Privacy Policy

• Account information. When you sign up, we collect your email address and authentication details. We store your plan and usage counts so features and limits work correctly.
• Resume and job-description content. When you optimize or build a resume, you provide your resume text and the job description you're targeting. This content is sent to our AI provider to generate your results (see "How AI processing works"). For the optimizer and builder, we do not store your resume or job-description text after your request is processed — we keep only limited metadata (the resulting ATS score, the target job title, and a usage record). The Mock Interview feature works differently — see the next item.
• Mock-interview content. If you use Mock Interview, we store the resume text and job description you provide for that session, along with your typed or transcribed responses and scores, so we can generate your questions and coaching report. Audio recordings are stored in access-controlled (private) storage. These interview records — the stored resume, job description, responses, scores, and audio — are automatically deleted about 90 days after the session by a scheduled cleanup job.
• Payment information. Payments are processed by Stripe. We never see or store your full card number — Stripe handles that.
• Usage and technical data.We log usage and diagnostic events (for example, that an optimization ran and its resulting score) to operate and improve the service, plus standard request metadata used for rate limiting and abuse prevention. These events don't include your resume text.

• To provide and improve the optimizer, builder, and interview tools.
• To enforce plan limits and prevent abuse (including the free-scan cap).
• To process payments and manage your subscription or pass.
• To communicate with you about your account or support requests.

We do not sell your personal information, and we do not use your resume content to train AI models.

To generate your results, your resume and job-description text are sent to our AI provider, Anthropic (the Claude API). Anthropic processes the request to return the analysis and does not use API content to train its models. We send only what's needed to produce your result, and we don't retain that text afterward.

• Account data, plan status, and usage metadata are stored with our database provider (Supabase) and protected by row-level security and encryption at rest.
• Optimizer and builder resume / job-description text: not stored after your request is processed.
• Mock-interview records (the resume, job description, responses, scores, and audio for that session) are automatically deleted about 90 days after the session.
• We keep account information for as long as your account is active. You can ask us to delete your account and associated data (see "Your rights").

We share limited data with service providers that help us run Forged:

• Anthropic — AI processing of resume/interview content.
• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• Resend — transactional and notification email delivery.
• Vercel — application hosting.
• Upstash — rate limiting.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and our service.

We use essential cookies to keep you signed in and operate the site, plus one first-party cookie that records how you first reached us (for example, which link or campaign) so we can understand which channels work. We don't use advertising or cross-site tracking cookies, and we don't share this information with third parties.

You can manage your subscription and permanently delete your account and its data from your account page at any time. To access, correct, or export your data, email us and we'll take care of it. Depending on where you live, you may have additional rights (such as under GDPR or CCPA), including the right to access, delete, or port your data. To make a request, contact us at hello@forgedresume.com.

We protect your data with encryption in transit and at rest, row-level access controls on our database, server-side authentication, and rate limiting. No system is perfectly secure, but we work to follow sensible, current practices.

Forged is designed for adult job seekers and is often used through schools and workforce programs under agreements with those institutions. Forged is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us and we will delete it.

When Forged is used through a school, college, or workforce program, we act as a service provider to that institution and handle student data under its direction and its agreement with us. For optimizer and builder sessions, student resume and job-description text isn't retained after processing. Mock-interview records are deleted about 90 days after the session. We don't sell student data, and we don't use it for advertising or cross-site tracking. A student's resume and results belong to the student. Institutions can request deletion of their students' data at any time.

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.

Questions about this policy or your data? Email hello@forgedresume.com.