Privacy Policy

What this covers

ResumeQuill is a resume builder. You give it the contents of your resume so it can lay them out, improve them and export them, and most of what it stores is therefore information you typed or uploaded on purpose.

This page says what is kept, where it goes, how long it stays, and what you can ask for. It describes the software as it is actually built.

What is stored

Your account: email address, name, an optional profile image, and a password stored only as a bcrypt hash. If you sign in with Google, no password exists at all. Whether your email has been confirmed is recorded, along with when the account was created.

Your resumes: every section you fill in, which is to say your contact details, work history, education, skills, projects, publications, certifications, references, awards, languages, volunteering, memberships, courses and interests. A profile photograph if you add one.

Version history: up to twenty previous states of each resume, so an edit can be undone. Older ones are discarded as new ones arrive.

Billing: your plan, its status, when access ends, how many AI credits remain, and a record of each payment. Card numbers are never received or stored.

Interview answers: if you answer the guided questions before your account is set up, your answers are kept in your browser for up to 24 hours so they are not lost while you sign up. Once you have an account they are also saved to it, and that copy is deleted automatically thirty days after you last answered.

What reaches an AI model

AI features are the one place your resume text leaves this service, and they only run when you ask for them: when you upload a resume to be read into the editor, or when you ask for a rewrite, a set of changes or a tailored version. Nothing is sent to a model in the background.

Make Changes sends only the sections your request concerns, plus the contact details on your resume, along with a one-line count of the sections it does not need to see. A request about your summary does not carry your employment history with it, and it does not include your profile photo.

Tailor for a job sends your whole resume, including a profile photo if you've added one. Uploading a resume sends the text read from the file so it can be split into sections.

If you attach a screenshot of a paper, that image is read once, at the moment you attach it, and what is kept from it is the citation text. Re-running the same edit doesn't send the image again.

The contact details written on your resume, such as the email address, phone number and address on it, are part of what is sent. Your account sign-in details and password are not. Requests go to OpenRouter, with OpenAI used as a fallback, and the provider processes each one to generate the reply.

As with any AI tool, do not add anything to your resume that you would not want a third party to process.

Who else receives anything

Stripe handles payment. You enter card details on Stripe's own pages and ResumeQuill receives only the result: which plan, whether it succeeded, and when access runs out.

The AI providers (OpenRouter, with OpenAI as a fallback) receive what the section above describes, and only when you ask for it.

An email provider sends account email such as verification links.

Object storage holds uploaded images where that is configured, and files there are reachable only through short-lived links this service signs.

Google is involved only if you choose to sign in with Google.

DiceBear, an avatar service, draws a placeholder picture on your dashboard if your account has no profile image. Your email address is sent to it as the value the picture is generated from.

Nothing is sold, and nothing is shared with advertisers.

What other people can see

By default, nothing. Your resumes are private to your account.

Sharing is an explicit action. Sharing a resume gives it a link that starts private: only you can open it, signed in on a paid plan. Switching the link to Public lets anyone who has it view the resume, and you can switch it back to private at any time. A public page shows only the fields on an allowlist: references are excluded by default because they are somebody else's contact details, and your own email, phone and location can each be switched off.

While a link is private it is closed to everyone but you. Its address never changes, so switching it to Public again opens the same page, and any QR code you have already printed keeps working.

Share links are long and random rather than guessable, and published resume pages are excluded from search engine indexing.

How long things are kept

Your account and its content are kept while the account exists.

Resume version history keeps the last twenty states of each resume.

Interview answers given before signing up stay in your browser for up to 24 hours, and the copy saved to your account is deleted automatically thirty days after you last answered.

Email verification links expire, and are stored only as a one-way hash, so a copy of the database does not contain a working link. The record of the link is removed after it expires.

Payment records are kept as long as they are needed for accounting and dispute handling.

Security

Passwords are stored as bcrypt hashes and are never recoverable in readable form.

Email verification links are stored as SHA-256 hashes; the usable link exists only in the email that was sent.

Access to a paid feature is decided on the server on every request. A client cannot grant itself access by changing something in the browser.

No system is perfectly secure, and this one is no exception. If you believe you have found a weakness, please report it to us rather than testing it against other people's accounts.

Your choices

You can edit or delete any resume from inside the app, and deleting a resume removes its stored versions with it.

You can make any shared link private again, at any time.

You can ask us for a copy of what is held about you, or for your account and its contents to be deleted. Deletion removes your account, resumes and versions. Payment records may be retained where accounting rules require it.

Your browser's site-data controls clear what is stored locally. The Cookie Policy lists exactly what that is.

Children

ResumeQuill is intended for people old enough to be looking for work and is not directed at children. Accounts are not knowingly created for them.

Changes and contact

If what is stored or who receives it changes, this page changes with it, and the date below records the last revision.

For a copy of your data, a deletion request, or any question about this page, contact us.