Privacy Policy

Groforge LLC ("Company," "we," "us," or "our"), operating as ResuGrade, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use our website, application, and services (collectively, the "Service") at resugrade.com.

By accessing or using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Service, including:

• Account Information: Name, email address, and authentication credentials when you create an account through our authentication provider (Clerk)
• Resume Content: Resumes and related documents you upload or paste into the Service for analysis
• Job Descriptions: Job listings and descriptions you paste into the Service for comparison
• Job Titles: Job titles you enter when using the Service
• Payment Information: Billing details processed through our payment provider (Stripe). We do not store your full credit card number, CVV, or other sensitive payment credentials on our servers

1.2 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

• Usage Data: Features used, actions taken (scans, rewrites, cover letter generation, etc.), frequency of use, and session duration
• Analytics Data: Match scores, feature adoption patterns, and aggregated performance metrics
• Device Information: Browser type, operating system, screen resolution, and device type
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies and Similar Technologies: We use cookies and local storage for authentication session management and user preferences (such as theme settings). We use Google Analytics to collect aggregated usage statistics

1.3 Information from Third Parties

If you sign in using a third-party service (such as Google), we may receive your name, email address, and profile information from that provider, as authorized by your privacy settings with that provider.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share your information only in the following circumstances:

3.1 Third-Party Service Providers

We share information with the following third-party providers who process data on our behalf to deliver the Service:

3.2 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid legal process (such as a subpoena, court order, or government request), or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. AI Data Processing

When you use the Service, your resume text and job descriptions are transmitted to Anthropic's Claude API for AI-powered analysis. It is important that you understand the following:

• Your data is transmitted via encrypted HTTPS connections
• We use Anthropic's API, which processes inputs to generate responses but does not use API inputs to train AI models, per Anthropic's data usage policy
• We do not permanently store the full text of your resume or job description on our servers after analysis is complete. Temporary processing may involve short-term caching necessary for delivering results
• AI-generated outputs (scores, rewrites, cover letters, etc.) are generated in real-time and are not stored on our servers beyond your active session unless required for feature functionality (such as the resume editor)

We encourage you to review Anthropic's privacy and data usage policies for additional information about how they handle data processed through their API.

5. Data Retention

We retain your information for the following periods:

• Account Information: Retained for as long as your account is active. Deleted within 30 days of account termination
• Usage Logs: Retained for up to 12 months for analytics and service improvement, then anonymized or deleted
• Payment Records: Retained as required by applicable tax and financial regulations (typically 7 years)
• Resume and Job Description Content: Not permanently stored. Processed in real-time and discarded after analysis

You may request deletion of your account and associated data at any time by contacting us at support@resugrade.com.

6. Data Security

We take the security of your data seriously and implement the following measures:

• All data transmission between your browser and our servers is encrypted using TLS/HTTPS
• API keys and sensitive credentials are stored as environment variables on our hosting platform, never in client-side code
• Database access is restricted using row-level security policies and service-role authentication
• Payment processing is handled entirely by Stripe, a PCI-DSS Level 1 certified payment processor
• User authentication is managed by Clerk, which implements industry-standard security practices including bcrypt password hashing and OAuth 2.0
• Administrative access to user data is protected by authenticated, password-secured endpoints

Despite these measures, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. Contact us at support@resugrade.com to make such a request.

7.2 Correction

You have the right to request correction of inaccurate personal information. You can update your account information through your account settings or by contacting us.

7.3 Deletion

You have the right to request deletion of your personal information. We will comply with such requests unless we have a legitimate legal basis for retaining the data (such as compliance with tax regulations or legal obligations).

7.4 Opt-Out of Analytics

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can also manage cookie preferences through your browser settings.

7.5 Do Not Track

We do not currently respond to "Do Not Track" signals from web browsers. However, you can control tracking through browser settings and the opt-out mechanisms described above.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• No Sale of Personal Information: We do not sell your personal information to third parties as defined under the CCPA

To exercise these rights, contact us at support@resugrade.com. We will respond to verifiable requests within 45 days.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Service, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights under the General Data Protection Regulation (GDPR) or similar legislation, including the right to access, rectify, erase, restrict processing, and data portability. Contact us to exercise these rights.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us immediately.

11. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

We do not use advertising cookies or third-party tracking cookies for marketing purposes.

12. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every site you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on this page with a revised "Effective Date." If we make material changes, we will make reasonable efforts to notify you (such as posting a notice on the Service or sending an email).

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

© 2026 Groforge LLC. All rights reserved.