Privacy Policy
Last Updated: October 16, 2026 · Effective Date: October 16, 2026
✦ Plain-English Privacy Commitment
- ✓We never sell, rent, or monetize your résumé. Your personal data is never shared with recruiters, job boards, or third-party advertisers.
- ✓24-Hour Ephemeral Retention: Web scan data uploaded for ATS compatibility checks is automatically purged after 24 hours.
- ✓AI Model Training Exclusion: Your résumé text is never used to train public LLMs or external artificial intelligence models.
1. Introduction
Redraft ("we," "our," or "us"), operating via resumepure.com and app.resumepure.com, provides programmatic Applicant Tracking System (ATS) compatibility analysis and résumé building tools. This Privacy Policy describes how we collect, process, store, and protect your information when you use our web platform, ATS scanners, and mobile applications.
2. Information We Collect
A. Information You Provide Directly
When you upload a résumé in PDF format or paste text into our scanners, we extract document text and physical geometry signals (such as column layouts, margins, font sizes, and date strings) to compute ATS compatibility scores and provide editing recommendations.
B. Account & Authentication Information
When you register for an optional account, we store your email address and an encrypted password hash. Every installation starts with an anonymous device session so usage limits apply without requiring personal identification.
C. Usage & Telemetry Information
We collect privacy-preserving event telemetry (such as page transitions, ATS platform selections, scan counts, and button clicks) through PostHog via our own first-party reverse proxy. We do not track keystrokes, passwords, or off-site browsing habits.
3. Data Retention & Ephemeral Storage
We operate on a principle of data minimization:
- Web ATS Scan Handoffs: Free scans initiated on
resumepure.comare stored in a dedicated ephemeral database table (public.web_scan_handoffs) with a strict 24-hour time-to-live (TTL). Scans older than 24 hours are automatically purged. - Saved Résumés: Résumés explicitly saved in the Redraft Editor by registered users are stored in our secure database with Postgres Row-Level Security (RLS) and remain accessible until you choose to delete them.
4. Analytics & Service Providers
We partner with trusted enterprise infrastructure providers to operate the service:
- Supabase: Provides encrypted PostgreSQL database storage, authentication, and serverless Edge Functions.
- PostHog: Provides product usage analytics. All telemetry is routed through our first-party reverse proxy (
/ingest) to protect your browsing privacy from third-party data aggregators. - RevenueCat: Verifies subscription entitlements and processes mobile in-app purchases. We never receive or store full credit card numbers.
- AI Providers (Google Gemini / OpenAI): Used strictly on-demand for structured JSON résumé parsing and bullet point rewrites. Calls are mediated server-side with zero data retention for foundational model training.
5. Your Rights (GDPR & CCPA)
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Right of Access: You may request a copy of all personal data held about you.
- Right to Rectification: You may update or correct your profile and résumé details directly in the editor.
- Right to Erasure: You can delete any saved résumé from the editor or request complete account erasure by contacting us.
- Right to Portability: You can export your structured résumé as an ATS-compliant PDF or DOCX file at any time.
6. Contact Information
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection team at: