Privacy Policy

jd2resumes ("we", "the service") is operated by Vedant Shetty. Contact: support@jd2resumes.com.

• Account data: email address, OAuth provider identifier (Google or GitHub ID when you sign in via those providers), and hashed password if you use email/password sign-in. Collected and stored by our auth provider, Clerk.
• Resume and career content: the notes you write, past resumes you upload, job descriptions you paste, and the tailored resumes we generate. These are stored locally in your browser (localStorage) on the device you use the service from. We do not retain copies on our servers except transiently during active generation (see below).
• Usage data: subscription status, lifetime and monthly generation counts, stored as metadata on your Clerk user record. Used to enforce free-tier and Pro-tier limits.
• Billing data: payment information is collected and stored by Lemon Squeezy, who acts as Merchant of Record and handles global tax collection. We store only your Lemon Squeezy customer ID and subscription status. We never see or store your credit card details.
• Technical data: IP address, browser user agent, and request timestamps, logged by Vercel (our hosting provider) for service operation and security purposes.

• To provide the resume generation service you're paying for.
• To enforce the limits of your tier (Free: 1 lifetime generation; Pro: 20/month; Max: 100/month).
• To send transactional emails (verification codes, billing receipts, account changes).
• To investigate and respond to security incidents or abuse reports.

We do not sell your data. We do not use your career notes or generated resumes to train machine learning models.

To provide the service we send certain data to the following third-party processors. Each handles the data under its own contractual and compliance obligations:

• OpenAI: when you click Generate, the contents of your notes, uploaded past resume (if any), and the job description you pasted are sent to OpenAI's API for processing. OpenAI does not retain this content to train its models per its API data policy. You should not paste anything confidential (trade secrets, credentials, private business information) into the service.
• Clerk: email verification, session management, OAuth, user metadata storage.
• Lemon Squeezy: payment processing, subscription management, and Merchant of Record for global tax compliance.
• Vercel: hosting and request logs.
• GitHub, Google: OAuth providers. When you sign in with either, we receive your email address and basic profile.

• Account data: kept for as long as your account exists. Deleted within 30 days of account deletion.
• Resume content in your browser: stays there until you clear it or uninstall the browser. We cannot delete it remotely because we don't have a copy.
• Request logs: retained by Vercel for up to 30 days for operational purposes.
• Billing records: kept for 7 years as required by tax and accounting regulations in most jurisdictions.

Depending on where you live, you may have the right to:

• Access a copy of your account data (email us at support@jd2resumes.com).
• Correct inaccurate personal data.
• Delete your account and associated server-side data.
• Export your local resume data via the in-app JSON export.
• Object to processing or withdraw consent.

EU/UK residents: you can lodge a complaint with your national data protection authority.

We protect your data using industry-standard practices: HTTPS on all endpoints, encrypted-at-rest storage at our third-party providers, secrets stored in environment variables never committed to source control, and authenticated API routes. No system is perfectly secure; if you suspect a breach, email security@jd2resumes.com.

The service is not intended for anyone under 16. We do not knowingly collect data from children.

When we update this policy, we'll change the "Last updated" date at the top. Material changes will be announced via email to active users.

Questions about this policy or your data: support@jd2resumes.com