Privacy Policy

1. Who we are

AdaptiveResume LLC is a Georgia limited liability company. You can reach us at support@adaptiveresume.com or by mail at AdaptiveResume LLC, 8735 Dunwoody Place, Suite N, Atlanta, Georgia 30350. This policy explains what we collect, why we collect it, how long we keep it, and what you can do about it. It applies to adaptiveresume.com and app.adaptiveresume.com.

2. What we collect

• Account data: email address, hashed password (or auth provider ID), purchase history.
• Career documents you provide: up to three resumes and, optionally, your LinkedIn resume export. These are sensitive by nature — they describe your work history and can incidentally reveal more (see §9). Please do not include information about your health, a disability, a medical condition, or a diagnosis in the files you upload. We do not need it, we do not ask for it, and we do not analyze it.
• Content you create in the Service: confirmations, edits, skips, notes, your finished resume.
• Payment data: processed by Stripe; we never receive or store your card number. We receive transaction status and last-4/brand for receipts.
• Technical data: our application uses your IP address only as an in-memory key for rate-limiting and abuse prevention; we do not store it in our database, and it is discarded whenever the service restarts or is redeployed. We do not store your IP address ourselves, though our infrastructure providers may log it briefly at the platform level for security and operations, such as hosting and authentication logs, and Google receives it transiently for coarse geolocation as part of analytics. Our application code never reads or stores your browser type or user agent. On our marketing pages, Google Analytics and Google Ads conversion measurement separately collect your browser type, operating system, device category, and the date and time of your visit; we use these tools for analytics and conversion measurement, with Google Signals disabled, an opt-out toggle, and Global Privacy Control honored before any tag loads, but we do not use them for advertising personalization or cross-site tracking.
• Free scan: runs without an account; scan files are processed in memory and not stored or logged.
• Launch list and feedback: your email address if you join the pre-launch list, and anything you choose to tell us about a past resume-service experience. Every question is optional, including your email address. Feedback stays internal; if we ever share what we learn, it is in aggregate, never with names, yours or anyone else's. If you ask us to delete your data, that request covers your launch-list entry and any feedback you submitted that carries your email address.

3. How we use it

To provide the Service you asked for (extract, redact, analyze, propose, assemble, deliver); to process payments; to send transactional email (confirmations, receipts, security notices); to protect the Service (rate-limiting, abuse prevention); to meet legal obligations. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. AI processing and PII minimization

AI-assisted analysis is performed on redacted text. Your name and contact details are separated out before any content is sent to our AI provider, and they are re-attached only at final assembly on our own systems. Our AI provider is Anthropic, which processes the content as a service provider under its commercial API terms. Under those terms, Anthropic does not train its models on the inputs or outputs of our API use. Limited exceptions apply under Anthropic's own terms, including content that its automated systems flag for safety or policy review, which it may retain and review. We do not use consumer AI accounts to process your content.

5. De-identified learning

The Service records aggregate, occupation-level observations, for example which skills a given occupation commonly involves. These observations describe occupations, not people. They contain no names, contact details, or other identifiers, and they cannot reasonably be used to infer anything about you or to be linked back to you.

We take reasonable technical and organizational measures to keep this information in that form, including removing identifiers before an observation is recorded and storing the observations separately from account data. We publicly commit to maintain and use this information only in de-identified form and never to attempt to re-identify it, except to the limited extent needed to test whether our own de-identification process is working. We contractually require anyone who receives this information to do the same. We keep these observations indefinitely, because they describe occupations rather than individuals.

6. Subprocessors

Vendor	Purpose	Region
Stripe	Payments	US
Supabase	Database, authentication, storage	United States (Ohio)
Anthropic	AI-assisted analysis (redacted content only)	US
Render	Application and site hosting	United States (Virginia)
Brevo	Transactional email	European Union
ImprovMX	Inbound email forwarding for support@	United States (mail servers located in France)

We will update this table before adding a subprocessor that handles personal data. We do not sell your personal information to any of them, and each is engaged to process personal information only for the purposes described in this policy. Support email sent to support@adaptiveresume.com is routed through ImprovMX, our inbound mail-forwarding vendor. ImprovMX stores each message until it is successfully forwarded to us, after which the message is deleted; if delivery fails, the message may be held for up to seven days, and delivery metadata such as the subject line, sender, and recipient is retained for up to seven days, though message bodies are not logged beyond the forwarding process. Because Brevo's servers are located in the European Union and ImprovMX's mail servers are located in France, sending information to those vendors involves an international transfer of personal information. Our agreement with Brevo already incorporates the Standard Contractual Clauses. We are working to put equivalent contractual protections in place with ImprovMX.

7. Retention

In-progress review drafts are deleted automatically after seven days of inactivity, enforced by a scheduled sweep.

The files you upload are not stored. They are processed and discarded, and the working text extracted from them lives inside your draft and is deleted with the draft, at most seven days after your last activity.

Files submitted through the free scan are processed in memory and are never stored.

Finished resumes in My Files are kept until you delete them. You can delete any individual file at any time, and deleting your account removes all of them. Deleting your account does not delete your account and purchase records, which we retain separately as described below.

Account and purchase records are kept for at least seven years to meet tax and accounting obligations.

Our transactional email log — the recipient address, subject line, delivery status, and timestamp, never the message body — is kept until you ask us to delete it or you unsubscribe.

Your launch-list entry and any feedback you submit, described in Section 2, are kept until you ask us to delete them or you unsubscribe.

Aggregate occupation-level observations, described in Section 5, are kept indefinitely.

8. Security

We protect your information with encryption in transit and at rest. Drafts and stored deliverables are additionally sealed with application-layer AES-256-GCM encryption. Confirmation tokens are hashed and expire after 14 days. Access to systems is granted on a least-privilege basis. No method of storage or transmission is perfect. If a breach affects your personal information, we will notify you without undue delay and as required by applicable law.

9. Sensitive inferences in career documents

Resumes can incidentally reveal things such as union membership, citizenship or immigration status, military or veteran status, religious affiliation, or a disability accommodation. We do not seek out that information, we do not ask for it, and we do not analyze it or use it to infer anything about you. The Service proposes work-relevant skills and credentials for you to confirm, and nothing more. Where information of this kind appears in a file you provide, we collect and process it only to produce the document you asked for, never for the purpose of inferring characteristics about you, and we protect it the same way we protect the rest of your information.

We ask again that you not include health, medical, or disability information in the files you upload. If you already have, email support@adaptiveresume.com; because we do not keep a separate copy of the file you uploaded, as described in Section 7, we will delete the draft or finished resume that contains it rather than a separately stored file.

10. Your rights

• Everyone: access, correct, download, or delete your data by emailing support@adaptiveresume.com or using in-account tools; delete your account at any time.
• California: where the California Consumer Privacy Act applies to us, California residents have the rights to know, delete, correct, and receive a portable copy of their personal information, and the right not to be treated differently for exercising them. We do not sell personal information and we do not share it for cross-context behavioral advertising, so no opt-out link is required. Any sensitive information that reaches us does so incidentally and is not used to infer characteristics about you, so no separate right-to-limit link is required. We honor authorized-agent requests with verification. As a practical matter we extend these rights to everyone who asks, wherever they live.
• Outside the United States: the Service is offered from and directed to the United States, and we do not target it to residents of the European Union or the United Kingdom. If that changes, we will update this policy before it does.
• We respond to verified requests within 45 days, and we will tell you if we need more time.

11. Children

The Service is not directed to anyone under 18, we do not knowingly collect personal information from anyone under 18, and our Terms of Service require account holders to be at least 18. If we learn that we have collected information from someone under 18, we will delete it.

12. Changes

Prospective updates with a new "Last updated" date; material changes announced to account holders by email at least 14 days ahead.

Last updated: 09/01/2026