Your information stays yours.

Free resume content review

Your selected PDF or Word file is read on your device. Only after you confirm the extracted text and give separate AI consent do we send that text and your optional job description to OpenAI. Names or contact details within the text are included unless you remove them. We do not save free-review source text or reports in our order database, analytics, or application logs. The report stays on the current page.

Choosing to continue into a paid application temporarily stores only your original resume text and job description in this browser tab, for up to 30 minutes. It is removed after successful checkout creation, when restored on the review page, or when an expired handoff is next opened. A closed browser cannot run expiry cleanup. This handoff never includes AI rewrites, grades, or consent choices. Avoid shared devices. You still confirm all facts and purchase terms before checkout.

We record review steps without content, plus daily aggregate attempt, failure and provider-token counts to control free usage. Token totals are usage measurements, not a dollar charge or profit calculation. Free requests are rate-limited; daily limits are shared with the application writing preview. Provider retention is described below.

Your application brief and previews

Pasted resume text, suggested roles and responsibilities, and formatting previews are processed in your browser. You confirm the role each responsibility belongs to before requesting a writing preview or paying. If you opt in to a temporary draft, the fields are stored in this browser tab until you clear them or close the tab. A free AI fit and writing review sends your experience, roles, and target job to OpenAI only after your separate consent. Your name and contact line are excluded unless they also appear in your experience text. We do not save free-preview source text, requirement reviews, or generated previews in our order database.

Checkout submits your name, delivery email, contact line, education, experience, and target job after your purchase consent. We store this brief privately with the order. A private checkout token and a fingerprint of the request may remain in this browser tab if a request fails; they do not contain a copy of your resume text, and closing the tab removes them. Avoid using shared devices. Do not include government IDs, card details, sensitive health information, or confidential employer material.

Optional saved experience on your browser

You can explicitly save your confirmed name, document contact line, education, roles and responsibilities, other details, and writing boundaries for another application. The profile is kept in this browser’s local storage. It does not sync across devices, and it excludes the target vacancy, delivery email fields, consent choices, AI results, and order-access tokens. We do not copy this browser-only profile to your account automatically. Requesting an AI review or placing an order sends the current application as described above.

The profile expires 30 days after each explicit save. Expired data is removed when you next open the application page; a closed browser cannot run that cleanup. Delete saved experience on the starting screen to remove it immediately from this browser. Deletion leaves the current form and any separately saved temporary tab draft in place and does not delete submitted orders. Anyone using the same browser profile may be able to access saved experience; avoid saving on shared devices.

Your optional account and saved experience

Email sign-in stores a verified email address, private account identifier, and hashed session tokens. A secure, HttpOnly cookie keeps you signed in for up to 30 days. Verification codes expire after 10 minutes; expired sign-in challenges and sessions are removed by the scheduled cleanup. Resend delivers sign-in emails. Sign-in rate limits use hashed or keyed email/IP identifiers, not resume content.

Saving experience to your account is a separate, explicit action. We store only the profile fields you choose to save, for 30 days after each save, and provide a Delete saved experience control. Signing in does not upload the profile previously saved in your browser. Each submitted application keeps its own snapshot of the facts and target job. Deleting a reusable profile does not change existing applications.

Subscription records include Stripe customer, subscription, invoice, charge, and payment identifiers, billing dates, allowance use, cancellation, and refund status. We retain billing records for accounting and disputes. Private subscription applications also require a signed-in account; one-time orders continue to use their private order link.

PDF and Word import

The importer reads your selected file on your device and extracts plain text. It does not upload the original PDF or Word file or follow its embedded links. Extracted text stays in the form until you explicitly request an AI preview, save a cloud profile, or submit an application. Optional browser/tab saving follows the controls described above. Importing does not authorize AI processing.

Basic usage measurement

We measure tab visits and application steps to understand which pages and campaigns lead to purchases. A random visit identifier is kept in this browser tab and renews after 30 minutes without activity. On our server, we store a hashed version of that identifier with a limited source category, approved campaign labels, entry-page category, and completed steps. Each step is counted once per visit. These are pseudonymous visit records, not a count of unique people.

These analytics records contain no resume text, email address, full referring URL, or raw IP address. Visit and step records are scheduled for deletion after 90 days. When you start checkout, the visit reference is attached to the order to measure purchases; order records follow the retention described below. Internal testing can be excluded through a browser preference stored on that device. Older daily aggregate counters are kept separately and also expire after 90 days.

Rate limits use a daily hash of your IP address, retained for up to two days. A broad source category is also kept in this tab for checkout continuity. We do not use advertising trackers or sell these measurements.

Preparing and delivering your files

For paid orders, requested resume reviews and AI previews, OpenAI processes your brief to draft and check the documents. We request that generated API responses are not stored using the API response-storage option; this does not eliminate all provider logs or retention. Resend processes your email address and document attachments for delivery. Henley Studios can access orders to provide support. Documents are not published as public sample files.

Payments and website hosting

Stripe processes payment information on its checkout page. We store payment identifiers and order status, not your card details. OpenAI Sites and Cloudflare host the site and its order database. These services process technical request information. Google Fonts receives font requests. We have not added advertising trackers.

Your edited document copy

The private order workspace can save one latest customer-edited copy of your documents alongside the original package. Your text and four updated files are stored privately with your order access. Self-service editing uses document formatting, without another AI request or email delivery. The original emailed files remain unchanged. Edited copies expire with the original order after 30 days from order creation; editing does not extend this period.

Retention and support

Application briefs, generated text, and delivery email addresses in the order database are scheduled for removal after 30 days for completed, refunded, or abandoned orders. Orders with unresolved problems may be retained until resolved. Payment identifiers and transaction records may be retained for accounting and disputes. Provider records, email attachments, backups, and support correspondence have separate retention practices; the database cleanup does not delete your inbox copies.

Support uses Gmail. To ask about access, corrections, or deletion, email contact.henleystudios@gmail.com. We may verify your identity before acting. Do not share the private order-status link; anyone with that link can see the order status and download available documents.

No public use without permission

The website samples are fictional. We will not publish your application or use it as a testimonial without separate permission.