Privacy Policy

• Account information. When you sign up, we collect your email address and authentication details. We store your plan and usage counts so features and limits work correctly.
• Resume and job-description content. When you optimize or build a resume, you provide your resume text and the job description you're targeting. This content is sent to our AI provider to generate your results (see "How AI processing works"). For the optimizer and builder, we do not store your resume or job-description text after your request is processed — we keep only limited metadata (the resulting ATS score, the target job title, and a usage record). The Mock Interview feature works differently — see the next item.
• Mock-interview content.If you use Mock Interview, we store the resume text and job description you provide for that session, along with your typed or transcribed responses and scores, so we can generate your questions and coaching report. Audio recordings are stored in access-controlled (private) storage. If you answer out loud, the live captions come from your browser's speech-recognition service (in Chrome, that's Google), which receives your audio to transcribe it; you can type your answers instead. These interview records — the stored resume, job description, responses, scores, and audio — are automatically deleted about 90 days after the session by a scheduled cleanup job.
• Payment information. Payments are processed by Stripe. We never see or store your full card number — Stripe handles that.
• Usage and technical data.We log usage and diagnostic events (for example, that an optimization ran and its resulting score) to operate and improve the service, plus standard request metadata used for rate limiting and abuse prevention. These events don't include your resume text, and they're deleted with your account.

• To provide and improve the optimizer, builder, and interview tools.
• To enforce plan limits and prevent abuse (including the free-scan cap).
• To process payments and manage your subscription or pass.
• To communicate with you about your account or support requests.

We do not sell your personal information, and we do not use your resume content to train AI models.

To generate your results, your resume and job-description text are sent to our AI provider, Anthropic (the Claude API). Anthropic processes the request to return the analysis and does not use API content to train its models. We send only what's needed to produce your result, and we don't keep that text afterward. Anthropic keeps it for up to 30 days (for safety and abuse monitoring) and then deletes it.

• Account data, plan status, and usage metadata are stored with our database provider (Supabase) and protected by row-level security and encryption at rest.
• Optimizer and builder resume / job-description text: not stored after your request is processed.
• Mock-interview records (the resume, job description, responses, scores, and audio for that session) are automatically deleted about 90 days after the session.
• Usage events and progress stats are kept while your account is active and deleted when you delete it.
• We keep account information for as long as your account is active. You can ask us to delete your account and associated data (see "Your rights").

We share limited data with service providers that help us run Forged:

• Anthropic — AI processing of resume/interview content.
• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• Resend — transactional and notification email delivery.
• Vercel — application hosting.
• Upstash — rate limiting.
• Your browser's speech service (Google, in Chrome) — live captions in Mock Interview, only if you answer out loud.

If you join through a school or program code, that program's coordinator and instructors can see your email, trade, how many resumes you've run, your ATS scores, and when you were last active. They can't see your resumes, cover letters, or interview practice.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and our service.

We use essential cookies to keep you signed in and operate the site, plus one first-party cookie that records how you first reached us (for example, which link or campaign) so we can understand which channels work. We don't use advertising or cross-site tracking cookies, and we don't share this information with third parties, except that when you buy a plan we note the campaign name on the payment record with our payment processor, Stripe. We use Vercel Web Analytics, which is cookieless and first-party, to count aggregate page views, referrers, country, and device type — no cross-site tracking and no personal profiles.

You can manage your subscription and permanently delete your account and its data from your account page at any time. To access, correct, or export your data, email us and we'll take care of it. Depending on where you live, you may have additional rights (such as under GDPR or CCPA), including the right to access, delete, or port your data. To make a request, contact us at hello@forgedresume.com. If you're under 18, a parent or guardian can make these requests for you (see "Students and minors").

We protect your data with encryption in transit and at rest, row-level access controls on our database, server-side authentication, and rate limiting. No system is perfectly secure, but we work to follow sensible, current practices.

Forged is built for job seekers and students, including high school career and technical education (CTE) students, adult learners, and workforce programs. You must be at least 13 to create an account.

• Age check.We ask for your birth month and year at signup. We don't store them. We only keep a record that you passed the check.
• If you're 13 to 17. Before your account is created, we show you a short notice about how Forged uses your information and ask you to agree to it. We keep a record that you agreed and when, which also tells us your account belongs to someone under 18. We encourage you to read it with a parent or guardian.
• No ads, no selling.We never sell a minor's information, show ads, or use it for targeted advertising.
• Purchases. Paid plans must be bought by someone 18 or older, or by a parent or guardian. Students under 18 usually get access free through their school or program.
• Parents and guardians.A parent or guardian can ask to see, correct, or delete their teen's information by emailing hello@forgedresume.com. We'll confirm the request comes from the parent or the account holder before acting on it. A teen can also delete their own account anytime from the account page.
• Under 13.Forged isn't directed to children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, contact us and we'll delete it.

When Forged is used through a school, college, or workforce program, we act as a service provider to that institution and handle student data under its direction and its agreement with us. For optimizer and builder sessions, student resume and job-description text isn't retained after processing. Mock-interview records are deleted about 90 days after the session. We don't sell student data, and we don't use it for advertising or cross-site tracking. A student's resume and results belong to the student. Institutions can request deletion of their students' data at any time.

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.

Questions about this policy or your data? Email hello@forgedresume.com.