Privacy Policy

Last updated 19 October 2026

What this covers

This policy covers the Resume Master website and web app, the Resume Master mobile apps for iOS and Android, and the Resume Master Job Importer browser extension. Where a product handles something differently, it says so below.

What we collect

  • Your account. Your email address, and your name if you give us one. We sign you in with a one-time code sent to that address, or with Google or Apple sign-in — in which case we receive the email address and name those services release to us. We never receive your Google or Apple password.
  • What you put in. Your resumes, cover letters, profile details, saved job postings and application statuses, along with any file you upload.
  • What the AI produces for you. The messages you send the assistant and the documents it writes back, kept so your work is still there next time you open the app.
  • Billing. Subscriptions bought on the website are handled by Stripe; subscriptions bought in the mobile apps are handled by Apple, Google and RevenueCat. We receive a record that a subscription is active and which plan it is. We never see or store your card number. How subscriptions renew and how to cancel is set out in the Terms of Use.
  • Product analytics. A small set of named events — app opened, signed up, resume uploaded, resume tailored, paywall seen, subscription purchased — recorded in PostHog so we can see where the product is failing people. We do not record your screen, and we do not sell any of it.
  • Device identifiers. In the mobile apps: a push notification token, so we can send the notifications you turn on; an anonymous app installation ID that PostHog uses to group the events above; and the IDs RevenueCat uses to tie a store purchase to your account. We do not use the advertising ID.
  • Email accounts, only if you connect one. If you connect Gmail, Outlook or an IMAP mailbox to track application replies, we read messages related to your applications. You can disconnect it at any time, which ends that access.

Statistics we publish

We sometimes publish statistics about the resumes made in Resume Master, such as their median length or the share of bullet points that contain a number. These are counts taken across many accounts at once:

  • They never quote, show or describe any part of a particular resume, and they never name or identify anyone.
  • Any group smaller than 50 resumes is left out, so no figure can be traced back to one person.
  • The counting runs on our own database. Nothing is sent to an AI provider or any other company to produce it.

If you would rather your resumes were left out of these counts, write to [email protected] and we will exclude your account.

AI processing (Anthropic)

Resume Master's AI features — the assistant, resume import, tailoring, cover letters, match scores and auto-apply — are powered by Claude, made by Anthropic, PBC, our only AI provider. When you use one, our servers send Anthropic what that feature needs:

  • Your resume and profile: name, contact details, work history, education, skills, and any other content in the resume being worked on.
  • Files and text you upload or paste: a resume file you import (its text, or images of its pages when it is a scan), and job postings you paste or link.
  • Saved job postings, to tailor your documents to them and to score how well you match.
  • Your messages to the assistant.

How it is collected: from what you type, upload, paste or save in the app, and from your account's resumes and profile when a feature works on them.

What it is used for: only to produce the result you asked for — a parsed profile, a tailored resume or cover letter, a match score, or the assistant's reply — which is returned to you and kept in your account.

Your permission comes first. The mobile apps show what will be sent and to whom, and send nothing to Anthropic until you tap Allow. If you allowed sharing with our previous AI provider, OpenAI, the app asks you again before sending anything to Anthropic. You can withdraw that permission at any time in Settings › AI data sharing; AI features will then ask again before sending anything.

How Anthropic protects it. Anthropic processes this data on our behalf under its commercial terms and data processing addendum. It does not use data sent through its API to train its models, keeps it for at most 30 days unless the law requires longer or it is needed to enforce its usage policy, and protects it with encryption in transit and at rest and with access controls — protection the same as or equal to what this policy promises. Anthropic receives only what the feature needs; it does not receive your password, your payment details, or your connected email account.

Applying on employers' sites

If you ask Resume Master to apply for you on an employer's own application form, it does so only for the application you approved, and only after you agreed to it once.

  • What is sent, and to whom. The employer, and the hiring system they use (for example Greenhouse, Lever, Ashby or Workday), receive what their form asks for: your name and contact details, your tailored resume and cover letter, and your answers to their questions. Answers come only from your profile, your resume, and answers you gave us yourself; we never invent one. Voluntary diversity questions are answered "decline to self-identify" unless you saved another answer.
  • How it is done. Our own servers open the employer's page in a browser we run, fill it in and submit it. No outside browser service is involved. If the page asks for a CAPTCHA or a sign-in we cannot do for you, we stop and hand it back to you.
  • What we keep. A record of what was typed into each field, screenshots of the filled form and of the employer's confirmation page (stored privately and shown only to you), the answers you chose to save for later applications, and, where an employer's system needs an account (Workday), the account we created for you there with a generated password, stored encrypted and shown only to you. All of it is deleted with your account; you can edit or delete saved answers in Settings at any time.
  • Finding the form. To find an employer's own application form we look up the job on that employer's public job board, and may run a web search (through Cloudflare) with the company name and job title. Those lookups contain nothing about you.

Once an application reaches an employer, what they do with it is governed by their own privacy policy.

The browser extension

The Resume Master Job Importer extension has one purpose: to save a job posting you are looking at into your Resume Master account so you can tailor a resume to it.

  • It runs only on the job sites named in its listing — LinkedIn, Indeed, Glassdoor, Google Jobs, Lever and Greenhouse — and only reads the posting on the page you are viewing: its title, company, location, description, salary if shown, and the posting's URL.
  • It does not read your browsing history, your other tabs, or any page on any other site.
  • It stores your Resume Master sign-in token and your chosen server address in your browser's local extension storage, so you do not have to sign in every time. Signing out of the extension deletes them.
  • It sends the posting you chose to import, and nothing else, to the Resume Master API under your account.
  • It shows a desktop notification when an import succeeds or fails.

We do not sell or transfer this data to third parties, do not use it for anything unrelated to importing job postings, and do not use it to assess creditworthiness or for lending.

Why we hold it

To run the product you asked for: to keep your documents, to let the AI work on them (see AI processing), to track your applications, to bill you if you subscribe, and to see whether the product is working. That is the whole list.

Who else sees it

Only the services we need to run it: our hosting and database provider, our AI model provider (Anthropic) for what the AI features work on, as set out in AI processing, Cloudflare for finding employers' application forms, Stripe, Apple, Google and RevenueCat for payments, Resend for the emails we send you, and PostHog for the product events above. When you ask us to apply for a job for you, the employer and their hiring system receive that application, as set out in Applying on employers' sites.

We do not sell your data, and we do not use your resumes to train AI models.

How long we keep it

For as long as you have an account. Delete your account and we delete your resumes, cover letters, saved postings and conversations. Records we are required to keep for tax and accounting — that a payment happened, and for how much — are kept as long as the law requires.

Your choices

  • Export any resume or cover letter as a PDF, at any time.
  • Allow or withdraw sharing with Anthropic in the mobile apps under Settings › AI data sharing.
  • Disconnect a connected email account in Settings.
  • Edit or delete the answers you saved for applications in Settings › Application answers.
  • Turn off the weekly summary email from Settings, or from the link at the foot of that email.
  • Remove the extension from your browser, which deletes everything it stored.
  • Delete your account in the app (Profile → settings → Delete Account); how, and what is deleted.
  • Ask us for a copy of your data, or to delete your account, by writing to [email protected].

Children

Resume Master is not intended for anyone under 16.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will say so here and update the date at the top.

Contact

[email protected]