Last updated 1 August 2026
Privacy Policy
Your resume is the most personal file you own. Here is exactly what we do with it — in plain language, no hedging.
The short version: we delete your uploaded file once we've read it, we never sell your data, we never use it to train AI models, and we never write your resume content into our logs.
Who we are
Rezly (“we”, “us”) provides an AI resume tailoring service at userezly.app. This policy covers the website and the app.
To confirm before launch: Insert your registered legal entity name, registered address, and — if you serve users in India under the DPDP Act — the name and email of a Grievance Officer. These are legally required identifiers and are the only blanks left in this document.
What we collect
- Account details. Your email address and name. If you sign in with Google, we receive your email, name, and profile picture from Google — nothing else, and we never receive your Google password.
- Your resume. The file you upload and the structured text we extract from it (your work history, skills, education, and contact details as they appear in the document).
- Job descriptions. The JD text you paste, or fetch from a URL, and the requirements we extract from it.
- Tailoring results. The changes, scores, gaps, and verdicts we generate, plus which changes you accepted.
- Payment records. Which credit pack you bought, the amount, and the currency. We never see or store your card number — see “Payments” below.
- Basic technical data. Standard server logs and aggregate usage counts. For the free ATS checker, which requires no account, we store a one-way hash of your IP address for rate limiting only.
What happens to your resume file
This is the part people care about most, so here is the precise behaviour rather than a marketing summary:
- You upload a .docx or .pdf. We parse it into structured text and style information.
- The original file is then deleted from our storage. We do not keep a copy of the document itself.
- The parsed text is kept in your account, because that is what lets you tailor against a new job description without re-uploading. It stays until you delete it.
- You can delete a saved resume, a tailoring, or your entire account at any time. Deleting your account removes your profile, resumes, and tailorings.
We do not write resume or job description content into application logs.
Who we share it with
We do not sell your data or share it for advertising. We share the minimum necessary with the services that make the product work:
- Anthropic — to tailor your resume, the text of your resume and the job description are sent to Anthropic's Claude API. This is the core of the product and cannot be switched off while using the tailoring feature. Anthropic does not use data submitted through its API to train its models.
- Supabase — our database, authentication, and file storage provider. Your data is stored in their Northeast Asia (Seoul) region.
- Vercel — hosts and serves the website and API.
- DodoPayments — processes payments as merchant of record. They receive your billing details directly.
- Google — only if you choose to sign in with Google.
- Firecrawl — only if you choose to fetch a job description from a URL instead of pasting the text. It receives the URL, not your resume.
We may also disclose data if legally required to, or to protect our rights or someone's safety.
Training
We do not use your resume, your job descriptions, or your tailoring results to train any AI model, ours or anyone else's.
Payments
DodoPayments acts as the merchant of record for all purchases. Your card details go to them directly and never touch our servers. We store only which pack you bought, the amount, the currency, and a payment reference so we can credit your account and handle refunds.
Cookies
We use cookies to keep you signed in. That is it — no advertising cookies, no third-party tracking pixels, no cross-site profiling. You cannot turn off the session cookie and remain logged in.
How long we keep things
- Uploaded files: deleted immediately after parsing.
- Parsed resumes and tailorings: until you delete them or close your account.
- Payment and credit records: retained after account closure where we are required to keep financial records for tax and accounting purposes.
- ATS checker IP hashes: retained briefly for rate limiting.
Your rights
Depending on where you live — including under the GDPR in the UK and EU, and the DPDP Act in India — you have the right to access, correct, export, or delete your personal data, and to withdraw consent. Most of this you can do yourself in the app. For anything else, email support@userezly.app and we will respond within 30 days.
Security
Data is encrypted in transit and at rest. Database access is restricted per-user at the row level, so one account cannot read another's resumes or tailorings. No system is perfectly secure, and we will notify affected users promptly if a breach occurs.
Children
Rezly is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
If we change this policy materially, we will update the date at the top and notify account holders by email. See also our Terms of Service and Refund Policy.
Questions about any of this? Email support@userezly.app and a human will answer.