Privacy Policy

Last updated: March 19, 2026

ResuPilot ("we", "our", "the extension") is a Chrome extension that helps users tailor their resumes to job postings. This policy explains what data we collect, how we use it, and how we protect it.

1. Data We Collect

Resume content — When you upload or paste your resume, it is stored locally in your browser's extension storage. When you click "Tailor Resume," your resume text is sent to our server for AI processing.

Job description text — When you tailor a resume, the extension reads the job posting content from the active browser tab and sends it to our server for AI processing.

Device identifier — We generate a random, anonymous identifier stored in your browser to track free trial usage. This ID cannot be used to identify you personally.

Access token — If you purchase credits, you receive a unique access token that authenticates your requests. This is stored locally in your browser.

Payment information — Payments are processed by Stripe. We do not see or store your card number. Stripe provides us with your email address and a customer ID for credit fulfillment.

Generation history — The extension stores a local log of company names, job titles, and URLs for your recent tailoring sessions. This data stays in your browser and is never sent to our server.

2. How We Use Your Data

• Resume and job description text are sent to our server, which forwards them to the Anthropic Claude API for AI-powered tailoring. The generated result is returned to your browser.
• We do not store your resume content or job descriptions on our server after the request completes.
• Device identifiers are used solely to enforce free trial limits.
• Email addresses from Stripe are stored to associate credit purchases with your account.

3. Third-Party Services

• Anthropic (Claude API) — Processes resume tailoring requests. Subject to Anthropic's Privacy Policy.
• Stripe — Handles payment processing. Subject to Stripe's Privacy Policy.
• Upstash — Stores account data (email, credits, access tokens). Subject to Upstash's Privacy Policy.
• Vercel — Hosts our server. Subject to Vercel's Privacy Policy.

4. Data We Do NOT Collect

• We do not track your browsing history or activity outside of job posting pages.
• We do not use cookies or analytics trackers.
• We do not sell, share, or monetize your personal data.
• We do not store resume content on our servers.

5. Data Storage & Security

Your resume and preferences are stored locally in Chrome's extension storage. Server-side account data (email, credit balance, access tokens) is stored in encrypted-at-rest Redis via Upstash. All communication between the extension and our server uses HTTPS.

6. Data Retention

Resume content and job descriptions are processed in memory and not persisted on our server. Account data (email, credits) is retained as long as your account exists. Free trial device identifiers are retained indefinitely to prevent abuse.

7. Your Rights

You can delete all locally stored data by removing the extension from Chrome. To request deletion of your server-side account data, contact us at the email below.

8. Children's Privacy

ResuPilot is not intended for use by children under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the "Last updated" date above.

10. Contact

If you have questions about this privacy policy or your data, contact us at: atticushkim@gmail.com