Privacy Policy
Last updated 12 September 2026
Recast handles your resume, which is about as personal as a document gets. This page says what we collect, why we need it, who else sees it, and how to get rid of it.
01What we collect
Your Google account details. When you sign in with Google we receive your name, email address and profile picture. We ask for nothing else, and we never receive your Google password.
What you upload. The resume you upload and the job descriptions you paste in, along with everything we derive from them: your master profile, each tailored resume, cover letters and match analyses.
The state of your applications. The status you set on each application, and any notes you add to it.
Which pages get visited. Page views and load times, collected without cookies and not linked to your account. See Vercel under section 03.
02Why we hold it
- To identify you, so your documents come back to you and to nobody else.
- To produce a tailored resume: the job description and your profile are what the pipeline reads.
- To show you your own history — the applications you have started and what happened to them.
We do not sell your data, we do not share it with recruiters or employers, and we do not use it to advertise to you.
03Who else it reaches
Four processors, each doing one job:
- Google — sign-in only. Google tells us who you are; we tell Google nothing about what you do here.
- Supabase — authentication and the database your documents are stored in.
- Groq — the model provider that performs the rewriting. The text of your profile and the job description is sent for each recast. It is not used to train models.
- Vercel — hosting, and page-view analytics so we know which parts of Recast get used. The analytics are cookieless: they record the page, the referrer and the browser type, tied to a hash that changes daily. No name, no email, and nothing you upload.
04How it is kept
Your rows are keyed to your account id, and every query the application makes is scoped to it. The database additionally enforces row-level security, so a request that somehow arrived without your identity attached reads nothing rather than reading everything.
Rendered PDFs and DOCX files are never stored. They are produced from your resume data at the moment you ask for one and discarded immediately after.
05How long we keep it
Until you delete it. You can delete an individual application from the applications list, and you can replace your master profile at any time by uploading a new resume.
Deleting your account deletes everything attached to it — profile, applications, resumes, cover letters and analyses — in the same operation. To request that, email us from the address you signed in with.
06Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to erase it. Depending on where you live you may also have the right to object to processing or to complain to a data protection regulator.
07Changes and contact
If this policy changes in a way that affects you, we will say so here and update the date at the top. Questions about any of it, or a request under the section above, go to the contact address for the deployment you are using.
See also the Terms of Service.