Privacy Policy

My Polished Resume is a free suite of AI tools for job seekers — CV polishing, job-specific tailoring, cover letter generation, application email writing, LinkedIn About generation, and a CV scoring/audit tool.

For questions about this policy, contact us at hello@matchcraft.app.

When you use My Polished Resume we process the following:

• CV content — your name, contact details, work history, education, skills and any other information you upload (PDF or DOCX) or type directly into the wizard.
• Job description text — pasted text or a job listing URL you provide. If you provide a URL, we fetch the page once on your behalf to read the job description.
• Email address — only if you choose to have a generated document emailed to you (currently the Cover Letter tool only).
• Network metadata — your IP address is briefly seen by our hosting provider for routing. We hash it to maintain a short-lived counter for rate limiting (preventing abuse). We don't store the raw IP.

We do not collect payment information, create user accounts, set advertising or analytics cookies, or track you across other websites.

• AI processing — your CV content (and a job description if you provided one) is sent to our AI provider (Anthropic) to produce the requested output: polished CV, tailored CV, cover letter, application email, LinkedIn About section, or fit analysis. The data leaves our servers only to complete that single API call. We do not keep a server-side copy after the response is returned to your browser. The AI provider processes the data per their own privacy terms.
• Email delivery — if you ask us to email a generated document, your email address and the generated PDF are passed to our email provider (Resend) for that single send. We do not add you to a mailing list.
• Rate limiting — we maintain a short-lived counter (typically 24 hours) keyed to a hash of your IP address to enforce per-user limits. The counter is auto-deleted after the window expires.

The following lives entirely in your browser and never leaves your device:

• Your in-progress wizard state — held in your browser's sessionStorage so you can move between tools without losing data.
• Your Downloads basket — the artifacts you generate are stored client-side in sessionStorage so you can come back to them later in the same session.

All of this is cleared automatically when you close the browser tab.

We do not store your CV content, job descriptions, or generated documents on our servers. AI processing is transactional — the data is sent to the provider, the response is returned to your browser, nothing is retained.

Your email address (when supplied) is retained by Resend for the purpose of delivering your document, per their own retention policy. We don't use it for anything else.

• Anthropic — AI processing of your CV and job description to produce the requested output.
• Resend — transactional email delivery of generated documents (only when you request it).
• Vercel — our hosting provider. Receives standard request metadata (IP, path, user-agent) for routing and security per their terms.
• Upstash — short-lived rate-limit cache, holding hashed IP counters as described above.

We do not sell your data to any third party.

Under UK GDPR and EU GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Data portability

Because we do not store personal data on our servers after a request completes, most of these rights are satisfied by design. To exercise any right or raise a concern, email hello@matchcraft.app.

We do not set tracking cookies. We do not run analytics scripts. We do not load third-party trackers.

The browser-side state described above lives in sessionStorage, not cookies — there's nothing for the rest of the web to read.

We may update this policy as the service evolves. The date at the top of this page will reflect the latest version. Continued use of the service after changes constitutes acceptance.