Legal
Privacy Policy
TailorFit ("we", "us", "our") is operated by Kieran Reynolds as an independent product. This policy explains what personal data we collect, why we collect it, and your rights over that data. We've written it to be readable, not to obscure anything.
1. Data we collect
Account data
When you create an account we collect your email address and, optionally, your name and avatar. We use Supabase for authentication — we never see or store passwords; magic-link and OAuth flows handle all of that.
Profile and resume data
TailorFit's core purpose is building and refining your professional profile. This includes:
- Work history, education, skills, and accomplishments you enter or import
- Resume files you upload (stored in Supabase Storage)
- Job descriptions you paste or import
- AI-generated resume tailorings and cover letters you request
- Application records you create (company, role, stage, notes)
Usage and analytics data
We collect product analytics via PostHog and error reports via Sentry. This includes pages visited, features used, timing, and browser/device metadata. It does not include the content of your profile or resumes.
Billing data
If you subscribe or purchase credits, Stripe handles all card data. We store your Stripe Customer ID and subscription status — we never see or store raw card numbers or CVV.
Support communications
Messages you send via our contact form or support email are stored in Zoho Desk, our support inbox. We retain these to help resolve your issue and to improve the service.
2. How we use it
- To provide the service. Profile data is the raw material for resume tailoring and job analysis. We can't operate without it.
- To process payments. Your subscription status determines which features you can access and how many credits you have.
- To improve the product. Aggregated, anonymised analytics help us understand what's useful and what isn't.
- To send transactional emails. Account confirmation, magic-link sign-in, and billing receipts. We do not send marketing emails without your consent.
- To ensure security and prevent abuse. Bot protection on sign-up (Cloudflare Turnstile) and rate limiting on API endpoints.
We do not sell your data. We do not use your data for advertising. We do not use your profile content to train AI models.
3. Third-party services
We use the following sub-processors. Each has its own privacy policy:
4. AI processing
When you request resume tailoring, job analysis, cover letter generation, or interview prep, we send the relevant text — job description, your profile data, or your resume content — to Anthropic's Claude API to generate the output.
Anthropic's privacy policy governs how they handle API data. As of the date of this policy, Anthropic does not use API inputs to train its models by default.
We store the generated outputs (tailored resumes, summaries, prep questions) in your account so you can access them later without re-generating.
5. Data retention
Account data — retained for as long as your account is active. Deleting your account removes your profile, applications, resumes, AI-generated documents, job descriptions, credit history, interview sessions, and uploaded files immediately. Billing records are retained for up to 7 years for legal and accounting purposes.
AI-generated content — tailored resumes, cover letters, interview prep packs, and other AI outputs are stored as part of your account for your own reference. They are deleted when you delete your account or delete the individual document.
Analytics data — PostHog event data is retained for 12 months, then automatically expired. Session data is in-memory only and never persisted.
Support communications — messages sent via the contact form are retained in Zoho Desk for up to 3 years to support ongoing customer service. You can request deletion at any time by emailing support@tailorfit.io.
6. Your rights
Depending on where you're located, you may have the following rights:
- Access. Request a copy of all data we hold about you.
- Correction. Ask us to correct inaccurate data.
- Deletion. Ask us to delete your account and data ("right to be forgotten").
- Portability. Request your profile and application data in a machine-readable format.
- Objection. Object to processing based on legitimate interests.
- Restriction. Ask us to restrict processing of your data in certain circumstances.
You can delete your account from Settings → Account inside the app. You can download a complete copy of all your data (applications, profile, generated documents, credit history, and more) as a JSON file from the same page. For any other request, email support@tailorfit.io. We'll respond within 30 days.
California residents: You have additional rights under the CCPA, including the right to know, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.
EEA / UK residents: Your data is processed under the lawful basis of contract performance (to provide the service you signed up for) and legitimate interests (analytics, security). You have the right to lodge a complaint with your local supervisory authority.
8. Security
We apply industry-standard security practices:
- All data in transit is encrypted via TLS.
- Supabase Postgres encrypts data at rest.
- Row-Level Security policies ensure users can only access their own data.
- API keys and secrets are stored as environment variables, never in source code.
- Service-role database access is restricted to server-side functions only.
No system is perfectly secure. If you discover a security issue, please report it to security@tailorfit.io.
9. Children
TailorFit is intended for people who are actively job searching or career planning. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, please contact us immediately.
10. Changes to this policy
We may update this policy as the product evolves. Material changes will be notified by email. The "Effective" date at the top of this page reflects when the current version took effect.
11. Contact us
Questions about this policy or requests to exercise your rights:
Email: support@tailorfit.io
Contact form: tailorfit.io/contact