Privacy Policy

Who we are

Resume Score is operated by Aditya Kumar. For privacy questions, access requests or deletion requests, contact knowandgrow27@gmail.com.

Information we handle

• Account information: sign-in email, account identifier, display name and authentication/session information. The website uses email-link sign-in. The extension receives a short-lived access token when you connect your account; it does not retain a refresh token.
• Resumes and reports: uploaded files, filenames, extracted resume text, selected/default resume and analysis results. Resumes may contain your name, contact details, education and employment history. Please do not include government IDs, health information, financial account details or other unnecessary sensitive information.
• Contact profile: first and last name, email, phone, user-entered city/location, LinkedIn URL and portfolio URL. We do not request GPS access.
• Job and page information: page content inspected locally to detect job postings and supported form fields; detected job descriptions, titles, companies and job URLs used for matching or saved jobs. Saved jobs and match history can include timestamps and scores. We do not maintain a general history of unrelated browsing.
• Service and support information: messages you send us, and operational information that hosting providers may process, such as IP addresses, request URLs, timestamps and error logs. Do not send passwords, sign-in links, access tokens or identity documents in support emails.

How the features use your data

The website sends uploaded resume content to our API to extract text and produce the report you request. When you save a resume to your account, the original file and extracted text are stored for reuse. Detailed website reports are also stored in your browser.

After account connection, the extension can load your default saved resume. When a valid job description is detected while the assistant is active, automatic matching sends the resume text and detected description to our scoring API. Match summaries and related job details are saved to your account. Saving a job retains its description and URL.

Contact autofill runs only when you click it. It uses your synced profile to fill supported empty fields in the current application page. Filled information becomes available to that website, whose own privacy policy applies. Existing answers are preserved. Resume Score does not click Next or Submit, upload a resume to an application form, or answer demographic, salary, legal or work-authorization questions.

We use this information to provide these features, maintain account security, diagnose service problems and respond to support requests. Scores describe rule-based resume quality or job alignment, not hiring outcomes.

Storage and service providers

We use Supabase for authentication, account data, resume files, profiles, saved jobs and match history; Render to host our parsing/scoring API; and Netlify to host the website. These providers process information needed to operate the service. Support emails are handled through Gmail. Their infrastructure may process information outside your country.

The website uses browser storage for sessions, reports and cached state. The extension uses session storage for account connection information and may retain account-scoped contact drafts in local storage. Removing the extension or clearing site data does not delete cloud account records.

Production service requests use HTTPS. Account data is protected with authentication and account-scoped access controls. These measures reduce risk but cannot guarantee absolute security. Parsing and scoring code processes request content without intentionally writing uploaded documents to the API server's disk; saved cloud resumes and operational provider logs are separate.

Sharing and limited use

We do not sell personal data or use or transfer it for advertising, creditworthiness or lending decisions. Extension user data is used only to provide or improve its stated job-assistance features. Transfers are limited to service providers needed for those features, security or abuse prevention, and legal obligations.

Our use and transfer of information received through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Human access to extension user data is limited to your consent for specific support needs, necessary security investigations, legal obligations, or aggregated and anonymized internal operations permitted by that policy.

Retention and deletion

Cloud account data, resumes, profiles, saved jobs and match history are retained until you request deletion or they are no longer needed to provide the service. There is currently no automatic expiry period for those account records. Browser-local reports and drafts remain until the relevant browser storage is cleared. Session tokens expire and the extension clears its connected session when you disconnect.

To request access, correction, export or deletion of your account and associated cloud data, email knowandgrow27@gmail.com from your account email. We may verify ownership before acting. Deletion requests are handled manually; we will explain any information that must be retained for legal or security reasons. Provider logs and backups may remain until their applicable retention cycles expire. Signing out, disconnecting or uninstalling alone does not delete cloud data.

Your choices

You can edit your profile, change your default resume, disconnect the extension, restrict its site access through browser settings, or uninstall it. Restricting site access can disable automatic job detection or autofill. Clear website storage to remove local reports and session data. Depending on your jurisdiction, you may have additional data protection rights; contact us to exercise them.

Changes to this policy

We will update this page and its effective date when our practices change. Material changes to data handling will be communicated through the service as appropriate.

Optional website analytics

With your permission, Google Analytics measures website visits and feature usage, including successful sign-ins, resume uploads, completed analyses and extension downloads. Google processes cookie-based identifiers, device/browser information and network information to provide analytics. We send generic page names, not private report IDs, sign-in URLs, resume contents, filenames, emails or contact details. Advertising features are disabled. This tracking is website-only, not in the extension.

The analytics tag is not loaded until you accept. You can reject or withdraw consent using Analytics preferences in the footer. Withdrawal stops future tracking in this tab and removes accessible Google Analytics cookies; previously collected data follows the Google Analytics property's retention settings. Google is an additional service provider for these optional analytics.

Optional AI rewriting

When you explicitly request an AI draft and agree to the disclosure, our backend sends your selected resume excerpt, the improvement suggestion and any context you enter to Groq. Groq is an additional service provider for this feature. We do not send the entire resume automatically. Remove personal or sensitive information from the excerpt and added context before generating. Basic email and web-link redaction is applied, but it is not complete anonymization.

Drafts can be inaccurate: review and edit them before use. Generating or copying a draft does not change your original file or score. We do not intentionally persist or log prompts or drafts on our API. Groq processes requests under its own applicable data terms and retention controls. Authentication checks and temporary per-account usage counters protect this feature from abuse.