Skip to content

Privacy Policy

Last updated: March 2026

Skill Forge AI ("we", "us", or "our") operates the Skill Forge AI resume optimization service. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

What We Collect

  • Resume content: The text of your resume, uploaded for the purpose of optimization. Resume text is sent to our AI provider for processing and is not stored for AI training by us or our provider.
  • Job descriptions: The job listing text you paste or we scrape on your behalf, used to tailor your optimization.
  • Account information: Your email address, hashed password, account tier, and verification status. Required to provide the service.
  • Optimization history: Records of past optimization sessions, including match scores and diff data, so you can access your history.
  • Usage analytics: Anonymized event data (pages visited, features used) collected only with your explicit consent.

How We Use Your Data

  • Optimization: Your resume and job description are processed by our AI engine to produce keyword suggestions, formatting improvements, and an optimized resume.
  • Scoring: We calculate a match score between your resume and the target job description to show you how well they align.
  • Service improvement: We use aggregated, anonymized signals (never individual resume content) to improve our optimization engine.

What We Do Not Do

  • We never sell your data to anyone, for any reason.
  • We never share your resume content with third parties beyond what is strictly necessary to provide the Service (i.e., sending text to our AI provider for processing).
  • We never use your resume content to train AI models, and neither does our AI provider under their API terms.
  • We never display, publish, or make your resume content available to other users or employers.

Third-Party Services

We use a small number of trusted third-party services to operate Skill Forge AI:

  • Anthropic Claude (AI processing):Your resume text and job description are sent to Anthropic's API for optimization. Anthropic does not use API inputs to train their models. See Anthropic's Privacy Policy.
  • Neon (database): Your account information and optimization history are stored in a Neon PostgreSQL database with encryption at rest.
  • Cloudflare R2 (file storage): Generated PDF exports are stored temporarily in Cloudflare R2 for download.
  • Stripe (payments): Subscription billing is handled by Stripe. We do not store your full credit card number. See Stripe's Privacy Policy.
  • PostHog (analytics): Anonymized usage analytics are collected via PostHog, only after you accept the analytics consent banner.

Data Retention

  • Active accounts: Your data is retained for as long as your account is active and needed to provide the Service.
  • Deleted accounts: When you delete your account, all personal data (resume content, optimization history, account information) is purged from our systems within 30 days.
  • Analytics data: Anonymized analytics data is retained for up to 12 months.
  • Audit logs: Minimal audit logs (e.g., account creation and deletion timestamps) are retained for up to 7 years for legal compliance.

Your Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights:

  • Right to access: You can request a copy of all personal data we hold about you.
  • Right to data portability:You can export all your data via Account Settings using the "Download My Data" feature. The export is provided in a machine-readable JSON format.
  • Right to deletion: You can delete your account and all associated data at any time via Account Settings. You can also email us to request deletion.
  • Right to rectification: You can update your account information and resume content at any time through the Service.
  • Right to restrict processing: You can contact us to request that we limit how we use your data.

Our GDPR lawful bases for processing are: contract (to deliver the service you signed up for), legitimate interest (improving the service using anonymized data), and consent (analytics data, collected only when you opt in).

Your Rights (CCPA)

If you are a California resident, you have the right to know what data we collect, the right to delete your data, and the right to opt out of the sale of personal information. We do not sell personal information.

Cookies

We use cookies for authentication (session management) and, with your consent, for analytics. We do not use advertising or tracking cookies. Analytics cookies are set only after you accept the consent banner. You can withdraw consent at any time through your browser settings or the consent banner.

Security

  • All data is encrypted in transit using TLS.
  • Data at rest is encrypted in our database and file storage.
  • Passwords are hashed using a strong one-way algorithm. We never store plaintext passwords.
  • Access to production systems is restricted to authorized personnel with multi-factor authentication.

Children

Skill Forge AI is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice at least 30 days before the changes take effect.

Contact

For privacy questions or to exercise your data rights, email support@skillforgeai.com.

Optimize My Resume