Privacy Policy

Effective Date: August 20, 2026

Specific Technologies Inc. (“Company”, “we”, “us”), a Delaware corporation, operates specificresume.com (the “Service”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service.

At a glance

This is a plain-English summary. The full policy below is binding.

• What we collect: the information you give us to build resumes (work history, education, uploaded CVs, LinkedIn / portfolio links, job descriptions, voice or text chat input), plus standard usage data.
• What we do with it: we use it to run the Service — primarily to build and tailor your resumes using AI — and to keep the product secure and improve it.
• Who we share it with: a list of vetted service providers (AI model providers and the AI gateway that routes to them, hosting, email, payments, analytics, advertising measurement) named in Section 6. We do not sell your information.
• Which AI models see it: your content is sent to several AI providers, not one. Section 5 names them and explains how a request reaches them.
• Your rights: you can access, correct, export, or delete your data at any time by emailing privacy@specificresume.com.
• Questions: privacy@specificresume.com for privacy / data-rights matters, legal@specificresume.com for everything else.

1. Who we are

Specific Technologies Inc. is a Delaware corporation. Our registered address is 1007 North Orange St., 4th Floor, Wilmington, New Castle County, Delaware 19801, United States. References to “we”, “us”, or “our” mean Specific Technologies Inc.

2. Information we collect

Information you provide:

• Account information (name, email, authentication credentials)
• Resume and profile content (work experience, education, skills, certifications, languages, awards, volunteering, publications, side projects, career preferences) — you may enter this in any language
• Job descriptions you submit so the Service can tailor a resume to a specific role
• Uploaded documents (resumes, CVs, cover letters) and any files you choose to attach
• Imported data from third-party sources you link us to (LinkedIn URLs, GitHub profiles, portfolio sites, personal websites). When you provide such a link, we fetch the publicly available content at that URL
• Messages you send through our chat interface, including text input and, if you use voice input, audio recordings
• Feedback, support requests, and any other content you send us

Information collected automatically:

• Usage data (pages visited, features used, session duration, timestamps)
• Device information (browser type, operating system, screen resolution)
• Network information (IP address, approximate location derived from IP, referring URL)
• Session recordings of your interactions with the Service (page views, clicks, keystrokes, mouse movement) captured by PostHog for product debugging and quality improvement. Password fields and third-party payment forms are excluded.
• Cookies and similar technologies (see Section 11)

3. The candidate profile

The Service is built around a persistent candidate profile — a single record of your professional history that grows as you use the product. Each individual job-specific resume you generate is a derivative artifact built from this profile against a specific job description.

Deletion behaves accordingly: deleting an individual resume does not remove the underlying profile data. Deleting your profile or your account removes both the profile and the resumes generated from it, subject to the retention rules in Section 9.

4. How we use your information

• Provide the Service: build, tailor, and export resumes, including AI tailoring of resume content against a specific job description
• Maintain your candidate profile: store and enrich your profile across sessions
• Process inputs you provide: transcribe voice input via OpenAI’s speech-to-text service; fetch the public profile pages, portfolios, and personal sites you link (LinkedIn via Apify; portfolio and personal sites via Jina, with Tavily configured as a fallback); and extract text from documents you upload
• Improve the Service: analyze usage to fix bugs and develop features
• Communicate: send transactional notifications about your account and respond to support requests
• Advertising measurement: measure whether a sign-up or purchase followed an ad we ran, as described in Section 7. We do not use your resume or profile content for advertising, and we do not run ads inside the Service
• Security: detect and prevent fraud, abuse, and unauthorized access
• Legal compliance: respond to lawful requests and enforce our Terms

Legal basis for processing (EEA / UK users)

• Contract performance — providing the Service you requested
• Legitimate interests — security, service improvement, and communicating with you
• Consent — where explicitly given, e.g., marketing
• Legal obligation — where required by law

5. AI data processing

The Service uses third-party AI models to analyze your inputs and generate resume content. Your candidate profile, job descriptions, chat messages, and (where you use voice input) audio are sent to AI providers solely to generate responses within the Service.

• A single turn uses more than one model. Writing your resume, classifying what you asked for, reading a job description, checking a draft against your profile, and naming a chat are separate steps, and they do not all run on the same provider. Your content can therefore reach several of the providers below within one conversation.
• How a request reaches a model. We call some providers directly (Anthropic and OpenAI). Everything else is sent through OpenRouter, an AI gateway that forwards the request to the company behind the model or to a third-party infrastructure host licensed to serve it. Which host serves a given request is decided by OpenRouter at request time and is not a fixed list, so we cannot name every possible recipient in advance. OpenRouter documents the providers it routes to and their data-handling terms at openrouter.ai/docs/features/privacy-and-logging.
• Model providers currently in use. Anthropic (Claude), OpenAI (GPT, and Whisper for speech-to-text), Google (Gemini), Alibaba (Qwen), DeepSeek, Z.ai (GLM), Moonshot AI (Kimi), MiniMax, and NVIDIA (Nemotron). By default your conversation is written by Z.ai’s GLM, while the supporting steps described above run on Google’s Gemini. The other providers are used when a different model is selected for a chat. This list changes as we evaluate models, and we update this page when it does.
• Providers outside the US and the EEA. Several of the model providers named above are established in China (Alibaba, DeepSeek, Z.ai, Moonshot AI, MiniMax). Where such a provider serves a request, your content is processed by that provider under the transfer safeguards described in Section 8.
• Training. We use these providers under their standard API terms, which do not use API inputs to train their general-purpose models. Where a routing or training opt-out is offered to us as the account holder, for example OpenRouter’s account-level training opt-out, we elect it.
• We may review specific interactions when investigating bugs, abuse, or safety incidents. Outside of those situations, we do not access your content for purposes unrelated to providing or securing the Service.
• If you use voice input, your audio is transmitted to OpenAI for speech-to-text transcription. We do not use your audio to identify you or to create a voiceprint.
• Our LLM analytics integration also sends copies of your chat prompts and the AI-generated responses to PostHog, used solely for debugging chat quality and product improvement. PostHog is not an AI model provider and does not train models on this content.

Do not provide information you are not comfortable being processed by AI systems. AI output is generated based on the information you provide and is not guaranteed to be accurate — please review every resume before you use it.

6. Service providers and sub-processors

We share personal data with the following service providers operating on our behalf under contract:

7. Data sharing

We do not sell your personal information for monetary consideration. We use Google Analytics with default privacy-protective settings and without enabling advertising features.

Advertising measurement. We advertise the Service, and we measure whether those ads work. When you arrive from one of our ads, a first-party cookie named __oppref records that referral for up to 30 days. If you then sign up or buy credits, we send OpenAI Ads an event containing a hashed copy of your user id and email address, your IP address, browser user agent, the page where the event happened, and, for a purchase, the amount and currency. This lets the ad platform connect that sign-up or purchase back to the ad click. Under California law this may count as “sharing” for cross-context behavioral advertising, even though no money changes hands and no resume or profile content is involved. You can opt out at any time by emailing privacy@specificresume.com, by blocking the __oppref cookie in your browser, or by using your browser’s tracking-prevention controls. Opting out does not affect your access to the Service.

Transfers you ask for. When you choose “Save to Google Docs”, your browser uploads that resume to your own Google Drive. This happens only when you ask for it, the file lands in your account rather than ours, and we do not keep your Google credentials.

Beyond the service providers listed above, we share data:

• For legal reasons: when required by law, court order, or to protect rights, property, or safety
• In a business transfer: in a merger, acquisition, or asset sale, with notice to you

8. International data transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. Where personal data is transferred outside the EEA or UK, we rely on the safeguards offered by our sub-processors, which may include Standard Contractual Clauses, the EU-US Data Privacy Framework, and applicable adequacy decisions.

Because AI requests are routed to whichever provider serves the selected model, this can include providers established outside the United States and the EEA, including in China, and countries that have not received an EU adequacy decision. Section 5 names the providers currently in use.

9. Data retention

• Account, candidate profile, and resumes: retained for as long as your account remains active, or as long as needed to provide the Service to you
• Chat messages, voice transcripts, and raw imports (LinkedIn payloads, portfolio HTML, uploaded files): retained only as long as necessary to produce and maintain your candidate profile, and deleted when no longer needed or when your account is deleted
• Usage and security logs: retained in aggregated form for service improvement; identifiable logs are retained only as long as needed for security and troubleshooting
• Backups: may persist in encrypted backups for a short period after deletion before being purged in the normal backup-rotation cycle
• Session recordings and LLM traces in PostHog: retained by PostHog for the duration permitted by our PostHog plan (typically 30 days on the standard plan), after which they are automatically deleted.
• Financial and billing records: retained as required by applicable tax and accounting law

When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required by law to retain it.

10. Your rights

All users. You may access, correct, export, or delete your data at any time by emailing privacy@specificresume.com. Upon request we will provide a copy of your personal data in a structured, commonly used, machine-readable format.

EEA / UK users (GDPR). You have the right to: access your data; rectify inaccurate data; request erasure (“right to be forgotten”); restrict processing; receive your data in a portable format; object to processing; withdraw any consent you have given; and lodge a complaint with your supervisory authority.

California users (CCPA / CPRA). You have the right to: know what personal information we collect; request deletion or correction; opt out of any “sale” or “sharing” (we do not sell; the advertising measurement described in Section 7 may qualify as “sharing”, and you can opt out of it by emailing privacy@specificresume.com); limit our use of sensitive personal information; and not be discriminated against for exercising these rights. In the past 12 months, we have collected the following CCPA categories of personal information: identifiers, customer records, commercial information (transactions), internet and network activity, approximate geolocation (IP-based), and professional or employment-related information. We do not knowingly collect or sell information about consumers under 16.

Hiring decisions are made by employers, not by us. Our AI generates resume content for your review; you remain in full control of what you submit to any employer.

Sensitive information. If you choose to include sensitive information — such as racial or ethnic origin, religious beliefs, health, or sexual orientation — in your resume content, you do so voluntarily and we process it solely as part of your User Content to provide the Service.

We respond to rights requests within 30 days, or as required by applicable law (GDPR allows up to one month, extendable to three; CCPA allows up to 45 days, extendable to 90).

11. Cookies

• Essential cookies: authentication and session management. Required for the Service to function.
• Analytics cookies: Google Analytics 4 (measurement ID G-MS2NSTTXSC), run with default privacy-protective settings and without Google Signals, advertising features, or cross-site tracking enabled.
• Analytics cookies (PostHog): anonymous distinct-ID cookies (ph_*) used to associate page views, events, and session recordings with a stable identifier. We do not use them for cross-site tracking or advertising.
• Advertising measurement cookie: __oppref, a first-party cookie set for up to 30 days when you arrive from one of our ads. It records that referral so a later sign-up or purchase can be attributed to the ad, as described in Section 7. It is not used to build an advertising profile of you or to target ads at you elsewhere.

We do not use third-party cross-site tracking cookies, and we do not run ads inside the Service. You can manage cookies via your browser settings, and you can opt out of Google Analytics specifically using the Google Analytics Opt-out Browser Add-on. You can opt out of PostHog tracking and session recording by emailing privacy@specificresume.com. Disabling essential cookies may impair Service functionality.

12. Marketing communications

We currently send only transactional and account-related emails — for example, signup confirmation, password reset, payment receipts, and account-deletion confirmation.

We may in the future send marketing or promotional emails, but only with your prior opt-in consent (for example, a checkbox at signup or a setting in your account preferences). Every marketing email will include a clear one-click unsubscribe link, and you can withdraw consent at any time.

13. Security

We use TLS for data in transit and rely on the encryption-at-rest features of our infrastructure providers (Supabase, Render). We apply role-based access controls and review our security practices regularly. No system is completely secure, and we cannot guarantee absolute security.

Where a personal-data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority and (where required) you, in accordance with applicable law (including the 72-hour timeframe under GDPR Article 33).

14. Children’s privacy

The Service is not intended for anyone under 16. We do not knowingly collect data from children under 16. If we learn that we have collected such data, we will delete it promptly.

15. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Contact

Specific Technologies Inc.
Privacy and data-rights requests: privacy@specificresume.com
General legal questions: legal@specificresume.com
Mailing address: 1007 North Orange St., 4th Floor, Wilmington, New Castle County, Delaware 19801, United States