Privacy Policy

Resume Tracked helps you store resumes and supporting documents and log where you sent each version. We collect only what is needed to run the service. We do not sell your personal data. Built with GDPR/CCPA-style data controls; this is not a claim of complete legal compliance without legal review.

Account data — When you sign up, our authentication provider (Clerk) processes your email and sign-in credentials. We receive a stable user identifier linked to your vault.

Documents you upload — Private PDF, DOC, DOCX, or Markdown files and metadata such as document names, formats, types, tags, notes, and file sizes.

Send and download history — Company names, role titles, job links, recruiter emails, notes, and timestamps you enter when logging a download or adding a manual record.

Security and technical data — Standard hosting logs and security audit events such as uploads, downloads, exports, deletions, admin access, and rate-limit events. Audit records may include a hashed IP address and user agent, but not document contents, raw signed URLs, or full IP addresses. We do not use advertising trackers on this product.

• Authenticate you and keep your vault private to your account.
• Store, preview where supported, and securely serve your documents when you request them.
• Display and search your sent-history log.
• Operate, secure, and improve the service.

Metadata (document names, sent logs) is stored in a PostgreSQL database (Neon). Uploaded files are stored in private object storage (Cloudflare R2 when configured, or database storage in development). Files are not public; document access uses short-lived signed URLs issued only after an authenticated request.

• Clerk — authentication and account management.
• Neon — database hosting.
• Cloudflare R2 — private document storage (production).
• Vercel — application hosting and edge delivery.

Each provider processes data under their own terms and security programs.

We keep your vault data until you delete it through Data Controls. Minimal security audit records may be retained after vault deletion for abuse prevention and operational accountability. Server logs are retained for a limited period per our host's defaults.

Depending on where you live, you may have rights to access, correct, export, or delete your data. Use the Data Controls page in the app or email support@resumetracked.com. You can also delete individual documents and sent records from your library at any time.

Documents are served over HTTPS. Access requires a valid signed-in session and, for file bytes, a time-limited signed URL. Raw storage paths and object URLs are not exposed in the vault or admin analytics. No system is perfectly secure; do not upload documents you are not willing to store in a cloud service.

Resume Tracked is not directed at children under 16. We do not knowingly collect their data.

We may update this policy. We will post the new date at the top of this page. Continued use after changes means you accept the updated policy.

Privacy questions, data requests, or concerns: support@resumetracked.com.