Privacy Policy
Last updated: August 26, 2026
The short version: your resume data exists to generate your documents. We don't sell it, we don't advertise with it, and you can delete all of it yourself, permanently, at any time.
1. What we collect
Account: your email address, used to sign you in.
Profile and documents: the resume data you enter or upload (work history, education, skills, links), job postings you paste or accept from Discover, and the documents and check reports the Service generates for you.
Usage and payments: basic product analytics (pages and features used) and, if you subscribe, billing status from our payment processor. We never see or store your card number.
Cookies: only what sign-in requires (session cookies). No advertising cookies inside the product.
2. How we use it
To provide the Service: generate and check your documents, find matching roles, track your applications, bill subscriptions, answer support, and improve the product from aggregate usage. That's the list. We do not sell personal information and we do not use your resume data for advertising or profiling.
3. AI processing
Generating and checking documents sends your profile and the job posting to Anthropic's Claude API. Under the API terms we use, that data is not used to train Anthropic's models. No other third party receives your resume data.
4. Who processes data for us
Service providers that host and run Airtight, each receiving only what its job requires: Supabase (database, authentication, file storage), Vercel (application hosting), Anthropic (document generation), Fly.io (PDF rendering), Inngest (background jobs), Stripe (payments), Resend (transactional email), and PostHog (product analytics).
5. Retention and deletion
Your data is kept while your account exists. Deleting your account from Settings removes your profile, postings, documents, files, and history — permanently and immediately. You can also delete individual application packages at any time.
6. Your rights (including California)
You can access your data in the app, correct it, export your documents, and delete everything yourself. California residents additionally have the rights to know, delete, and non-discrimination under the CCPA/CPRA; we don't sell or share personal information as those laws define it, so there is nothing to opt out of. To exercise any right, use the in-app tools or write to support@airtight.so.
7. Security
Data is encrypted in transit, access is scoped per-account at the database layer (row-level security), and resume content is kept out of our logs. No system is perfectly secure; if a breach affects your data we will notify you promptly.
8. Children
The Service is for adults 18 and over.
9. Changes and contact
Material changes will be announced by email or in the app before they take effect. Questions: support or support@airtight.so.