Privacy Policy

[DRAFT — placeholder content. Not reviewed by counsel. Every bracketed item below is an open decision tracked in docs/legal/legal-docs.plan.md (C1). Do not treat this text as a commitment until the draft flag is removed.]

Who we are

[PLACEHOLDER — operating entity name, legal form, registered address, and how to contact us (see Your rights). Blocked on the entity decision (C1.1).]

What we collect

• Account and sign-in data. When you sign in with Google, Apple or LinkedIn we receive your name, email address, profile picture and an identifier from that service.
• Profile data you enter. Work history, education, skills, and the other resume content you create or edit in OneResume.
• Uploaded resumes and parse artifacts. If you upload an existing resume, we store the file and the structured data our parsing pipeline extracts from it, so you can review and correct the result.
• Job postings you send us. When you send a posting — with our browser extension or by pasting it — we store the page's text as you reviewed it, its address, and what we read from it (the role, the employer, what it asks for, and, where the page states them, who posted it and when).
• Match checks and tailored resumes. How your profile answers each posting, the corrections you make to those answers, and the resume you shape for that job.
• Applications you record. When you mark a job as applied, we keep the date, the employer and poster, how your profile matched the posting at that moment, and a copy of the resume you downloaded for that job, if you did. You can add as much as you like: your cover letter, the people involved (recruiters, interviewers, referrers) and how to reach them, each interview and follow-up, what pay was discussed, the outcome, and your own notes.
• Contacts and to-dos. The people you save while looking for work — their name, company, role, how you know them, how to reach them, your notes about them, and what you did or plan to do with them — and the to-dos you add, with their dates. When you send a page with people on it from our browser extension, our AI provider reads it to find the people on it (name, title, company, and how you are connected).
• Your old OneResume profile. If you used the old OneResume, the export of your old profile, held for you to claim.
• Technical data. Standard server logs (IP address, browser type, timestamps) kept for security and troubleshooting, and, when the product fails, a record of the failure tied to your account.

No other company collects information about your activity across websites through OneResume.

What we use it for

• Providing the product: rendering your resume in the designs you choose, keeping it current, and sharing it where you decide.
• Parsing uploads into editable profile data, which uses an AI text extraction service (see subprocessors below).
• Reading job postings, checking your profile against them, and tailoring a resume for a job, which uses the same AI service.
• Account security, abuse prevention, and support.
• Recruiter features you use: letting a recruiter you connect with or share with read what you share and check it against their positions.
• Apps you connect: giving an app you connect your profile, and emailing you about your account and the recruiters you deal with.

Recruiters you connect with or share a resume with can read what you share and check it against their positions; a check they made stays with them after you stop sharing.

Who receives your data

• our hosting provider, Amazon Web Services;
• our AI provider, OpenAI, which reads resume files, profiles, job postings, positions and pages sent to it (see Our AI provider);
• the sign-in service you use: Google, Apple or LinkedIn;
• our email provider;
• our error-reporting provider, Sentry, which receives what failed, when, on which page, and your account identifier;
• recruiters you connect with or share with;
• apps you connect;
• anyone you share a resume link with.

Our AI provider

We don't collect, use or sell personal data to train large language models.

Your rights

You can review and change your profile and the other data you entered in the product. If the law where you live gives you rights over your personal data — to see it, correct it, delete it or get a copy — contact us [mechanism]. If we decline a request, you can appeal the same way.

Changes to this policy

When we change this policy we post the new version here with its date. If the change is material, we may ask you to accept it when you next sign in.