Privacy Policy

Last updated: June 2026

This Privacy Policy explains what information ResumeForge ("we", "us") collects, how we use it, and the choices you have. By using ResumeForge — the website and the optional Auto-Apply Chrome extension — you agree to this policy.

1. Information we collect

Account details: your name and email address when you sign up. Your password is never stored in readable form — only a securely salted, hashed version (PBKDF2-HMAC-SHA256).
Profile inputs: the GitHub and LinkedIn information you provide so we can generate your resume, plus contact fields you enter (phone, location, links).
Generated content: the resumes, tailored resumes, CVs, and cover letters you create, saved to your account so you can access your history.
Application data: the jobs you track and their status, stored in your account.
Profile vault: details used to auto-fill applications (name, email, phone, location, links, skills, work-authorization preference).
Usage events: anonymous, aggregated events (e.g. "a resume was generated") to understand how the product is used. These do not include your resume content.

2. How we use your information

To generate, store, and let you download your resumes and related documents.
To match you to roles, search jobs, and tailor resumes to specific job descriptions.
To let the Chrome extension fill application forms with your vault data at your request.
To keep your account secure and improve the product.

3. AI processing

To generate and tailor resumes, the relevant content you submit is sent to a third-party AI provider (Google's Gemini API) for processing. We send only what is needed to perform the task you requested. We do not sell your data, and we do not use it to train our own models.

4. The Auto-Apply Chrome extension

The extension only acts when you click to fill a form. It reads the fields on the job page you are viewing and fills them using your vault data and your chosen resume. It never submits an application on its own — you always review and click submit yourself. Your data is sent only to your ResumeForge account's backend, never to third parties introduced by the page.

5. Where your data is stored

Account data, resumes, applications, and vault details are stored in our managed PostgreSQL database (hosted on Supabase). Reasonable technical measures are used to protect it. Your browser also stores a login token and some preferences locally (via localStorage) so you stay signed in.

6. Sharing

We do not sell or rent your personal information. We share data only with the service providers needed to run ResumeForge (e.g. our hosting and AI providers) and only as required to deliver the service, or where required by law.

7. Your choices and rights

You can edit your vault and account details at any time.
You can request deletion of your account and associated data by emailing us.
You can use ResumeForge without the extension; the extension is entirely optional.

8. Children

ResumeForge is intended for users seeking employment and is not directed at children under 16.

9. Changes

We may update this policy as the product evolves. Material changes will be reflected on this page with a new "last updated" date.

10. Contact

Questions or data requests: resumeforgeofficial@gmail.com

This document is provided for transparency and is not legal advice. Consider having a lawyer review it before a public launch.