How Resume Lab handles your data

Privacy Policy

Effective December 6, 2025.

Resume Lab is operated by Simon Ho in British Columbia, Canada. This policy explains what data is collected, how it is used, and your choices.

What data is collected

  • Profile details and any content you input (including resumes and job descriptions).
  • Your account email address.
  • Payment information processed by Stripe (billing details and transaction metadata).
  • Non-PII analytics via Google Analytics when you opt in.
  • Bug reports and session replays sent to Sentry when you opt in. PII is masked prior to storage.
  • Content sent to LLM providers (Google and OpenAI) to generate drafts.

Because the service is designed to build personalized resumes, personal information (including contact details, work history, and other PII) is expected, and will be stored in the database to power your account. You choose what to include, and you can delete entries or your account at any time.

How data is used

  • Provide and improve the resume generation features.
  • Authenticate and secure your account.
  • Process payments and manage token balances.
  • Diagnose issues and improve reliability (analytics and session replays when enabled).
  • Respond to support requests.

Service providers

The service relies on Supabase for authentication and database storage, Stripe for payments, Google Analytics for optional analytics, Sentry for optional error reporting, and Google/OpenAI LLMs for generating drafts. These providers handle data under their own terms and retention periods (LLM message logs are typically held for about 30 days).

Retention

Data is kept while your account is active. Providers may apply their own retention windows (for example, temporary LLM log storage). If you delete your account, associated profile data and generated resumes are removed from the service.

Your choices

  • Delete your account at any time in the app to remove your stored data.
  • Control analytics and session reporting by opting in or out.

Security

Data is transmitted over TLS and stored using the security controls provided by Supabase, Stripe, Google Analytics, Sentry, and the LLM providers. Please contact me if you suspect an issue.

Contact

For privacy questions or requests, email simon@resumelab.dev.