Privacy Policy

Effective Date: February 19, 2026

Specific Technologies Inc. (“Company”, “we”, “us”), a Delaware corporation, operates specificresume.com (“Service”). This Privacy Policy explains how we collect, use, share, and protect your personal information.

1. Information We Collect

Information you provide:

  • Account information (name, email, authentication credentials)
  • Resume and profile content (work experience, education, skills, certifications, languages, awards, volunteering, publications, career preferences)
  • Job descriptions you submit for resume tailoring
  • Uploaded documents (resumes, CVs)
  • Imported data from LinkedIn, GitHub, portfolio URLs, or other links you provide
  • Messages sent through our chat interface, feedback, and support requests

Information collected automatically:

  • Usage data (pages visited, features used, session duration, timestamps)
  • Device information (browser type, OS, screen resolution)
  • Network information (IP address, approximate location, referring URL)
  • Cookies and similar technologies (see Section 7)

2. How We Use Your Information

  • Provide the Service: process your data to generate, tailor, and export resumes
  • Maintain your profile: store your profile dataset across sessions
  • Improve the Service: analyze usage to fix bugs and develop features
  • Communicate: send account notifications and respond to support requests
  • Security: detect and prevent fraud and unauthorized access
  • Legal compliance: respond to lawful requests and enforce our Terms

Legal Basis for Processing (EEA/UK Users)

  • Contract performance (providing the Service you requested)
  • Legitimate interests (security, improvement, communication)
  • Consent (where explicitly given, e.g., marketing)
  • Legal obligation (where required by law)

3. AI Data Processing

The Service uses AI to analyze your information and generate resume content:

  • Your resume content, profile data, and job descriptions are sent to third-party AI providers (currently OpenAI and Anthropic) for processing, solely to generate responses within the Service.
  • We contractually require that AI providers do not use your data to train their models.
  • In rare cases, our team may review AI interactions to improve quality and safety, using anonymized or pseudonymized data when possible.

Do not provide information you are not comfortable being processed by AI systems.

4. Data Sharing

We do not sell your personal information. We share data only as follows:

  • Service providers operating on our behalf under contract: AI processing (OpenAI, Anthropic), cloud infrastructure (Vercel, Supabase), authentication (Supabase Auth), payment processing (when applicable), and analytics.
  • Legal requirements: when required by law, court order, or to protect rights and safety.
  • Business transfers: in a merger, acquisition, or asset sale, with notice to you.

5. International Data Transfers

Your data may be transferred to and processed in the United States and other countries. For EEA/UK transfers, we rely on Standard Contractual Clauses, adequacy decisions, and contractual protections with providers.

6. Data Retention

  • Account and profile data: retained until you delete your account
  • Resume data: retained until you delete the resume or your account
  • Usage data: retained in aggregated/anonymized form
  • Communication logs: retained up to 24 months

After account deletion, personal data is deleted or anonymized within 30 days, except where retention is required by law.

7. Cookies

  • Essential cookies: authentication and session management (required)
  • Analytics cookies: understanding usage and improving the Service

We do not use advertising or cross-site tracking cookies. Manage preferences via browser settings. Disabling essential cookies may impair functionality.

8. Your Rights

All users may access, correct, delete, or export their data.

EEA/UK users (GDPR) may additionally restrict processing, object to processing, request data portability, withdraw consent, and lodge a complaint with a data protection authority.

California users (CCPA/CPRA) may know what data is collected, request deletion, opt out of data sales (we do not sell data), and exercise rights without discrimination.

To exercise any rights: legal@specificresume.com. We respond within 30 days or as required by applicable law.

9. Children’s Privacy

The Service is not for anyone under 16. We do not knowingly collect data from children under 16. If we learn of such collection, we will delete it promptly.

10. Security

We use encryption in transit and at rest, access controls, and regular security reviews. No system is 100% secure; we cannot guarantee absolute security.

11. Changes

We may update this policy. Material changes will be posted with an updated effective date. Continued use constitutes acceptance.

12. Contact

Specific Technologies Inc.
Email: legal@specificresume.com