1. Introduction

T-AI-LOR (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and your rights regarding that information when you use our AI-powered resume tailoring service at gettailor.ai (“the Service”).

2. Information We Collect

Information You Provide

Account information: Name, email address, and authentication credentials (or Google OAuth profile data) when you create an account.
Resume and career data: Resumes, work history, skills, education, certifications, and other professional information you upload or enter.
Job descriptions: Job postings and descriptions you provide for resume tailoring.
LinkedIn and portfolio data: Professional profile information you import from LinkedIn or other sources.
Payment information: Billing details processed by Stripe. We do not store full credit card numbers on our servers.

Information Collected Automatically

Usage data: Feature usage, generation history, pages visited, and interaction patterns.
Device and browser data: IP address, browser type, operating system, and device identifiers.
Cookies: Session cookies for authentication and analytics cookies to understand Service usage.

3. How We Use Your Information

We use your information to:

Provide the Service: Process your resume and job description data through AI models to generate tailored resume content.
Maintain your account: Authenticate you, manage subscriptions, and store your documents and generation history.
Improve the Service: Analyze usage patterns in aggregate to improve features, fix bugs, and enhance the user experience.
Communicate: Send transactional emails (account verification, password resets, subscription confirmations) and, with your consent, product updates.
Ensure security: Detect and prevent fraud, abuse, and unauthorized access.

4. AI Data Processing

This is important: to generate tailored resumes, your resume content and job descriptions are transmitted to third-party AI providers for processing. Currently, we use:

Google Gemini: For resume content generation, enhancement, and text embedding. Your data is sent via Google's API and processed under Google's Gemini API Terms of Service. Google does not use data submitted through paid API tiers to train its models.

We do not use your personal resume data to train, fine-tune, or improve our own or any third-party AI models. Your data is used solely to generate output for you.

5. Third-Party Service Providers

We share your information with the following categories of service providers, solely to operate the Service:

Supabase: Database hosting, user authentication, and file storage.
Stripe: Payment processing and subscription management. Stripe receives your billing information directly.
Resend: Transactional email delivery (via Supabase Edge Functions).
Vercel: Application hosting and content delivery.
Google Gemini API: AI content generation (see Section 4).

Each provider processes data only as necessary to perform their service and under their respective privacy policies and data processing agreements.

6. Data Retention

We retain your account information and uploaded documents for as long as your account is active. Generated resumes and generation history are retained to allow you to access past results. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data storage, secure authentication, and access controls. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

8. Data Sharing

We do not sell, rent, or trade your personal information. We may disclose your information only:

To service providers described in Section 5, to operate the Service.
If required by law, subpoena, court order, or government request.
To protect our rights, safety, or property, or that of our users.
In connection with a merger, acquisition, or sale of assets (you will be notified of any change in data handling).

We may use anonymized, aggregated data that cannot identify you for analytics, benchmarking, and service improvement.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data and account.
Portability: Request your data in a structured, machine-readable format.
Restriction: Request that we limit how we process your data.
Objection: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@gettailor.ai. We will respond within 30 days.

California Residents (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, email privacy@gettailor.ai.

EU/EEA Residents (GDPR)

Our legal basis for processing your data is: (a) contractual necessity (to provide the Service you signed up for); (b) legitimate interest (to improve and secure the Service); and (c) your consent (for optional communications). You have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.

10. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Service.

11. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The “Last updated” date at the top reflects the most recent revision. Continued use of the Service after changes become effective constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

Email: privacy@gettailor.ai
Website: gettailor.ai