Private where it matters. Clear everywhere else.

When you choose to create an account, Supabase Auth stores your email, a protected password credential or enabled provider identity, account creation and confirmation times, and information needed to maintain your session. Email accounts require confirmation. Available sign-in methods are shown on the sign-in page; Google and Apple may remain unavailable until configured.

Essential secure session cookies keep you signed in. Account pages, sign-in forms, email links and authentication callbacks are excluded from our product analytics. We do not collect your password in analytics or administrator reports. A private administrator view lists retained accounts and confirmation status; daily reports contain counts only. Submitting a task or early-access form does not create an account, and an account does not upload or store your résumé.

We retain account records while needed to provide the account, secure the service, and handle applicable obligations. Use the privacy request form to request access, correction, or deletion. Deleting an account removes it from current account reports; separately submitted requests may need separate review.

Early-access, task, domain-expert, and full-time interest forms may collect your name, email, company or city and state, selected route, written details, US eligibility confirmation, and consent record.

Do not submit passwords, government ID numbers, card or bank details, health data, confidential client material, or other regulated personal data through these forms.

Card payment opens on your private request page only after we set the price and an expert accepts. You pay in Stripe’s embedded checkout, so your card details go to Stripe, not to FindYourHuman. To create the checkout, we share with Stripe your email, the order reference and internal order ID, the agreed amount and currency, and the version of the terms you agreed to. Stripe also processes device and payment information to run the checkout and prevent fraud, under its own privacy policy. We keep Stripe’s checkout, payment, and refund references and the time you paid with your order to confirm payment and handle refunds, and we email you payment and refund confirmations.

If you use Report a problem on the private request page of a delivered order, we keep your message and the time you sent it with your order and send a copy to our support inbox, so we can review the delivery and reply to you. If a report is already open on the order, a new message goes to our support inbox only.

PDF, DOCX, TXT, and pasted résumé text are opened and scored in your browser. The current checker produces its score, editing suggestions, and work matches locally. It does not upload the original file, filename, extracted text, or review to FindYourHuman, a model provider, an account, a hiring team, or analytics.

“Clear résumé and results” removes the file reference, extracted text, score, matches, and editing suggestions from this page. Reloading or closing the page also clears them. The local check is an editing aid, not a verified assessment of your qualifications or an employer’s ATS score.

The earlier optional provider review has been removed from the checker. If you previously consented to that review, extracted text was processed through Supabase and OpenAI with best-effort contact redaction. FindYourHuman did not retain the résumé or result. Temporary provider security logs from a previous request may follow the provider’s retention period and are not erased by clearing this page.

The site may keep your selected path, task type, timing, city, area, and draft text in browser session storage so you can finish the preview. It disappears when that browser session ends or when the related draft is cleared.

Some listed city or area choices can also appear in the page address and browser history. Enter only an area or locality at this stage—never a full street address.

We use PostHog for selected public-page views, a broad referral category such as search or social, and a small allowlist of funnel and handled-error events. These events use a pseudonymous browser-session identifier. Automatic page-view capture, autocapture, session replay, exception autocapture and person profiles are disabled.

Page-view events contain only approved public route names and broad referral categories. Private order and admin pages are excluded. Event payloads strip full URLs and referrers, and do not include form values, résumé content, names, emails, city or area values, free text, filenames, search terms or query strings. PostHog capture is limited to the public production origin and respects Do Not Track.

The analytics identifier is limited to browser session storage, is not linked to an account, and is not used for advertising.

Hosting and security providers may process standard technical data needed to deliver and protect the site, such as IP address, device or browser details, date and time, and security events.

For form-submission limits, FindYourHuman converts the requesting IP into a keyed pseudonymous value. Counters from the earlier optional review contain only that hash, UTC date, attempt count, and update time, not the résumé or result. The current local checker does not create a provider-review request or counter. No online system can promise perfect security, so submit only what is needed.

We use submissions to review and respond, assess early-access fit, secure and improve the service, maintain consent records, and meet legal obligations. We do not currently sell personal information. The local résumé score and ten-pattern wording estimate are not used to train AI models or make hiring decisions.

The current résumé checker runs locally. Information you submit through other forms may be handled by providers that host, store, analyze, or secure the service under appropriate restrictions, including providers processing data outside the United States. We may also disclose information when required by law or needed to protect users and the service.

We keep early-access submissions only as long as reasonably needed to review them, operate the launch program, handle requests, secure the service, and meet legal obligations. A more specific retention schedule for paid orders has not been published yet.

To request access, correction, or deletion, use the privacy request form. Do not attach sensitive identity documents. The service is intended for people age 18 or older, and this notice will change before expert payouts, professional verification, or live bookings are introduced.