Privacy Policy

1. Information We Collect

Processed in memory only (never stored):

• ▸Your resume text (uploaded PDF, DOCX, or pasted text)
• ▸The job description you provide
• ▸Resume text and job descriptions submitted to the free ATS Resume Checker (no account needed — analyzed and immediately discarded)
• ▸Answers you give in the free interview practice (scored in memory and immediately discarded)
• ▸Your chosen resume style, layout, and theme preferences
• ▸Interview narrative you share with the Interview Coach
• ▸Career questions and preferences you provide to the AI Career Advisor

Stored in your account:

• ▸Name and email address — used to identify your account and send transactional emails (e.g. subscription confirmation). Never sold or shared.
• ▸Saved resumes and packages — only if you explicitly save them to your profile. Accessible only by you.
• ▸Billing information — handled entirely by Stripe. resuFresh never sees, stores, or has access to your card number or billing details.
• ▸Name, job title, and company — if you submit a review. Used only to display the review on the site if we choose to feature it.
• ▸Free-trial usage counter — a salted, irreversible hash of your IP address, stored only to limit the free mock-interview trial to two sessions per visitor. It cannot be reversed to identify you, is not linked to any account, and contains no browsing data.

We do not collect any other personally identifiable information unless you explicitly provide it.

2. How We Use Your Information

Your resume, job description, interview narratives, and career questions are sent to our AI provider (Anthropic, makers of Claude) solely for the purpose of generating your results — tailored resume, cover letter, analysis, interview coaching, and career guidance. This data is:

• ✓Processed in memory and never written to a database
• ✓Not used to train AI models
• ✓Not shared with third parties for marketing or advertising
• ✓Deleted immediately after your session ends

3. Cookies & Local Storage

resuFresh uses browser local and session storage for a limited set of functional purposes:

• themeRemembers your dark/light mode preference
• rf_cookie_consentRemembers your answer to the cookie/storage notice so we don't ask again
• chatNudgeSeenTracks whether you have dismissed the chat assistant tooltip
• rf_onboardedTracks whether you have seen the onboarding tip
• mi_audio_prefRemembers whether you want interview questions read aloud in the mock interview
• rf-practice-libraryYour mock-interview practice recordings, if you choose to save them — stored in this browser's database (IndexedDB) on your device only and never uploaded. View or delete them at /practice-library.
• rf_visit_trackedSession-storage flag (cleared when the tab closes) so a visit is counted once. The visit counter stores only a timestamp — no IP address, no identifiers.

We do not use analytics cookies. Our marketing pages load the Google Ads tag (gtag.js), which may set Google cookies used to measure ad conversions (e.g. confirming that a signup came from an ad). This is used for aggregate campaign measurement only — we do not run remarketing lists or sell data. You can opt out of Google's ad personalization at adssettings.google.com.

4. Third-Party Services

resuFresh uses the following third-party services:

• ▸Anthropic (Claude) — Processes AI requests to generate your resume, cover letter, analysis, interview coaching (Interview Coach), career guidance (AI Career Advisor), and the free ATS checker results. Does not use API-submitted content to train models by default. Your content is not retained beyond the API request lifecycle.
• ▸Stripe — Handles all payment processing. Your card number and billing details go directly to Stripe and are never seen or stored by resuFresh. Stripe is PCI-DSS compliant.
• ▸Resend — Delivers transactional emails (verification, password reset, subscription confirmations) to the email address on your account.
• ▸Better Stack — Error monitoring. If the site encounters a technical error, a report (error message, browser/OS info) is sent so we can fix it. Reports do not include your resume content.
• ▸Supabase — Hosts our database. Stores your account data (name, email, plan status), anything you explicitly save to your profile, and anonymous usage counts. Data is encrypted at rest.
• ▸Google (sign-in) — If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account to create and identify your resuFresh account. We receive nothing else from Google.
• ▸Google Ads — Conversion measurement on marketing pages via the Google tag (gtag.js) — tells us, in aggregate, when an ad leads to a signup. See the Cookies section above.

5. Data Security

All data transmitted between your browser and our servers is encrypted via HTTPS. Aside from content you explicitly save to your profile, we do not persist your resume data — so the analysis content you run through resuFresh cannot be exposed in a breach. In the unlikely event of a data breach affecting your personal information, we will notify affected users promptly via email — within 72 hours of becoming aware of the incident where possible — in accordance with applicable US state laws.

6. Your Rights

If you use resuFresh without an account, no personal data is stored — there is nothing to delete. If you have a paid account, you may cancel at any time from your account settings. Your saved data is retained for 30 days after your billing period ends following cancellation, giving you a window to reactivate and recover your account. After that window, all saved resumes, packages, and account data are permanently deleted. Free accounts that never upgrade to a paid plan are automatically deleted (with their saved data) 30 days after account creation, and promotional-access accounts that do not upgrade are deleted 30 days after the promotional access ends.

Regardless of where you are located, you have the right to:

• ▸Access the personal data we hold about you — email us at help@resufresh.com to request a copy
• ▸Delete your account and all associated data at any time from your account settings
• ▸Correct inaccurate personal data by updating your profile or contacting us
• ▸Object to or restrict processing of your personal data by contacting us
• ▸Receive your data in a portable format upon request

California residents (CCPA/CPRA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell your personal information to third parties.

EEA/UK residents (GDPR): Our lawful basis for processing your personal data is the performance of a contract (providing the service you signed up for) and legitimate interests (improving the product). You have the right to lodge a complaint with your local data protection authority.

7. Children's Privacy

resuFresh is not directed at children under the age of 13. We do not knowingly collect information from anyone under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with a revised "Last updated" date at the top of this page.

9. Contact

Questions about this Privacy Policy? Reach us at help@resufresh.com