Get My Fit Score →
Legal

Privacy Policy

Last updated: September 15, 2026

1. What data we collect

Ready to Apply™ collects minimal data necessary to provide the service. We collect:

  • Device identity — a server-issued signed cookie (rta_did) that identifies your browser session. It contains a random UUID and is HttpOnly. We do not collect your name, email, or account information unless you make a purchase.
  • Usage data — the number of analyses you've run and timestamps, tied to your device identity. Used for free credit tracking.
  • Payment information — if you purchase credits, Stripe collects your payment details. We receive your email address and a Stripe customer ID for credit management. We never receive or store your full card number.
  • Contact form submissions — if you contact us, we collect your name, email, subject, and message, which are sent to our support inbox via Resend. These are not stored in our database.
  • Your analysis, including short quotations from your resume — the analysis explains itself by quoting the lines it is talking about. A rewrite suggestion shows the original bullet next to the improved one; the evidence tables quote the phrase that earned a score. Those quotations are part of the stored analysis. It is tied to your device identity only, never to your name.

2. What we do NOT collect

  • Your resume file or its full text — your resume is sent to the AI for analysis and discarded immediately. The complete document is never written to our server or database. Short quotations from it survive inside your analysis, as described above.
  • Your job description file or its full text — same as your resume. What we keep is a structured summary of the requirements the AI identified, not the posting itself.
  • Any other personal information unless you explicitly provide it.

3. How we use your data

  • Device identity and usage data — to enforce the free credit limit and prevent abuse.
  • Analysis output — stored in our database tied to device identity only (not your name or email), so you can reload a prior analysis via its link. This output contains the AI's derived scoring and recommendations cached in your browser — not your raw resume or job description.
  • Analysis links and document privacy — each analysis produces a unique link (e.g. results.html?jobId=123). Opening this link restores your scoring output which is cached in your browser, but it does not carry your session forward. If you open the link in a different browser session, Resume Optimization and Interview Prep cannot continue — new documents must be entered and the session will start fresh from the scoring step. This is a direct consequence of how we handle your data: your job description and resume are never stored on our servers, so they cannot be retrieved in a new browser. To continue an uninterrupted run across all three steps, we recommend staying in the same browser for the duration of your session.
  • Payment data — to manage your credit balance and provide purchase records.

4. Data retention

Your analysis — the score, the reasoning, the recommendations, and the quotations from your resume that support them — is kept for 12 months, tied to your device identity only, never to your name or email. It is kept so you can reopen a result from its link and so a session survives a payment redirect. After 12 months it is deleted.

Your resume and job description are not part of that. They go to the AI and are discarded; only the quotations inside your analysis remain. PDF reports are never stored and exist only during your active session. Device usage records are kept on 30-day rolling windows for free credit tracking. Payment records are kept as long as financial regulations require. Paid credits do not expire.

5. Your resume on your own device

When you use the resume rewrite, we build a structured version of your resume — your roles, dates, and bullet points as separate fields rather than one block of text — so the tool can suggest changes bullet by bullet. That structured copy is stored in your own browser, not on our servers. Your own edits to the rewritten resume are stored alongside it.

It is kept for 24 hours. Editing your resume restarts that clock, so work you are still doing is not thrown away mid‑session. After that it is deleted from your browser automatically. It is filed under a fingerprint of your resume's text, so returning with the same resume finds it and returning with a different one does not.

We never store it. If you re‑run the rewrite on a resume you have already analyzed, your browser sends that structured copy back to us so the AI does not have to read your resume from scratch — which makes the re‑run faster and cheaper for you. It is used for that request and discarded, exactly like the original document. It is never written to our database.

The free Resume Cleanup also keeps your work in your browser. The text you give it and the changes you make are saved in your own browser for 24 hours after your last change, so a refresh or a closed tab does not lose your work. It is never sent to us. Clicking Clear removes it immediately.

Because it lives in your browser, it is on your device and under your control: clearing your browser's site data for this site removes it immediately, and it never follows you to another device or another browser. If you use private or incognito browsing, it is discarded when you close the window.

6. Third-party services

We use third-party services for the following functions: AI analysis processing (Anthropic), payment processing (Stripe), device identity and session management, DNS and security infrastructure, email delivery (Resend), and backend hosting (Railway) with a content delivery network (Netlify and Cloudflare). Each provider processes only the data necessary for their specific function. Where your data is shared with a third-party provider, it is subject to that provider's privacy policy and terms of service.

7. Where your data is processed

Your resume and job description are sent to the United States. Our AI provider, Anthropic, processes them on systems located there. Our hosting, payment and email providers also operate outside Canada.

This means your information is subject to the laws of those countries, and may in principle be accessible to their courts, law enforcement or national security authorities under their own legal processes. We cannot exempt it from that.

We use these providers because they are the ones that make the Service work. If you would prefer your information not to be processed outside Canada, please do not submit documents to the Service.

8. How we protect your data

All traffic between you and Ready to Apply is encrypted in transit using HTTPS. Access to our database is restricted and requires credentials held only by the operator. We collect as little as we can: we do not store your resume or job description, we do not ask for your name, and the analysis we do keep is linked to an anonymous device identifier rather than to you.

No method of transmitting or storing information is completely secure. We cannot guarantee absolute security, and we will not pretend otherwise. The strongest protection for your resume is that we do not keep it.

9. If there is a data breach

If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, as required by Canadian privacy law. We will keep records of such breaches as required.

Because your analysis is linked only to an anonymous device identifier and never to your name or email, we may have no way to contact you directly. In that case we will publish notice on this site.

10. Cookies and similar technologies

  • Device identity (rta_did) — a signed, HttpOnly cookie holding a random identifier. It is how free credits are tracked without an account. It contains no personal information. This one is essential; the Service cannot work without it.
  • Browser storage — your credit balance, the rewritten resume and edits, and your working copy in the free Resume Cleanup, all described under Your resume on your own device. This is stored in your browser, not by us.
  • Google Analytics — we use Google Analytics 4 to understand how many people use the Service and which pages they visit. It does not receive your resume, your job description or your analysis.

We do not use advertising cookies, and we do not sell or share your information for advertising.

11. Your rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and portability of your data. To exercise any of these rights, please contact us.

12. Contact information

For privacy-related questions or requests, please use our contact form.