Privacy Policy

What ResumeForge is

ResumeForge is a resume workspace. You can use it as a guest in this browser, or create an optional account so resumes, evidence, and jobs persist in our hosted database.

Data we store

• Account data — if you sign up: email, username, and a hashed password. We do not store plaintext passwords.
• Workspace data — master resumes, evidence items, job postings, tailored variants, and cover-letter drafts you save while signed in.
• Guest data — guest work stays in this browser session. It is not written to the hosted database until you sign in.

AI keys (BYOK)

Bring-your-own API keys are encrypted in this browser’s IndexedDB vault using a non-extractable Web Crypto key, and are never stored in our database. Keys are sent to your chosen provider only when you run an AI action (extract, tailor, cover letter, ATS review). We do not sell keys or resume content.

How AI requests work

When you opt in to an AI feature, relevant resume or job text is sent to the provider you configured (for example OpenAI, Anthropic, Gemini, or a custom endpoint). We do not use that content to train ResumeForge models. Provider retention is governed by that provider’s own policy.

Cookies and sessions

A session cookie keeps you signed in. It is HttpOnly and used only for authentication. We do not use advertising trackers or sell personal information.

Your choices

You can continue as a guest, sign in, edit or delete saved workspace items in the app, and sign out. Clearing site data in your browser removes local keys and guest drafts.

Contact

Questions about this policy can be sent through the in-app Settings page or the account email you used to sign up.