Privacy Policy

Last updated: August 14, 2026 · Applies to the Resume Copilot Chrome extension and backend service

Resume Copilot ("we," "our," "the extension") helps you tailor your resume and cover letters to specific job listings. This policy explains what data we collect, why, and how you can control it.

What we collect

Account information: your email address, used to create and secure your account. If you sign in with Google, we receive your email address and basic profile info from Google — we never receive or store your Google password.
Resume text: the resume content you paste into the extension's settings. This is stored locally in your browser only, not on our servers — it's sent to our backend, and from there to Anthropic's API, only at the moment you run a match score, tailor bullets, or generate a cover letter, and is not retained afterward.
Job listing content: the title, company, and description text extracted from job postings on pages you actively open the extension on (e.g. LinkedIn, Indeed, Greenhouse, Lever, Workday). We do not collect this from pages where you don't use the extension. The full description text is processed only in the moment to generate your results and is not retained; we keep only the job title, company, URL, and your match score in your application history.
Usage data: which actions you run (match scoring, bullet tailoring, cover letter generation) and when, used to enforce pricing limits and diagnose errors. We do not log the content of AI responses beyond what's needed to display them to you.
Billing information: payment is handled entirely by Stripe. We receive your subscription/credit status, not your card details — we never see or store payment card numbers.
Verification data: when you sign up or log in, Cloudflare Turnstile checks your browser to confirm you're not a bot. This involves processing your IP address; see Cloudflare's own privacy policy for details on how they handle it.

What we don't collect

We do not collect browsing history outside the specific pages where you invoke the extension.
We do not sell, rent, or share your data with advertisers or data brokers.
We do not use your resume or job listing content to train AI models.
We do not retain your resume or job description text on our servers after processing a request.

How we use this data

Your resume and the job listing text are sent to Anthropic's Claude API to generate match scores, tailored bullet suggestions, and cover letters. This processing happens in real time and is used solely to produce the output shown to you in the extension. If you sign in with Google, Google authenticates your identity on our behalf. Cloudflare verifies you're human before account creation or login.

Third-party processors:

Anthropic (api.anthropic.com) — processes resume and job text, in real time, to generate results. Not retained by Anthropic beyond what's needed to return the response.
Supabase — stores your account (email), application history (job title/company/URL/ match score), credit balance, and subscription status. Does not store your resume or full job description text.
Google — if you choose "Continue with Google," authenticates your sign-in.
Cloudflare (Turnstile) — verifies you're human during signup/login.
Resend — delivers account emails (confirmation, password reset) on our behalf.
Stripe — processes subscription and credit purchase payments; we never receive your raw card details.
Railway — hosts our backend server, where requests are processed.

Data retention

We retain your account (email), application history, credit balance, and subscription status for as long as your account is active. Your resume text lives only in your browser's local storage — deleting it from the extension's settings removes it immediately, and it's never stored on our servers to begin with. To delete your account and all associated data entirely, contact us at the email below.

Managing your subscription

If you're on the monthly subscription, you can view your billing details and cancel at any time from the extension's Settings page — cancellation takes effect at the end of your current billing period, and you won't be charged again after that. Purchased credits are one-time payments and don't auto-renew.

Your choices

The extension only runs on pages you visit — it does not run in the background across all sites.
You can clear your locally cached data (last detected job, cached auth token) at any time via chrome://extensions → Resume Copilot → Details → Clear data, or by logging out.
You can request a copy or deletion of your data by contacting us.

Children's privacy

Resume Copilot is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes to this policy

If we make material changes to this policy, we'll update the "last updated" date above and, where required, notify active users.

Contact

Questions about this policy or your data: support@resume-copilot.com