This policy explains what WolfResume collects, why, where it goes, and how long we keep it. We've tried to write it the way we'd want one written for us — in plain English, with specifics. If anything is unclear, email info@wolfresume.com.
1. Information you give us
Depending on which part of WolfResume you use, you may provide:
- Resume builder: name, email, phone, city/state, target job title, professional summary, work experience, education, skills, and (optionally) a pasted job description.
- ATS analyzer / parser test: an uploaded resume file (PDF, DOCX, or TXT, up to 4MB), and optionally a target job title and pasted job description.
- Free AI resume campaign: the same fields as the resume builder above — name, email, phone, city/state, target job title, summary, experience, education, skills, and optionally a pasted job description. Submitted once when you click Generate.
- Checkout: billing email and payment details — handled directly by Stripe (we never see card numbers).
2. Information we collect automatically
When you use the site, we also collect a small set of operational and analytics signals:
- IP address and approximate country (used for rate limiting, fraud prevention, and aggregate analytics — never published).
- Browser type, viewport size, and operating system, from the standard user-agent header.
- Page URL, referrer, and any UTM parameters present in the link you arrived on.
- Anonymous identifiers stored in your browser's localStorage (a per-browser
anon_id) and sessionStorage (a per-tabsession_id) so we can stitch repeat visits in our analytics without using third-party cookies. - A SHA-256 hash of your email address (irreversible) attached to conversion events, so we can connect a checkout to the form that produced it without storing the raw address in analytics.
- Standard interaction events: page views, scroll depth, time on page, button clicks, FAQ opens, form-field engagement, and file-upload outcomes.
3. How we use it
- To generate your resume, cover letter, or career kit.
- To run ATS parsing diagnostics and (where applicable) AI-based analysis on resumes you upload.
- To send transactional email — order confirmations, download links, and the single +24h follow-up email asking how a free AI resume turned out.
- To detect abuse, enforce rate limits, and protect the service from automated scraping.
- To understand how the product is used in aggregate so we can improve it.
We do not sell, rent, or share your personal information with third parties for advertising or marketing.
4. Service providers
We use a small set of third parties to operate the service. Each receives only the data needed to do its job, and each is bound by its own privacy and security obligations.
- Stripe — payment processing. stripe.com/privacy
- Anthropic — AI generation and analysis (Claude). The form fields you submit or the text extracted from your resume may be sent to Claude to produce output. anthropic.com/privacy — note Anthropic does not train models on API inputs by default. The deterministic ATS parser test does not send your resume to any AI model.
- Brevo — transactional email (order confirmations and the +24h follow-up email sent after a free AI resume is generated). brevo.com/legal/privacypolicy
- Google Analytics — aggregate page-view analytics. No raw email or contact information is shared with Google. policies.google.com/privacy
- Vercel — application hosting and edge networking. vercel.com/legal/privacy-policy
- Google Sheets / Apps Script — internal analytics sink that receives the operational events described in §2 (no raw email, no resume content).
5. Where your data lives, and for how long
- Resume builder drafts: stored in your browser's localStorage so you can leave and come back. Cleared when you click “Start fresh,” complete checkout, or clear your browser storage. We do not copy this draft to our servers.
- ATS analyzer / parser test uploads: files are processed in memory and discarded immediately. An analysis result is cached server-side for 24 hours, keyed by a content hash, so a refresh doesn't reprocess the same file. The cache is in-memory and resets on each deploy.
- Free AI resume submissions: the form fields you submit are sent once to Claude to generate your resume and not stored long-term. The generated resume is returned to your browser and is not persisted on our servers. For dedupe and abuse-prevention we retain a hashed email, an anonymous identifier, and a hashed IP — never the raw email address, never the resume content. Deletion of these on request.
- Generated resumes: stored in Stripe checkout-session metadata so paid customers can re-download. Stripe's standard retention policies apply.
- Analytics events: kept indefinitely in aggregate form, but with hashed email and anonymous identifiers — not raw PII.
6. AI processing
When you generate a resume, run the AI-powered ATS analyzer, or order a cover letter / career kit, the relevant text is sent to Anthropic's Claude API. Anthropic does not use API inputs to train its models by default. The standalone parser test at /parser-test is fully deterministic — your resume is never sent to an AI model.
7. Cookies and local storage
We do not use third-party advertising or tracking cookies. The site uses your browser's localStorage and sessionStorage to remember in-progress drafts, preserve a tab session, and hold anonymous analytics identifiers. Google Analytics sets its own first-party cookies for aggregate measurement. Stripe sets cookies during checkout to handle the payment session.
8. Free AI resume follow-up email
When you generate a free resume, we send a single follow-up email roughly 24 hours later asking how it turned out and (optionally) inviting you to leave a Trustpilot review. This is disclosed on the form before you submit. To opt out, reply STOP to that email or email us at any time and we won't send another. We don't send any other marketing email — no newsletters, no promotional blasts, no list rentals.
9. Your rights
You can ask us to:
- Confirm what data we hold about you.
- Send you a copy of it.
- Correct anything inaccurate.
- Delete your data, including any free-review submission.
- Withdraw a consent you previously gave.
Email info@wolfresume.com and we'll respond within a reasonable period — usually a few business days. For users in the EU, UK, or California, the rights available to you under GDPR / UK GDPR / CCPA apply in full.
10. Children
WolfResume is intended for users 16 and older. We don't knowingly collect personal information from children under 16. If you believe a child has submitted information, contact us and we'll delete it.
11. Changes to this policy
When we update this policy in a material way we'll change the “Last updated” date at the top and, where appropriate, note what changed. Continued use of the site after an update means you accept the revised policy.
12. Contact
Questions, requests, or complaints: info@wolfresume.com.