Legal

Privacy Policy

Last updated: April 12, 2026. This policy explains what data we collect, how we use it, and your rights.

1. Information we collect

Account information. When you sign up we collect your name, email address, and an encrypted password hash. We use Firebase Authentication to manage sign-in securely.

Resume and job data. Resume drafts, analyses, application drafts, resume variants, and pipeline tracking data are stored in Google Cloud Firestore under your account so work can continue across devices and sessions.

Profile preferences. Optional settings like target role, location, seniority, work mode, target industries, and rewrite style are stored to personalize your analysis experience.

Billing and subscription data. Subscription plan, status, billing period timestamps, and Stripe customer/subscription identifiers are stored in Firestore for account management.

Usage data. We collect product analytics (for example signup, analysis, suggestion-apply, export, and upgrade-intent events) to improve the product. Analytics payloads do not include resume or job-description content, and we do not use third-party ad trackers.

2. How we use your data

We use your data to provide the core product: persistent resume workspaces, job-description analysis, ATS keyword detection, rewrite suggestions, and account security controls.

Resume and job-description content is sent to our AI provider (via OpenRouter) for analysis. This content is processed in real time and is not stored by the AI provider beyond the request lifecycle.

For paid subscriptions, we process checkout and billing operations through Stripe and use Stripe metadata to map billing events to your SkillSift account.

We send transactional emails (welcome, verification, analysis notifications, and account lifecycle updates) using your email address.

3. Data storage and retention

Account login data is managed by Firebase Authentication, and profile defaults, billing metadata, resume workspaces, analyses, application drafts, resume variants, and pipeline items are stored in Google Cloud Firestore with encryption in transit and at rest.

When configured by our environment controls, resume and analysis content is additionally encrypted at the application layer before persistence.

Stored resume and analysis records are automatically deleted after 365 days unless a shorter period is requested through account deletion or manual workspace removal.

If you delete your account, we remove all server-side account data as part of the deletion flow.

Uploaded files (PDF, DOCX) are parsed and converted to structured data on the server during import. The original file is not retained after processing.

4. Your rights

Access and export. You can view and export all your resume data from the product at any time.

Correction. You can update your account information and profile preferences from the settings page.

Deletion. You can request account deletion from the Account page or contact us via [email protected].

Portability. We support exporting resumes as PDF from your account workspace. You can also request help with account-level data through the support channels listed above.

5. Third-party services

We use the following third-party services to operate SkillSift:

  • Firebase (Authentication, Firestore, Hosting) — Google Cloud
  • OpenRouter — AI model provider for resume analysis
  • Stripe — subscription billing and customer portal
  • SMTP provider — transactional email delivery

Each provider processes data only as needed to perform its service and is bound by its own privacy policy.

6. Contact

For privacy questions or data requests, visit the Support page or contact us via [email protected].