1. Who we are
PlotMyCareer is operated under the PlotMyCareer brand and is available at plotmycareer.lovable.app. This policy applies to the website, the resume analyser, the AI resume builder, the ATS optimizer, and any downloads or reports generated by those features. It applies whether or not you create an account.
2. Information we collect
Personal information
Your name, email address and any contact details you type into a resume, a form, or a support request. If a resume you upload contains a phone number, address, or links, that information is processed as part of the document.
Resume data and uploaded documents
PDF, DOCX and plain-text resumes you upload, and the extracted text and structure we derive from them (headings, roles, dates, bullet points, skills). We also store the optimized resume versions our AI generates, together with the scores and change logs that explain them.
Job descriptions and target roles
Job descriptions, job titles, target companies and role preferences you paste in so we can produce a job-match score and tailor wording. These are treated as content you supply, not as data about a third party you are profiling.
Account information
If you sign up, we store your email address, an authentication identifier, sign-in method (email/password or Google), and account timestamps. Passwords are handled by our authentication provider and are never visible to us in readable form.
Cookies, analytics, device and usage data
- Strictly necessary cookies and local storage that keep you signed in and preserve in-progress drafts.
- Aggregate analytics events such as pages viewed, features used, and whether an analysis completed or failed.
- Technical data your browser sends: IP address, browser and operating system, language, screen size, and referring page.
We do not run advertising networks, we do not sell data, and we do not build advertising profiles from your resume.
3. How we use your information
- To extract text from your uploaded resume and score how cleanly applicant tracking systems can parse it.
- To compare your resume against a job description and produce a job-match score, keyword coverage and gap list.
- To generate optimized resumes, bullet rewrites, summaries, cover letters and interview questions from information you have supplied or confirmed.
- To render downloads in PDF and DOCX and to re-check the generated file's parseability.
- To keep your saved resumes and history available in your account.
- To secure the service, prevent abuse, debug failures, and respond to support requests.
- To measure aggregate product usage so we can improve accuracy and performance.
4. How AI processes your resume and job descriptions
Resume text and job description text are sent to third-party large language model providers through a managed AI gateway so that scoring, rewriting and suggestion features can run. Requests are transmitted over encrypted connections and are processed to return a result to you — not to profile you.
- Our AI is instructed never to invent employers, dates, degrees, certifications or metrics. Missing information is raised as a question to you instead.
- Structural scoring (parseability) is rule-based and runs on our own servers, not through an AI model.
- Model outputs are estimates. They are stored alongside your resume so you can review every change we suggest.
- We use providers under terms that prohibit using submitted content to train their foundation models.
5. Data storage and security
Accounts, resume records and generated documents are stored in managed cloud infrastructure with encryption in transit (TLS) and encryption at rest. Access to stored rows is enforced per user at the database layer, so one account cannot read another account's resumes.
- Administrative access is limited to what is needed to operate and support the service.
- Authentication is delegated to a dedicated identity provider; we never store plaintext passwords.
- Documents you generate are built in your browser or on our servers and downloaded directly to your device.
- No online service can guarantee absolute security. Please avoid including government identifiers, financial details or medical information in a resume.
6. Third-party services
We rely on a small set of processors, each for a specific purpose:
- Cloud hosting, database and file storage — to run the application and store your account and resumes.
- Authentication providers — email/password sign-in and Google sign-in. When you use Google, we receive your email address and basic profile identifier, not your Google password.
- AI model providers, accessed through a managed gateway — to generate scores, rewrites and suggestions.
- Analytics (for example Google Analytics or a privacy-focused equivalent) — aggregate usage measurement only.
- Payment providers — if and when premium plans launch, card details will be handled entirely by a PCI-compliant processor such as Stripe. We would receive only a subscription status and billing metadata, never full card numbers.
8. Data retention
- Resumes, analyses and generated documents are kept while your account is active so you can revisit them.
- Uploaded files and analyses created without an account are processed for the session and are not retained long-term.
- When you delete a resume, it is removed from your account and purged from our storage within 30 days, including routine backups.
- Aggregate, non-identifying analytics may be retained indefinitely.
9. Your rights and account deletion
You can view, edit, re-download or delete any saved resume from your dashboard at any time. You may also request access to, correction of, export of, or erasure of your personal data, and you may withdraw consent for optional processing.
To delete your entire account and everything in it, email us from your registered address and we will action the request within 30 days.
10. GDPR (EEA, UK and Switzerland)
If you are in the EEA, UK or Switzerland, we process your data on these bases: performance of a contract (delivering the analysis and documents you request), legitimate interests (security, abuse prevention, product improvement), consent (optional analytics and marketing email), and legal obligation where applicable.
You have the rights of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local supervisory authority. Where data is transferred outside your region, we rely on standard contractual clauses with our processors.
11. CCPA/CPRA (California)
California residents may request disclosure of the categories of personal information we collect, request deletion or correction, and request a copy of their data. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is no "Do Not Sell" transaction to opt out of. Exercising these rights will never result in a degraded service.
12. Children's privacy
PlotMyCareer is intended for job seekers aged 16 and over and is not directed at children. We do not knowingly collect data from anyone under 16. If we learn that we have, we will delete the account and its documents promptly.
13. International users
The service is operated from, and processed on, infrastructure that may be located in the United States and the European Union. By using PlotMyCareer you understand your resume content may be processed in those regions under the safeguards described above.
14. Changes to this policy
We will update this page when our processing changes and will revise the "Last updated" date. Material changes — for example the introduction of payments or a new category of AI processing — will be announced in the app or by email before they take effect.
15. Contact us
Privacy questions and data requests: privacy@plotmycareer.com
General support: support@plotmycareer.com
You can also reach us through the contact page, or review our Terms & Conditions.