ResumeFit AI

Privacy

Your resume is yours.

We parse it in memory just long enough to score it, then we throw the file away. We keep the report so you can revisit it via your link. We don’t train AI on your content. We don’t sell your data. That’s the whole story.

Effective 2026-05-10

In-memory parsing

Your resume file is parsed in RAM and discarded the moment analysis finishes. It is never written to disk or third-party storage.

Only the report persists

We keep the analysis output (scores, extracted keywords, suggestions) so you can revisit it via your private link. The original file is gone.

Encrypted in transit and at rest

Every byte is HTTPS. Reports live in encrypted Postgres on managed infrastructure with strict access controls.

Unguessable share links

Each report has an unguessable identifier. Only people with the link can view it.

No model training on your content

Your text is sent to Google Gemini for analysis under terms that prohibit training on your input. We never train our own models on your data either.

Delete on request

Email hello@resumefit.org from the address on your report and we will delete it within 5 business days.

What we keep

  • The analysis report — scores, extracted keywords, suggestions, and rationale.
  • Your email address, but only if you give it to us to receive the report link.
  • Standard product telemetry (page visits, button clicks). Never tied to your file content.

What we never keep

  • Your original resume file.
  • The raw text of your resume after analysis completes.
  • Any identifier that lets a third party trace a report back to your name.

How AI processing works

When you submit a resume and a job description, the extracted text is sent to Google Gemini 2.5 Flash with a structured-output schema. Per Google’s enterprise terms, your content is not used to train Google’s models. We instruct the model with a system prompt that explicitly forbids inventing skills, employers, or metrics your resume doesn’t already prove.

Cookies and analytics

We use two analytics tools to understand how the product is used in aggregate:

  • Vercel Web Analytics — first-party, cookieless, IP-anonymized. Tracks page views and basic events.
  • Google Analytics 4 (gtag.js) — third-party. Used to measure traffic sources, page performance, and aggregate user journeys. GA4 may set cookies. You can opt out with any standard browser tracker-blocker or by enabling “Do Not Track.”

Neither tool sees your resume content or your job-description text — those go directly to Google Gemini for analysis and are never sent to analytics. We do not run advertising trackers, retargeting pixels, or session recorders.

Your rights

You can request access to or deletion of any data tied to your email at any time. Email hello@resumefit.org from the address used to unlock your report and we’ll respond within 5 business days.

Children

ResumeFit AI is not intended for users under 16. We do not knowingly collect data from minors.

Changes to this policy

If we change anything material, we’ll update the effective date above and (where reasonable) notify users who have given us their email. Older versions are available on request.

Contact

Privacy questions, data deletion, or general feedback — drop us a line. We read every email.