Privacy Policy

1. Information We Collect

We collect the following categories of information when you use Resume by REWORK.:

Information You Provide

• Account Registration: Your full name, email address, and password when you create an account through Firebase Authentication
• Resume Content: The full text extracted from PDF resumes you upload, including work history, job titles, employers, education, skills, certifications, and any other information contained in your resume
• Job Descriptions: Job posting text you paste into the analyzer or job posting URLs you submit for AI-powered extraction
• Interview Responses: Your typed answers during AI interview practice sessions
• Application Data: Job application statuses, company names, roles, and notes you enter in the application tracker
• Payment Information: Billing details are collected and processed directly by Stripe — we do not store your credit card number, CVV, or full card details on our servers
• Support Communications: Emails or messages you send to our support team

Information Collected Automatically

• Usage Metrics: Which features you use (job analysis, resume tailoring, cover letters, interview practice), how many credits you consume, and timestamps of activity
• Device & Browser Data: IP address, browser type, operating system, and screen resolution — collected through standard web server logs
• Cookies: Firebase session cookies for authentication and analytics cookies to understand aggregate usage patterns

2. How We Use Your Information

Each type of data we collect has a specific purpose tied to delivering the Service:

• Resume & Job Data: Sent to Anthropic's Claude API to generate compatibility scores, tailored resumes, cover letters, interview questions, and performance insights — this is the core function of the Service
• Account Information: Used to authenticate your sessions, associate your data with your account, and send transactional emails (password resets, subscription confirmations)
• Usage Metrics: Used to enforce plan limits (e.g., tracking how many tailored resumes you have generated this month), calculate bonus credits, and identify usage patterns that help us improve the product
• Payment Information: Processed by Stripe to bill your subscription or one-time purchase, manage refunds, and detect fraudulent transactions
• Application Tracker Data: Stored to display your application pipeline and generate performance insights when the feature is available on your plan
• Expert Service Requests: Your resume and target job description are shared with assigned human expert reviewers to fulfill expert resume reviews, cover letters, or job recommendations

3. AI Processing & Your Data

Our Service relies on Anthropic's Claude AI for its core features. Here is exactly how your data interacts with AI:

• What is sent to the AI: When you run a job analysis, resume tailoring, cover letter generation, or interview practice session, the relevant text (your resume content, the job description, your interview answers) is sent to Anthropic's API as part of the request
• What Anthropic does with it: Per Anthropic's API terms, data sent through their API is not used to train their models. Anthropic may retain API inputs/outputs for up to 30 days for trust and safety purposes
• No cross-user training: Your individual resume content, job descriptions, and generated outputs are not used to train, fine-tune, or improve AI models that serve other users of our platform
• Anonymized analytics: We may analyze aggregated, de-identified patterns (e.g., which industries have higher ATS scores, common missing keywords) to improve our prompts and feature quality — no individual resume content is included in these analyses

4. Third-Party Services & Data Sharing

We do not sell your personal information or resume data. The following third-party services receive your data as necessary to operate the Service:

• Firebase / Google Cloud (Authentication & Database): Stores your account credentials, resume data, analysis results, application history, and usage records. Data is hosted on Google Cloud infrastructure. Subject to Firebase Terms of Service
• Anthropic (AI Processing): Receives your resume text and job descriptions to generate analyses, tailored content, and interview responses. Subject to Anthropic's API Terms
• Stripe (Payment Processing): Processes all subscription and one-time payments. Stripe receives your billing information directly — we only receive confirmation of payment status, subscription tier, and transaction IDs. Subject to Stripe's Privacy Policy
• Human Expert Reviewers: If you use expert services, your resume and relevant job descriptions are shared with vetted professional resume writers and career coaches for the sole purpose of providing their review

We may also share data in these limited circumstances:

• Legal Requirements: When compelled by law, court order, or government regulation, or to protect the rights, safety, or property of REWORK. or its users
• Business Transfers: In connection with a merger, acquisition, or sale of assets — you would be notified before your data is transferred to a new entity

5. Data Security

We implement the following security measures to protect your data:

• Encryption in Transit: All connections to the Service use HTTPS with TLS encryption
• Encryption at Rest: Data stored in Firebase/Firestore is encrypted at rest using Google Cloud's default encryption
• Authentication Security: Passwords are hashed by Firebase Authentication — we never store or have access to your plaintext password
• Payment Security: Credit card data is handled entirely by Stripe, which is PCI DSS Level 1 certified. Card details never touch our servers
• Access Controls: Access to production databases and admin tools is restricted to authorized personnel
• API Security: Communication with Anthropic's API uses encrypted API keys and HTTPS connections

While we take reasonable measures to protect your data, no system is completely immune to security incidents. If we discover a breach affecting your personal data, we will notify affected users by email within 72 hours of confirmed discovery.

6. Your Rights & Controls

You have the following rights regarding your data:

• Access & Export: You can view all your stored resumes, analyses, generated cover letters, and application data through your dashboard. Request a full data export by emailing support@resume.reworkdigital.io
• Correction: Update your name, email, and profile information from your account settings at any time
• Deletion: Request complete deletion of your account and all associated data by emailing support@resume.reworkdigital.io. Deletion is processed within 30 days. This includes your resumes, analyses, generated content, application history, and usage records
• Subscription Management: Manage, upgrade, downgrade, or cancel your subscription through the billing page in your dashboard, powered by Stripe's customer portal
• Marketing Opt-Out: We send transactional emails only (account confirmations, password resets, subscription updates). If we introduce marketing emails in the future, you will be able to unsubscribe with one click

For Canadian residents: You have rights under PIPEDA (Personal Information Protection and Electronic Documents Act) regarding access, correction, and deletion of your personal information. For EU/EEA residents: You have rights under GDPR including data portability, restriction of processing, and the right to object. Contact support@resume.reworkdigital.io to exercise any of these rights.

7. Data Retention

We retain your data according to the following schedule:

• Active Accounts: All data is retained for as long as your account is active and you continue to use the Service
• Account Deletion: Upon your deletion request, all personal data — including resumes, analyses, generated content, application history, and usage records — is permanently deleted within 30 days
• Inactive Accounts: If your account has been inactive for 24 months with no logins, we may send a reactivation email. If there is no response within 30 days, we may delete the account and its data
• Payment Records: Transaction records may be retained for up to 7 years as required for tax and accounting compliance, even after account deletion. These records contain only transaction IDs, amounts, and dates — not your resume content
• Anonymized Data: Aggregated, de-identified analytics data (feature usage trends, industry statistics) may be retained indefinitely as it cannot be linked back to any individual

8. Cookies & Tracking

We use cookies and similar technologies for the following purposes:

• Authentication Cookies (Essential): Firebase session cookies that keep you logged in. These are required for the Service to function and cannot be disabled
• Preference Cookies (Functional): Remember your settings such as selected resume, billing interval preference, and dashboard layout
• Analytics Cookies (Optional): Help us understand aggregate usage patterns — which features are most used, where users encounter issues, and general traffic metrics

We do not use advertising cookies or tracking pixels. We do not serve ads on the Service. You can manage cookie preferences through your browser settings — note that disabling essential cookies will prevent you from staying logged in.

9. Children's Privacy

The Service is designed for individuals seeking employment and is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has created an account, please contact us at support@resume.reworkdigital.io and we will promptly delete the account and associated data.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our data practices, features, or legal requirements. When we make material changes, we will notify registered users by email and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is handled, contact us at:

Email: support@resume.reworkdigital.io
REWORK.
Toronto, Ontario, Canada

We aim to respond to all privacy-related inquiries within 5 business days.