Privacy Policy

Who we are

Resume Tailor (resume.mehtasmeet.com) is a personal project operated by Smeet Mehta. This Privacy Policy explains what data we collect when you use the service, how we use it, and the choices you have.

For any questions about this policy or your data, contact us at email@mehtasmeet.com.

What data we collect

Account data: When you sign up, we collect your email address and (if provided by your OAuth provider) your name. We do not collect or store your password directly — authentication is handled by Supabase Auth and OAuth providers (Google, Microsoft).

Resume content: When you upload a PDF resume to generate a tailored version, the file is processed in memory to extract text. The original PDF is not stored on our servers. The extracted text is sent to AI providers (see below) to generate tailored output.

Generation metadata: For each tailored resume you generate, we store the company name, job title, template used, and timestamp. We use this to enforce monthly usage limits and show you your generation history. We do not store the full job description text or the AI-generated resume content beyond the generation session, unless you explicitly opt to save a base resume to your profile (a feature available only to logged-in users).

Usage data: Standard server logs (IP address, request paths, timestamps) are collected by our hosting provider for security and debugging. These are kept for 30 days.

How we use AI providers

To generate tailored resumes and cover letters, we send your resume text and the target job description to third-party AI services:

• Google Gemini (primary AI) — subject to Google's Generative AI Terms
• Groq (fallback AI) — subject to Groq's Privacy Policy

These providers may temporarily process your resume content to fulfill the generation request. Per their terms (at the time of writing), they do not use API-submitted data to train their models. We have no control over data retention beyond what these providers commit to in their own policies.

Data storage

Your account data and generation metadata are stored in Supabase, a database service. Data is hosted in the Asia-Pacific region. Our servers are hosted on Oracle Cloud Infrastructure.

What we do not do

• We do not sell your data to third parties.
• We do not share your resume content with anyone except the AI providers required to generate output.
• We do not run advertising on this service.
• We do not use your data for marketing or training our own AI models.
• We do not retain your uploaded PDF after generation completes.

Cookies and authentication

We use cookies strictly for authentication — to keep you logged in across sessions. These are set by Supabase Auth and are essential to the functioning of the site. We do not use analytics cookies or tracking cookies.

Your rights

You can:

• Request a copy of all data we hold on your account
• Request deletion of your account and all associated data
• Sign out at any time using the "Sign out" button
• Stop using the service at any time, no obligation

To exercise these rights, email email@mehtasmeet.com. We will respond within 30 days.

Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify users via email. Continued use of the service after changes constitutes acceptance of the updated policy.

Children

This service is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.