Privacy Policy

We collect only the minimum data necessary to provide the service:

• Resume file — uploaded by you, read once in-memory to extract plain text, and never persisted.
• Job description text — pasted by you, used in a single AI prompt, and never persisted.
• Standard web server logs — IP address, browser user agent, and request timestamps may be recorded by the hosting provider for security and abuse prevention. These logs do not contain resume or job-description content and are automatically deleted after 30 days.

We explicitly do not:

• Store your resume or job description on any server or database.
• Use your resume content to train or fine-tune AI models.
• Share, sell, or transfer your personal data to third parties for marketing.
• Build a profile of you or track you across sessions.
• Send resume content to any service other than the configured LLM provider (currently Google Gemini) solely for the purpose of generating rewrites.

To generate resume rewrites, your anonymised resume text and job description is sent to the following AI API:

• Google Gemini — used for AI analysis and resume rewriting. Governed by the Google Privacy Policy.
• Google AdSense — used to display advertisements on blog pages. May set cookies for interest-based ads.

If we add or change AI providers in the future, this policy section will be updated before the change is made live.

We recommend you avoid including sensitive personal information (e.g. passport numbers, full bank details) in uploaded documents.

All data is transmitted over HTTPS. Resume files are handled in isolated server-side memory with no shared state between users. We apply input-size limits and file-type validation to prevent misuse.

No authentication system means we hold no passwords, email addresses, or account data for users of the free tool. Payment transactions are No payment processing occurs — the download is free.

This site uses Google AdSense to display advertisements. AdSense may set cookies to serve interest-based ads. You can opt out via the Google Ad Settings page.

We do not use any first-party cookies or tracking beyond what AdSense requires.

Because we do not store personal data, most GDPR / CCPA data-subject rights (access, erasure, portability) are automatically satisfied — there is no data to retrieve or delete.

If you have a question about the hosting provider's server logs, or about how an AI provider has handled data you submitted, please contact us or refer to their respective privacy policies.

Questions about this policy? Email us at contact.toolboxpublic@gmail.com.

We aim to respond to all privacy inquiries within 5 business days.