Skip to content
WOW
Privacy & Data

Privacy Policy

Last updated:

We keep your resume data private and give you control. Below is a plain-English summary of what we collect, how we use it, how long we keep it, and your rights. For technical controls, see our Security page.

No Data Selling

Never sold; no cross-context ad sharing.

No Model Training

We don’t train on your personal content.

You Control Deletion

Your data stays until you delete it or your account.

Your Rights

Access, export, correct, delete anytime.

What We Collect

  • Uploaded content: resumes you upload (PDF/DOCX) and job descriptions you provide. We use them only to generate your requested outputs (enhancement, keywords, ATS checks).
  • Usage data: page views, device type and timestamps, collected with Google Analytics. We use it to keep the service reliable and improve features. We do not build ad profiles.
  • Email activity: when you open or click a link in one of our emails, we record your IP address and browser details. This is personal data.
  • Essential cookies/local storage: for authentication and session continuity. You can control cookies in your browser; some features may be affected.

For Job Application Sprint subscribers, we additionally store: application tracking data (job titles, companies, job descriptions, application status, salary information, and notes you enter), outreach message drafts generated for specific roles, and interview preparation checklists and progress. This data is stored in your account. We share it only with the service providers listed below, to run the service.

How We Use Information (and What We Don’t Do)

  • Provide the Services you request (resume enhancement, keyword generation, ATS scans).
  • Protect service integrity and prevent abuse/fraud.
  • Improve features using usage data combined across many users.
  • We do not sell your data, share it for cross-context behavioral advertising, or use your personal resume content to train AI models.

Sharing & Sub-processors

We disclose data only to vetted providers under contractual safeguards, limited to what’s needed to operate the service:

  • Google Cloud and Firebase: hosting, sign-in, database, file storage and server logs.
  • Google Gemini API: AI processing of the resume and job description text you submit, to generate the results you ask for. Your content is not used for training.
  • Stripe: payments. Stripe receives your email address, name, billing address and payment details when you buy a plan.
  • IONOS: our email provider. It sends our emails, so it receives your email address and the email content.
  • Google Analytics: usage data such as page views, device type and timestamps.

Data Retention

  • Resumes you upload and the data from anonymous checks are kept until you delete them or delete your account. This includes the resume text you submit and the job descriptions from checks you run without an account.
  • Items you explicitly save persist until you delete them from your account.
  • Usage data may be kept for up to about 12 months for reliability and security.
  • Email activity records (IP address and browser details) are deleted automatically after 90 days.

When you delete your account

Deleting your account removes your account and everything in it: resumes, ATS reports, cover letters, outreach messages, applications and interview prep.

Some records stay after deletion:

  • Payment records stay with Stripe for as long as tax law requires.
  • After your account is deleted, we keep a do-not-email entry so we don't email that address again, unless you create a new account with it. It is stored as a hash, not as the address itself.
  • Server logs are kept for about 30 days.

Security (Overview)

  • Encryption in transit (TLS/HTTPS) and encryption at rest via our cloud provider.
  • Least-privilege access: internal access limited to what’s required to run the service.
  • Routine reviews of secrets, permissions, and dependencies.

Details live on our Security page.

International Transfers

Your information may be processed outside your country. Where legally required, we use Standard Contractual Clauses (SCCs) or equivalent safeguards.

Your Rights (GDPR/CCPA and similar)

  • Access & export your data.
  • Correction & deletion (incl. account deletion).
  • Withdraw consent for optional communications.
  • We do not sell your personal information or share it for cross-context behavioral advertising.

To make a request, email support@wowthiscv.com from the address associated with your account. We typically respond within 30 days.

Changes to This Policy

We may update this policy to reflect new features or regulations. Material changes will be announced on the site or by email. Continued use after changes indicates acceptance of the updated policy.

Last reviewed: