Privacy Policy

Effective Date: May 20, 2026

Specific Technologies Inc. (“Company”, “we”, “us”), a Delaware corporation, operates specificresume.com (the “Service”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service.

At a glance

This is a plain-English summary. The full policy below is binding.

• What we collect: the information you give us to build resumes (work history, education, uploaded CVs, LinkedIn / portfolio links, job descriptions, voice or text chat input), plus standard usage data.
• What we do with it: we use it to run the Service — primarily to build and tailor your resumes using AI — and to keep the product secure and improve it.
• Who we share it with: a fixed list of vetted service providers (AI, hosting, email, payments, analytics) listed in Section 7. We do not sell your information.
• Your rights: you can access, correct, export, or delete your data at any time by emailing privacy@specificresume.com.
• Questions: privacy@specificresume.com for privacy / data-rights matters, legal@specificresume.com for everything else.

1. Who we are

Specific Technologies Inc. is a Delaware corporation. Our registered address is [TBD: Delaware registered agent address]. References to “we”, “us”, or “our” mean Specific Technologies Inc.

2. Information we collect

Information you provide:

• Account information (name, email, authentication credentials)
• Resume and profile content (work experience, education, skills, certifications, languages, awards, volunteering, publications, side projects, career preferences) — you may enter this in any language
• Job descriptions you submit so the Service can tailor a resume to a specific role
• Uploaded documents (resumes, CVs, cover letters) and any files you choose to attach
• Imported data from third-party sources you link us to (LinkedIn URLs, GitHub profiles, portfolio sites, personal websites). When you provide such a link, we fetch the publicly available content at that URL
• Messages you send through our chat interface, including text input and, if you use voice input, audio recordings
• Feedback, support requests, and any other content you send us

Information collected automatically:

• Usage data (pages visited, features used, session duration, timestamps)
• Device information (browser type, operating system, screen resolution)
• Network information (IP address, approximate location derived from IP, referring URL)
• Session recordings of your interactions with the Service (page views, clicks, keystrokes, mouse movement) captured by PostHog for product debugging and quality improvement. Password fields and third-party payment forms are excluded.
• Cookies and similar technologies (see Section 12)

3. The candidate profile

The Service is built around a persistent candidate profile — a single record of your professional history that grows as you use the product. Each individual job-specific resume you generate is a derivative artifact built from this profile against a specific job description.

Deletion behaves accordingly: deleting an individual resume does not remove the underlying profile data. Deleting your profile or your account removes both the profile and the resumes generated from it, subject to the retention rules in Section 10.

4. How we use your information

• Provide the Service: build, tailor, and export resumes, including AI tailoring of resume content against a specific job description
• Maintain your candidate profile: store and enrich your profile across sessions
• Process inputs you provide: transcribe voice input via OpenAI’s speech-to-text service; fetch the public profile pages, portfolios, and personal sites you link (LinkedIn via Apify; portfolio and personal sites via Jina, with Tavily configured as a fallback); and extract text from documents you upload
• Improve the Service: analyze usage to fix bugs and develop features
• Communicate: send transactional notifications about your account and respond to support requests
• Security: detect and prevent fraud, abuse, and unauthorized access
• Legal compliance: respond to lawful requests and enforce our Terms

Legal basis for processing (EEA / UK users)

• Contract performance — providing the Service you requested
• Legitimate interests — security, service improvement, and communicating with you
• Consent — where explicitly given, e.g., marketing
• Legal obligation — where required by law

5. AI data processing

The Service uses third-party AI models to analyze your inputs and generate resume content. Your candidate profile, job descriptions, chat messages, and (where you use voice input) audio are sent to AI providers solely to generate responses within the Service.

• We currently use OpenAI and Anthropic for text generation, and OpenAI for speech-to-text transcription. Requests may be routed via OpenRouter, an AI request gateway.
• We use these providers under their standard API terms, which do not use your inputs to train their general-purpose models. Where opt-outs are available (for example, with OpenRouter), we elect them.
• We may review specific interactions when investigating bugs, abuse, or safety incidents. Outside of those situations, we do not access your content for purposes unrelated to providing or securing the Service.
• If you use voice input, your audio is transmitted to OpenAI for speech-to-text transcription. We do not use your audio to identify you or to create a voiceprint.
• Our LLM analytics integration also sends copies of your chat prompts and the AI-generated responses to PostHog, used solely for debugging chat quality and product improvement. PostHog is not an AI model provider and does not train models on this content.

Do not provide information you are not comfortable being processed by AI systems. AI output is generated based on the information you provide and is not guaranteed to be accurate — please review every resume before you use it.

6. Service providers and sub-processors

We share personal data with the following service providers operating on our behalf under contract:

7. Data sharing

We do not sell your personal information for monetary consideration. We use Google Analytics with default privacy-protective settings and without enabling advertising features. If you are a California resident, you may opt out of any processing that may qualify as “sharing” or “sale” under your local law by emailing privacy@specificresume.com or by using your browser’s tracking-prevention controls.

Beyond the service providers listed above, we share data:

• For legal reasons: when required by law, court order, or to protect rights, property, or safety
• In a business transfer: in a merger, acquisition, or asset sale, with notice to you

8. International data transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. Where personal data is transferred outside the EEA or UK, we rely on the safeguards offered by our sub-processors, which may include Standard Contractual Clauses, the EU-US Data Privacy Framework, and applicable adequacy decisions.

9. Data retention

• Account, candidate profile, and resumes: retained for as long as your account remains active, or as long as needed to provide the Service to you
• Chat messages, voice transcripts, and raw imports (LinkedIn payloads, portfolio HTML, uploaded files): retained only as long as necessary to produce and maintain your candidate profile, and deleted when no longer needed or when your account is deleted
• Usage and security logs: retained in aggregated form for service improvement; identifiable logs are retained only as long as needed for security and troubleshooting
• Backups: may persist in encrypted backups for a short period after deletion before being purged in the normal backup-rotation cycle
• Session recordings and LLM traces in PostHog: retained by PostHog for the duration permitted by our PostHog plan (typically 30 days on the standard plan), after which they are automatically deleted.
• Financial and billing records: retained as required by applicable tax and accounting law

When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required by law to retain it.

10. Your rights

All users. You may access, correct, export, or delete your data at any time by emailing privacy@specificresume.com. Upon request we will provide a copy of your personal data in a structured, commonly used, machine-readable format.

EEA / UK users (GDPR). You have the right to: access your data; rectify inaccurate data; request erasure (“right to be forgotten”); restrict processing; receive your data in a portable format; object to processing; withdraw any consent you have given; and lodge a complaint with your supervisory authority.

California users (CCPA / CPRA). You have the right to: know what personal information we collect; request deletion or correction; opt out of any “sale” or “sharing” (we do not sell, and may share only as described above); limit our use of sensitive personal information; and not be discriminated against for exercising these rights. In the past 12 months, we have collected the following CCPA categories of personal information: identifiers, customer records, commercial information (transactions), internet and network activity, approximate geolocation (IP-based), and professional or employment-related information. We do not knowingly collect or sell information about consumers under 16.

Hiring decisions are made by employers, not by us. Our AI generates resume content for your review; you remain in full control of what you submit to any employer.

Sensitive information. If you choose to include sensitive information — such as racial or ethnic origin, religious beliefs, health, or sexual orientation — in your resume content, you do so voluntarily and we process it solely as part of your User Content to provide the Service.

We respond to rights requests within 30 days, or as required by applicable law (GDPR allows up to one month, extendable to three; CCPA allows up to 45 days, extendable to 90).

11. Cookies

• Essential cookies: authentication and session management. Required for the Service to function.
• Analytics cookies: Google Analytics 4 (measurement ID G-MS2NSTTXSC), run with default privacy-protective settings and without Google Signals, advertising features, or cross-site tracking enabled.
• Analytics cookies (PostHog): anonymous distinct-ID cookies (ph_*) used to associate page views, events, and session recordings with a stable identifier. We do not use them for cross-site tracking or advertising.

We do not use advertising or cross-site tracking cookies. You can manage cookies via your browser settings, and you can opt out of Google Analytics specifically using the Google Analytics Opt-out Browser Add-on. You can opt out of PostHog tracking and session recording by emailing privacy@specificresume.com. Disabling essential cookies may impair Service functionality.

12. Marketing communications

We currently send only transactional and account-related emails — for example, signup confirmation, password reset, payment receipts, and account-deletion confirmation.

We may in the future send marketing or promotional emails, but only with your prior opt-in consent (for example, a checkbox at signup or a setting in your account preferences). Every marketing email will include a clear one-click unsubscribe link, and you can withdraw consent at any time.

13. Security

We use TLS for data in transit and rely on the encryption-at-rest features of our infrastructure providers (Supabase, Render). We apply role-based access controls and review our security practices regularly. No system is completely secure, and we cannot guarantee absolute security.

Where a personal-data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority and (where required) you, in accordance with applicable law (including the 72-hour timeframe under GDPR Article 33).

14. Children’s privacy

The Service is not intended for anyone under 16. We do not knowingly collect data from children under 16. If we learn that we have collected such data, we will delete it promptly.

15. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Contact

Specific Technologies Inc.
Privacy and data-rights requests: privacy@specificresume.com
General legal questions: legal@specificresume.com
Mailing address: [TBD: Delaware registered agent address]