).
Anthropic (Claude API) — AI model provider for resume and cover letter generation. Job descriptions and resume data are sent to Anthropic's API for processing. Anthropic does not use API inputs to train models per their data policy.
Stripe — Payment processing. Stripe handles all payment data under their own Privacy Policy.
Vercel — Frontend hosting.
Fly.io — Backend API hosting.

4. Data Storage & Security

Your data is stored in Supabase (PostgreSQL on AWS infrastructure) with row-level security policies that ensure users can only access their own data. All data is transmitted over HTTPS. We use Supabase Auth for authentication and do not store passwords directly.

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Anonymized, aggregate data may be retained indefinitely.

6. Your Rights

You have the right to:

Access your personal data stored in the Service
Export your resume configuration and profile data
Correct inaccurate data via your profile settings
Delete your account and associated data
Cancel your subscription at any time

To exercise any of these rights, contact us at support@resumeforge.coach or use the relevant features within the Service.

7. Chrome Extension

The optional resumeFORGE LinkedIn Job Search Chrome extension enables LinkedIn job searching from your resumeFORGE dashboard. The extension:

Checks your LinkedIn login status by reading the LinkedIn authentication cookie (li_at) to verify you are signed in. This cookie value is never transmitted to our servers.
Opens LinkedIn search pages in background browser tabs using your existing session, reads job listing information (title, company, location, URL), and immediately closes the tabs.
Sends job data only to your resumeFORGE account via the resumeFORGE API. No data is sent to any other third party.
Stores only basic status information locally (last search timestamp and count) using Chrome storage.

The extension does not collect, store, or transmit your LinkedIn credentials, personal profile data, connections, messages, or any information beyond public job listing details. It does not modify any LinkedIn content or interact with LinkedIn on your behalf.

8. Cookies & Tracking

We use essential cookies for authentication and session management. The Chrome extension reads LinkedIn's authentication cookie solely to verify login status (see Section 7). We do not use third-party advertising cookies or tracking pixels. We do not track you across other websites.

9. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

Your data may be processed in the United States where our service providers operate. By using the Service, you consent to the transfer of your data to the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. The "Effective" date at the top of this page indicates when this policy was last revised.

12. Contact

Questions or concerns about this Privacy Policy? Contact us at support@resumeforge.coach.