Privacy Policy

AI Resume Checker

Last Updated: April 15, 2026

Introduction

This Privacy Policy explains the information collection, use, and sharing practices of AI Resume Checker ("we," "us," "our," or "Company") with respect to your use of our AI Resume Checker website and resume analysis service (the "Service").

Before using the Service, please carefully review this Privacy Policy. By using any part of the Service, you understand that your information will be collected, used, and disclosed as outlined in this Privacy Policy.

If you do not agree to this Privacy Policy, please do not use the Service.

Data Collection and Processing

How the Service Works

The Service helps users analyze their resume documents by:

  1. PDF Upload: You upload a PDF resume file to the Service.
  2. Local Metrics Extraction: Before transmission, the Service locally extracts basic technical metrics from your PDF (page margins, font information) in your browser. No data is sent to any server at this stage.
  3. PDF Transmission to Supabase: Your PDF file (as encoded binary data) along with locally extracted metrics is sent to our Supabase backend (edge functions hosted at *.supabase.co) for AI-powered analysis.
  4. Vision AI Processing (Google Gemini): The PDF file is forwarded from our Supabase backend to Google's Gemini Vision AI model. Gemini processes the document visually to extract resume structure, layout metrics, and content. Files are processed in real-time and are not permanently stored by Google. Our prompts instruct the model not to return personal identifiers (email addresses, phone numbers) in the analysis output — only structured resume data and visual formatting metrics are extracted.
  5. Scoring (OpenAI): The structured resume data extracted by Gemini is sent to our backend scoring service, which uses OpenAI to evaluate resume quality across multiple dimensions. The LLM uses a strict JSON schema designed to extract only structured facts without capturing personal identifiers.
  6. Structured Data Return: The AI returns a structured JSON object containing anonymized resume analysis (skills, experience categories, scores) without personal data like name, contact information, or specific identifying details.
  7. Storage in Supabase: The anonymized analysis results are stored in our Supabase database. In addition, your resume PDF is retained in a private, access-controlled storage bucket to support service quality and debug AI analysis errors. It is not used by us or our AI providers for model training.
  8. Temporary Browser Cache: Your uploaded PDF may be kept temporarily in your browser for a short period so that your report can reload quickly if you refresh the page. This temporary copy expires automatically and never leaves your device.

What Personal Data May Be Transmitted

When you upload your resume, the full PDF file is transmitted to our Supabase backend and subsequently to Google's Gemini Vision AI for processing. Your PDF may contain personal data such as:

  • Full name
  • Contact information (email, phone, address)
  • Employment history with company names and dates
  • Educational background
  • Skills and certifications

Important: Your PDF file is transmitted to Supabase and subsequently to Google Gemini (via Supabase) and OpenAI for AI processing. Both AI models are configured with strict output schemas that exclude personal identifiers; therefore, only anonymized analysis results are returned and stored. We do not process, store, or retain your personal identifiers (such as name, contact information, or address) in a structured, queryable form after the AI analysis is complete. Employment history data (company names, titles, dates) is stored only as part of the structured analysis results to provide you with your analysis history. Your raw PDF file is stored in a private, access-controlled bucket solely for service quality and debugging purposes, and is not used for model training or shared with third parties beyond our core AI processors.

Technical Usage Data: To ensure the stability and security of our service, and to enforce fair usage limits, we temporarily process the IP address associated with your requests. This information is used strictly to prevent spam and abuse of the free analysis tier, detect malicious activity, and enforce rate limits (e.g., number of analyses per hour/day). IP addresses are not stored in a persistent database, are not used to build user profiles for marketing purposes, and are not shared with third parties except as necessary for infrastructure security.

What Data is Stored

We store the following pseudonymized information in Supabase:

Resume Analysis Data:

  • A reference derived from your resume file (to enable caching and avoid reprocessing identical resumes)
  • Structured resume analysis (skills, experience categories, certifications, target role)
  • Structured employment history data (company names, job titles, dates, and descriptions) extracted from your resume to provide analysis history
  • Scoring results (ATS compatibility score, matching scores against job descriptions)
  • Timestamps of analysis

Account Information:
The Service does not require you to create an account or sign in. We do not collect your email address or name. Your analysis report is identified by a reference derived from your resume file itself, which allows you to return to your report using the same link. Because no account is created, reports are not associated with your personal identity, and different browsers or devices will not share analysis history.

Raw resume files (PDFs): Your uploaded PDF is stored in a private, access-controlled storage bucket to support service quality and debug AI analysis errors. It is not used for model training by us, Google Gemini, or OpenAI, and is not shared with third parties beyond those required for AI processing.

We do not store:

  • Personal contact information such as email address, phone number, or home address (unless you explicitly provide them for support)
  • Any other sensitive personal information beyond what is necessary for analysis
  • Any information that directly identifies you as an individual

Data Retention and Deletion

Local Browser Storage

Your uploaded PDF may be temporarily cached in your browser to enable fast report loading after a page refresh. This temporary cache expires automatically after a short period and never leaves your device. You can also clear it at any time through your browser's site-data settings.

Supabase Storage

  • Anonymized analysis data and raw PDF files are retained for as long as necessary to enable resume reanalysis and support debugging and service quality.
  • You can delete your analysis report at any time using the "Delete Report" button on your report page. This removes the analysis record from our database. Your uploaded PDF may be retained in our private storage bucket for service quality and debugging purposes, and will not be used for any other purpose.
  • For complete deletion of all data associated with your reports, including raw PDF files, please contact us at ingenuity.way@gmail.com. We will process deletion requests within 7 days.

Analytics Retention (Amplitude)

Analytics event data is stored in Amplitude. Retention and processing are governed by Amplitude's policies (see Amplitude Privacy Policy). You can request deletion of analytics data by contacting us at ingenuity.way@gmail.com.

Network Communication

The Service communicates with the following services:

  • Supabase (https://*.supabase.co/*) — backend infrastructure for data storage and processing
  • Google Gemini API (via Supabase Edge Functions) — vision-based PDF analysis and resume structure extraction. Data processing is governed by Google's Cloud Data Processing Addendum. Uploaded files are processed in real-time and are not retained by Google for model training.
  • OpenAI API (via Supabase Edge Functions) — AI-powered resume scoring and evaluation
  • Amplitude Analytics (https://api2.amplitude.com/*) — pseudonymized product usage metrics

All communication uses HTTPS encryption. Details on data flows are provided in the sections below.

Product Analytics (Amplitude)

We use Amplitude (Amplitude Privacy Policy) to understand how users interact with the Service and to improve UX, reliability, and feature prioritization.

How it works

  • The Amplitude library is included in our website code. No remote code is loaded at runtime.
  • The Service sends HTTPS requests to Amplitude's ingestion endpoint (api2.amplitude.com) containing usage events.

What we track (examples)

  • Page views and traffic sources (for example, marketing campaign parameters present in the URL)
  • Feature usage events (for example: resume upload, analysis completed, report deleted)
  • Categorized error types (no stack traces)
  • Aggregated buckets (for example: score buckets, file size buckets)

What we DO NOT send to Amplitude

  • Resume or job description text/content
  • Personal identifiers (email, phone number, name, physical address)
  • File names or document metadata
  • Form inputs, mouse movements, keystroke logging, screenshots, or session recordings

Data Security

We implement the following security measures:

  • Transport Security: All data transmitted to Supabase, Google Gemini, and OpenAI is encrypted using HTTPS.
  • Access Control: Data is accessed through Supabase's authentication system using API keys specific to our Service.
  • Database Security: Data is stored in a Supabase PostgreSQL database with appropriate access controls, encryption, and backups.
  • Third-Party Processing (Google Gemini): Your PDF file is transmitted to Google's Gemini Vision AI for resume analysis. Google processes this data in accordance with their Cloud Data Processing Addendum. Gemini does not use your data for model training. Google may temporarily retain data sent via their API solely for abuse monitoring purposes, in accordance with their enterprise privacy policies.
  • Third-Party Processing (OpenAI): Structured resume data (extracted by Gemini) is sent to OpenAI for scoring. OpenAI processes data in accordance with their privacy policy and data handling agreements. We share only the necessary structured data required for scoring. OpenAI may temporarily retain data sent via their API for a limited period (typically up to 30 days) solely for abuse monitoring purposes. OpenAI does not use your data for model training.
  • Secure Storage of Resume Files: Uploaded PDFs are stored in a private, access-controlled storage bucket. While we take reasonable measures to protect stored files, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access.

Our Commitments

  • We use your data only to provide and improve the Service's resume analysis and job-match features.
  • We transfer user data only to the sub-processors disclosed in this policy (Supabase, Google Gemini, OpenAI, Amplitude) as required to provide those features, or when legally required.
  • We do not sell user data, and do not use it for personalized advertising, ad targeting, or profiling.
  • We do not allow humans to read user data, except (i) with your explicit consent, (ii) for security and abuse detection, (iii) when legally required, or (iv) in aggregated or anonymized form.
  • We do not use user data, including uploaded PDFs, to train generalized AI models.

AI Disclaimer and Limitations

The analysis provided by the Service is generated by Artificial Intelligence. While we strive for accuracy and continuously improve our algorithms, AI systems can occasionally produce incorrect, incomplete, or misleading information. This includes potential "hallucinations" where the AI may infer or suggest information not explicitly present in your resume.

The scores, recommendations, and analysis are for informational purposes only and should not be the sole basis for career decisions. We recommend:

  • Using the analysis as a supplementary tool alongside your own judgment
  • Verifying AI-generated suggestions against your actual resume content
  • Consulting with career professionals or recruiters for critical career decisions
  • Not relying exclusively on ATS scores when making resume modifications

AI analysis quality may vary depending on resume format, clarity, and content specificity.

Your Rights and Choices

Data Deletion

Resume Analysis Data
You can delete your analysis report at any time using the "Delete Report" button on your report page. This removes the analysis record from our database.

To request complete deletion of all data, including your uploaded PDF file and analytics events:

  1. Email us at ingenuity.way@gmail.com with the subject "Data Deletion Request"
  2. We will process deletion requests within 7 days

Analytics Opt-Out
The Service does not currently provide an in-product toggle to disable analytics. To delete analytics data, follow the "Data Deletion" instructions above.

Rate Limiting

The Service implements rate limiting to manage server usage. When you approach or exceed rate limits, you will be notified.

Children and Age Restrictions

The Service is intended for users 16 years of age and older. We do not knowingly collect or process data from children under 16. If we become aware that a child under 16 has used the Service, we will take steps to delete their data as required by law.

Changes to This Privacy Policy

We may update this Privacy Policy as the Service evolves and we add new features. We will post any changes here and update the "Last Updated" date. Material changes will be communicated to users if technically feasible. Continued use of the Service after updates constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have questions about this Privacy Policy, the Service's data practices, or wish to exercise your rights (including data deletion or access), please contact us at:

Email: ingenuity.way@gmail.com

We will respond to your requests within 7 days.

Summary of Key Points

  • Your PDF file is transmitted to Supabase and Google Gemini Vision AI for analysis. The PDF is retained in a private storage bucket to support debugging and service quality. Neither Google Gemini nor OpenAI uses your file for model training.
  • Data is stored in pseudonymized form; personal identifiers (name, email, address) are not stored
  • Neither Google Gemini nor OpenAI uses your data for model training
  • No account creation, email address, or name is required
  • You can delete your analysis report directly from the report page at any time
  • Product analytics via Amplitude tracks pseudonymized feature usage only (no resume content, PII, or document content)
  • All communication with Supabase, Google Gemini, OpenAI, and Amplitude is encrypted using HTTPS