Privacy Policy

Who we are

ReWork (rework.hellojakejohn.com) is operated by Jakob Johnson, an individual based in Saint Paul, Minnesota, USA ("we", "us"). Questions about your data go to hellojakejohn@gmail.com.

What we collect

• Your Google account basics. When you sign in with Google we get your name, email address, profile picture URL and Google account ID. We don’t request access to Gmail, Drive, Contacts or anything else in your Google account.
• Resumes you upload or paste. The original file, the text we extract from it, and the structured version (roles, bullets, education, skills) that you can edit.
• Jobs you tailor for. The job link you paste, and the job title, company, location and description we read from it or that you paste.
• What we generate for you. Tailored resumes, cover letters, and your answers in the evidence interview.
• Your application tracker. Status, notes and follow-up dates you enter.
• Billing status. If you pay, Stripe handles your card. We store your Stripe customer ID, which plan you have and when it ends. We never see or store your card number.
• Usage events. Which features you used and when, how long they took, whether they failed, and how many AI tokens they used. These never contain your resume or job text.
• Page views. Vercel Web Analytics counts page views without cookies and without identifying you.
• Server logs. Our host (Vercel) keeps standard request logs, such as IP address, browser and time, for a short period.
• Feedback you send us through the app or by email.

How we use it

• To run the service: read your resume, tailor it to a job, check the result against your original, write cover letters, and keep your history and tracker.
• To handle billing and plan limits.
• To find and fix problems, prevent abuse, and understand which parts of the product people use.
• To reply when you contact us.

We don’t sell your data, we don’t use it for advertising, and we don’t share your resume with employers or recruiters. We don’t use your resume to train AI models.

Who processes it for us

These companies handle data on our behalf, only to provide their service to us:

• Supabase: our database and file storage, hosted on AWS in the US (Oregon, us-west-2). Your resumes, tailored versions, cover letters, tracker and account live here.
• Vercel: hosts the website and API, keeps request logs, and provides cookieless page-view analytics.
• OpenAI: when you parse a resume, tailor, write a cover letter, run the evidence interview or fetch some job pages, the relevant text is sent to OpenAI’s API to generate the result. Under OpenAI’s API data policy, data sent through the API is not used to train their models. OpenAI may keep API data for a limited time to monitor for abuse, under its own policy (see OpenAI’s privacy policy).
• Stripe: payments, receipts, subscriptions and the billing portal. Stripe is responsible for your card details.
• Google: sign-in.

When you paste a job link, our server fetches that page (or the job board’s public API) to read the posting. The job site sees a request from our server, not from you.

How long we keep it, and deleting it

• We keep your data while your account exists, so your resumes and history are there when you come back.
• Deleting a single resume removes it from your account. Tailored versions you already made from it keep their own copy until you delete them or your account.
• Deleting your account (Settings, Your data, Delete my account) cancels any Pro subscription, deletes your uploaded files, and deletes your account, resumes, tailored versions, cover letters, tracker and feedback from our database right away. Database backups held by Supabase age out on their normal schedule.
• Usage events are kept after account deletion with the link to you removed, so they can’t be tied back to you.
• Stripe keeps records of past payments, as payment processors are required to.

Your choices and rights

• Download your data: Settings, Your data, Download my data gives you a JSON file of everything in your account.
• Correct it: edit your resume in the app any time.
• Delete it: delete resumes one at a time, or your whole account.
• For anything else, including questions under privacy laws where you live, email hellojakejohn@gmail.com. We’ll answer within 30 days.

Cookies and local storage

We use one essential cookie to keep you signed in, plus the cookies Google and Stripe set during sign-in and checkout. Your browser’s local storage remembers small preferences like your resume template and avatar color. We don’t use advertising or cross-site tracking cookies.

Security

Traffic is encrypted with HTTPS. Uploaded files are kept in a private storage bucket, and database access is limited to our server. No system is perfectly secure; if we learn of a breach that affects your data, we’ll tell you by email.

Children

ReWork isn’t meant for anyone under 16, and we don’t knowingly collect data from them.

Changes

If we change this policy, we’ll update the date at the top. If a change affects how we use data you’ve already given us, we’ll email you before it takes effect.

Contact

Jakob Johnson, Saint Paul, Minnesota, USA. Email hellojakejohn@gmail.com. See also the Terms of Service.