Privacy Policy
Last updated: March 2026
What We Collect
- Resume content: The text of your resume, uploaded by you for processing. This is deleted within 1 hour of upload.
- Roast/rewrite results: The AI-generated output. Stored for 7 days to enable sharing, then automatically deleted.
- Payment information: Processed entirely by Stripe. We do not store credit card numbers.
- IP address hash: A one-way hash of your IP address for rate limiting. Not linkable to your identity.
- Email: Only if you complete a purchase via Stripe. Used solely for transaction records.
How We Use Your Data
Your resume is processed by Anthropic's Claude AI to generate the roast and/or rewrite. Your data is used solely to provide the service you requested. We do not:
- Sell or share your data with third parties
- Use your resume for AI training
- Send marketing emails (unless you explicitly opt in)
- Store your resume beyond the 1-hour processing window
Third-Party Processors
- Anthropic (Claude API): Processes your resume text to generate roasts and rewrites. Subject to Anthropic's data processing terms.
- Stripe: Processes payments. Subject to Stripe's privacy policy.
- Upstash: Stores temporary data (roast results). Subject to Upstash's privacy policy.
- Vercel: Hosts the application. Subject to Vercel's privacy policy.
Data Retention
- Resume text: Deleted within 1 hour of processing
- Roast results: Auto-deleted after 7 days
- Rewrite results: Auto-deleted after 7 days
- Payment records: Retained by Stripe per their policies
Your Rights (GDPR)
You have the right to request deletion of your data at any time. Since data auto-deletes within 7 days (resume text within 1 hour), manual deletion requests are rarely needed. If you need immediate deletion, contact us at the email below.
Under GDPR, you also have the right to access, correct, port, and erase your data, as well as the right to restrict or object to processing. You also have the right to lodge a complaint with your local data protection supervisory authority.
Legal Basis for Processing
- Contract performance: Processing your resume to generate roasts and rewrites is necessary to provide the service you requested.
- Consent: Analytics cookies are only placed after you give explicit consent via our cookie banner.
- Legitimate interest: We use aggregated, non-identifying analytics to improve our service and maintain security.
International Data Transfers
Our service is based in the United States. If you are located outside the US, your data will be transferred to and processed in the US by our processors (Anthropic, Stripe, Upstash, Vercel). These transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission, or other appropriate safeguards.
Your Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.
Categories of Information Collected
- Identifiers (IP address hash, email address if you make a purchase)
- Professional information (resume content, uploaded by you)
- Internet activity (pages visited, interaction data via Google Analytics)
- Commercial information (purchase history via Stripe)
Your CCPA Rights
- Right to know: You may request the categories and specific pieces of personal information we have collected about you.
- Right to delete: You may request deletion of your personal information. Note that most data auto-deletes within 7 days.
- Right to opt out: You may opt out of the sale or sharing of your personal information.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
Do Not Sell or Share
We do not sell or share your personal information as defined under the CCPA. We do not use your data for cross-context behavioral advertising.
How to Exercise Your Rights
To exercise any of the rights described above, contact us at privacy@roastmyresume.io. We will respond to verifiable requests within 45 days.
Cookies & Analytics
We use Google Analytics to understand how visitors use our site. Analytics cookies are only activated after you provide consent via our cookie banner. We do not use cookies for advertising or sell cookie data to third parties.
Cookie List
| Cookie | Provider | Type | Duration | Purpose |
|---|---|---|---|---|
_ga | Google Analytics | First-party | 2 years | Tracks unique visitors by assigning a randomly generated ID |
_gid | Google Analytics | First-party | 24 hours | Distinguishes users for session-level analytics |
cookie_consent | RoastMyResume | First-party (localStorage) | Persistent | Stores your cookie consent choice so we do not ask again |
| Stripe cookies | Stripe | Third-party | Session / varies | Set during checkout to process payments securely and prevent fraud |
Managing Cookies
Most web browsers allow you to manage cookies through their settings. You can typically find these options under “Privacy” or “Security” in your browser preferences. You can delete existing cookies, block all cookies, or configure your browser to notify you when a cookie is set. Please note that disabling cookies may affect the functionality of parts of this site.
You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
Automated Decision-Making
In accordance with GDPR Article 22, we inform you that RoastMyResume uses automated processing to generate its core output. Specifically:
- Technology used: We use Anthropic's Claude AI to analyze the text of your resume and generate commentary, letter grades, and category scores.
- Logic involved: The AI processes the text content of your resume and produces humorous roast commentary, overall and per-category letter grades, and optional rewrite suggestions. No human reviews the output before it is delivered to you.
- Purpose and effect: This automated processing is used solely for entertainment and general informational purposes. It does not produce legal effects or similarly significant effects on you (e.g., it does not determine employment eligibility, creditworthiness, or any other consequential outcome).
- Right to human review: You have the right to request human review of any AI-generated output. To do so, contact us at privacy@roastmyresume.io with the subject line “Human Review Request” and a description of the output you would like reviewed.
Children's Privacy
RoastMyResume is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information as promptly as possible. If you believe we may have collected information from a child under 18, please contact us at privacy@roastmyresume.io.
Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users and the relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by the GDPR. Notification will include the nature of the breach, the categories of data affected, and the measures taken to address it.
Contact
For privacy-related questions or data deletion requests, contact: privacy@roastmyresume.io