Privacy Policy
Last Modified: October 11, 2026
Effective Date: December 21, 2025
Version: 1.0.0
Contact Information:
Resume Boost
40 Arlington Ave E #17013
Saint Paul, MN 55117-3936
United States
Email: support@resumebs.com
Website: https://resumebs.com
Quick Summary:
Resume Boost is an AI-powered job application coaching platform. We collect resume content, job descriptions, and career profile data to provide personalized coaching. We use AI services (Anthropic Claude, OpenAI, Google Gemini, Perplexity) to analyze your content. We do not sell your data. We may use de-identified and aggregated data to improve our models and services.
1. Introduction
What is Resume Boost?
Resume Boost is an AI-powered job application coaching platform that helps job seekers optimize their resumes, track applications, and prepare for interviews. We provide:
- Web Application (resumebs.com): Resume analysis, job tracking, career coaching
- Chrome Extension: Job import and LinkedIn profile capture
Important: We Are a Coaching Tool, Not an Employer Tool
Resume Boost is designed for job seekers, not employers. We do not make or assist in employment decisions. We provide advisory AI analysis to help you improve your job application materials.
What This Privacy Policy Covers
This Privacy Policy describes:
- What personal information we collect
- How we use, share, and protect your information
- Your privacy rights under GDPR, CCPA, and other laws
- How AI services (Anthropic Claude, OpenAI, Google Gemini, Perplexity) process your data
By using Resume Boost, you agree to this Privacy Policy.
2. Information We Collect
A. Information You Provide Directly
Account Information:
- Email address (required for authentication)
- Full name (optional, used for personalization)
- Password (stored as bcrypt hash, never in plain text)
Resume Content:
- Resume text (uploaded files or manually entered)
- Work experience, skills, education, certifications
- Career achievements, projects, volunteer work
Job Descriptions:
- Job postings (imported via Chrome extension or manually entered)
- Job titles, companies, locations, requirements
- Application tracking data (status, notes, dates)
B. Automatically Collected Information
Usage Data:
- Pages viewed, features used, time spent on platform
- Number of resume analyses, job matches requested
- AI service usage (tokens consumed, cost tracking)
Technical Data:
- IP address (anonymized after 7 days for analytics)
- Browser type, operating system, device information
- Session ID, authentication tokens (JWT, encrypted)
C. Chrome Extension Data
If you use our Chrome extension, we collect additional data with your explicit permission:
- Job URLs: Pages you visit on job boards (LinkedIn, Indeed, etc.)
- Job Content: Job description text extracted from public job postings
- LinkedIn Profile: Your own LinkedIn profile data (if you choose to import it)
- Auto-fill Data: Form field mappings for application auto-fill (stored locally in your browser)
- Usage Statistics (opt-in): The extension asks once, in its popup, whether to share usage statistics with Google Analytics and PostHog. Nothing is sent until you choose Allow; choosing No thanks, or not answering, sends nothing. When allowed, it sends the job board you import from, the extension version, and a random ID for this install; Google and PostHog also receive your IP address. It never includes your profile or resume. Change your choice at any time with the "Share usage statistics" toggle in the popup. The install ID is not linked to your account and is not shown to you, so we cannot tell which statistics are yours or delete them one install at a time. To stop sending them, turn off the toggle or remove the extension. Removing the extension deletes its install ID; a new install gets a new one.
Chrome Extension Permissions: We request minimal permissions. activeTab (read current tab when you click extension), storage (save your preferences), declarativeNetRequest (job board URL pattern matching). We do NOT request "all sites" permission.
3. How We Use Your Information
We use your information for these purposes:
A. Provide Services
- Analyze your resume for ATS compatibility and optimization
- Match your profile to job descriptions
- Generate tailored cover letters and interview prep questions
- Track your job applications and provide progress insights
- Answer career questions via AI Career Coach
B. Improve Our Services
- We may use de-identified and aggregated data to improve our models and services
- Analyze usage patterns to optimize AI prompts and reduce hallucinations
- Test new features (e.g., A/B testing match scoring algorithms)
- Monitor AI cost and performance (Langfuse observability)
C. Communicate with You
- Send account notifications (password resets, security alerts)
- Product updates and new feature announcements
- Subscription status and billing-related notices (if you subscribe to Pro)
- Respond to support inquiries
D. Legal & Compliance
- Comply with GDPR, CCPA, and other privacy laws
- Detect and prevent fraud, abuse, or bot activity
- Enforce our Terms of Service
- Respond to lawful government requests
4. AI Services & Data Processing
Resume Boost uses third-party AI services to provide intelligent career coaching. Your data is sent to these providers for processing:
| Provider | Used For | Data Retention | Privacy Policy |
|---|---|---|---|
| Anthropic Claude | Resume analysis, Career Coach, Cover letters | 30 days (Prompt Caching), then deleted | Anthropic Privacy |
| OpenAI GPT | Job matching (embeddings), Interview prep | 30 days for abuse monitoring, then deleted | OpenAI Privacy |
| Google Gemini | Alternative analysis option | Per Google Cloud data processing terms | Google Privacy |
| Perplexity | Company research | Per Perplexity data processing terms | Perplexity Privacy |
Important AI Limitations:
- AI can hallucinate (make up facts, generate inaccurate suggestions)
- AI can exhibit bias (based on training data patterns)
- We do not guarantee results (improved interview success, job offers, etc.)
- You are responsible for reviewing and editing AI-generated content
NYC Local Law 144 Compliance: If you are a New York City resident, our AI analysis does NOT make employment decisions. We are a coaching tool for job seekers, not an Automated Employment Decision Tool (AEDT) used by employers.
6. Data Security
We implement industry-standard security measures:
Encryption:
- TLS 1.3 for all data in transit (HTTPS)
- AES-256 encryption at rest (Supabase database)
- JWT tokens with HS256/RS256 signatures
Authentication:
- Password hashing with bcrypt (cost factor 12)
- OAuth 2.0 (Google, Apple Sign-In)
- Rate limiting (20 requests/hour for AI analysis)
Access Controls:
- Row-Level Security (RLS) policies on all database tables
- Role-Based Access Control (user/tester/admin roles)
- API authentication required for all endpoints
No security is perfect. While we use reasonable safeguards, we cannot guarantee absolute security. Use strong passwords and enable two-factor authentication (if available).
7. Data Retention
We retain your data based on these criteria:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Until you delete your account (or 3 years of inactivity) | Provide ongoing service |
| Resume Content | Until you delete your account (or 3 years of inactivity) | Provide analysis services |
| Job Applications | Until you delete your account (or 3 years of inactivity) | Track application history |
| AI Chat History | Until you delete your account (or 3 years of inactivity) | Provide context-aware coaching |
| Usage Analytics | 26 months (Google Analytics default) | Understand user behavior |
| AI Provider Logs | 30 days (Anthropic/OpenAI), then deleted | Abuse monitoring |
What Happens After 3 Years of Inactivity?
- We send email warning 30 days before deletion
- If no response, we permanently delete your account and all associated data
- Exception: De-identified aggregated data (e.g., "25% of users with 5+ years experience got interviews")
8. Your Rights & Choices
You have these privacy rights (under GDPR, CCPA, and other laws):
1. Right to Access
Request a copy of all personal data we have about you.
How: Email support@resumebs.com or use in-app "Download My Data" (Settings page)
2. Right to Rectification
Correct inaccurate or incomplete personal data.
How: Edit directly in your profile settings or email us
3. Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data.
How: Email support@resumebs.com or use "Delete Account" button (Settings page)
4. Right to Data Portability
Receive your data in machine-readable format (JSON).
How: Email support@resumebs.com (we provide JSON export within 30 days)
5. Right to Object
Object to data processing for direct marketing or legitimate interests.
How: Email support@resumebs.com or unsubscribe from marketing emails
6. Right to Restrict Processing
Limit how we use your data while disputes are resolved.
How: Email support@resumebs.com with specific restrictions requested
7. Right to Withdraw Consent
Withdraw consent for any processing that requires it.
How: Email support@resumebs.com or delete your account
8. Right to Lodge a Complaint
File a complaint with your local data protection authority.
EU: Find your DPA
California: California AG
We respond to all requests within 30 days. For complex requests, we may extend this by 60 days with explanation.
10. International Data Transfers
Resume Boost is based in the United States. If you are outside the US, your data may be transferred to and processed in the US or other countries where our service providers operate.
For EU/EEA Users:
- We rely on Standard Contractual Clauses (SCCs) for EU → US data transfers
- Our AI providers (Anthropic, OpenAI) have EU data processing addendums
- Supabase offers EU region hosting (we may migrate to EU servers if demand warrants)
Your Rights:
- Request a copy of SCCs: Email support@resumebs.com
- Object to international transfers (may limit service functionality)
11. Children's Privacy
Resume Boost is not intended for users under 18 years old. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@resumebs.com. We will delete the data within 30 days.
COPPA Compliance: We comply with the Children's Online Privacy Protection Act (COPPA) by not knowingly collecting data from users under 13.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Categories of Personal Information We Collect:
- Identifiers: Name, email, IP address
- Professional Information: Resume, work history, skills, job applications
- Commercial Information: Subscription tier, payment info (if applicable)
- Usage Data: AI service usage, page views, feature interactions
Your California Rights:
- Right to Know: Request categories and specific pieces of PI collected
- Right to Delete: Request deletion of your PI (with exceptions)
- Right to Opt-Out of Sale: We do NOT sell your PI
- Right to Non-Discrimination: We will not discriminate for exercising rights
- Right to Correct: Request correction of inaccurate PI
- Right to Limit Sensitive PI Use: We do not use sensitive PI for secondary purposes
How to Exercise Your Rights:
Email: support@resumebs.com with subject "California Privacy Request"
We will respond within 45 days (may extend 45 days with notice).
We Do Not Sell Your Personal Information
In the past 12 months, we have not sold or shared personal information for cross-context behavioral advertising. We do not sell or share the personal information of consumers under 16 years old.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective:
- Material Changes: 30 days after email notification to all users
- Non-Material Changes: Immediately upon posting updated "Last Modified" date
Continued use of Resume Boost after changes = acceptance of new Privacy Policy.
Your Options:
- Delete your account before effective date if you disagree
- Contact us with concerns: support@resumebs.com
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Resume Boost
40 Arlington Ave E #17013
Saint Paul, MN 55117-3936
United States
Email: support@resumebs.com
Website: https://resumebs.com
We will respond to all inquiries within 30 days. For urgent security matters, please include "URGENT SECURITY" in your email subject line.
© 2025 Resume Boost. All rights reserved.
See also: Terms of Service
For detailed legal documents:Extended Privacy Policy