Privacy

Last reviewed 2026-11-02.

The short version. Your account keeps your sign-in email, the name and contact details you give in your profile, your Career Profile, saved checks and workspace entries. We do not store the original Resume file. A saved check keeps the Resume as text and measured layout so you can reopen it. It does not keep the phone number, email or street address from your Resume's contact details. You can export your account data and delete your account.

Where The Work Happens

Your file is opened and read in your browser. Parsing and scoring run there. The original PDF or Word file is not uploaded or stored. A saved check keeps the Resume text and measured layout, the score, the job posting you pasted, your fix decisions and notes, and the one-page fit so you can return to the review. Before a review is stored, we remove the phone number, email and street address from your Resume's contact details. Your sign-in email stays with your account.

What We Store

Your email address

Used to sign you in, to verify the address, and to send a password reset when you ask for one. It is the only detail required to create an account. The sign-in service keeps your sign-in email and your password, the password only as a one-way hash. For each session you have open, it also records a network address and a browser. The app does not show these records. Your export includes your sign-in email, your account's dates and your open sessions, but not your password.

Your name and contact details

The first step of your profile asks for your first and last name and an email, and, if you choose, a phone number and the web address of a professional profile. They are kept on your account, where only you can read or change them. They are included in your export and deleted with your account. They are kept apart from the facts from your Resumes: a saved check still does not keep the phone number, email or street address from your Resume's contact details.

The facts from your Resumes

The fact bank stores employers, titles, dates, bullet statements and the numbers in them, schools, degrees, majors and GPA, skills, and experience you add yourself, as separate facts. Each fact records the file it came from and its place in that file, such as the section or role. The file is recorded by its name, where one was saved, and by a hash of its contents: a fingerprint that identifies that exact file and cannot be turned back into it. A saved check is different: it keeps the Resume as text and measured layout, without the original file or your contact details' phone number, email and street address.

What you tell us about those facts

When the reader was not certain about something and you confirm it or correct it, we record that the fact now comes from you rather than from the file, and the date you said so. A correction replaces the value we read with the one you gave.

Your decisions

We keep your format choice, each decision on a proposed fix, any note or answer you save with it, and the one-page fit. These let you return to the same review. An answer is not added to your Resume or to the shared fact bank.

Your workspace entries

We keep the jobs you save. We keep the people you add, with the contact details you enter for them, such as company, role and email, and your follow-up notes. In the Networking CRM we also keep each person's stage and when it changed, the meetings you log (when they happened, what was said, what was promised and the next step, as you typed or pasted them), the follow-ups and tasks you set with the time you marked each done, the campaigns you open toward a company, the message drafts you write here and when you copied one, the stage names and reminder rules you set, the plan you keep for each campaign (its phases and tasks, who each task is with, when it is due and when you ticked it), your own plan template if you change it, and a count of each import. We keep the suggestions your Daily Review offers (who wrote or what was scheduled, with their name, email and company, and the stage or step suggested) until you confirm or ignore them, a count of what each overnight update logged, and the email addresses you choose to ignore, so they are not suggested again. We keep your Interview Practice: the stories you save, whether you typed them or told them, with the words you told them in and their English and where each part came from; for each practice session, its kind and length and when it ran; and for each answer, the question, the transcript your device wrote, its length, the parts found in it and its score. The recordings are never stored. To turn a spoken answer into text, your browser downloads a speech model once from Hugging Face and keeps it; your voice recording is processed on your device and never leaves it. Interview Practice's AI reading is switched off today. When it is on and you ask for it, the words of your story, as your device transcribed them, are sent to Anthropic with your name, email and phone masked, and the answer comes back to your screen. For the reading itself we keep only that it ran, when, and its cost; a story you then save is kept in your Story Bank. When a screen stops working, your browser may tell us so, and we keep only the page's route with every id removed, the kind and name of the error, hashes of its message and stack, the version of the site and your browser family, for 30 days. We never keep the message itself, who you are, or your address. We also keep the full job posting text you paste into a check, including any employer contact details in that posting. A posting is the employer's text, separate from your Resume text. We do not import your address book or send messages.

Saved checks

A saved check keeps its score and date, the posting text you pasted, the Resume as text and measured layout, fix decisions and notes, and the one-page fit. It does not keep the original Resume file, or the phone number, email and street address from your contact details.

Help tickets

A help ticket keeps the message you wrote, its category, and where you opened it: Help, a failed state, a card, or the signed-out form. It also keeps any related check, rule, and fix references, the version of the guidance shown for that category, its status, and any team reply. Resume text is included only when you tick its consent box. If you request sign-in help while signed out, we also keep any email address you provide. We clear that address when the ticket is closed.

Your plan and payments

Omni MBA is free, and payments are switched off: there is no card, no subscription, no trial and no referral. Every account has the free plan, up to 8 tailored Resumes a month and 40 followed employers, counted from the first of each month, and we keep the plan and its limits with your account. The database also has places for payments, kept for a later date in case payments are ever switched on: a record of each billing notice from Dodo Payments, which would be the seller of record (its type, its time, the subscription's status, and the amount and currency, never the whole notice); who referred whom, with the code; and cohort codes, with when each was redeemed and the time of each failed try, kept for a day. While payments are off they hold nothing about you.

What we deliberately do not store:

• The original Resume file. It stays in your browser.
• From a saved Resume review, the phone number, email and street address from your Resume's contact details.
• We ask whether you will need visa sponsorship to work in the US, now or later, as yes or no, so roles can be matched to you. We do not ask for your nationality, your visa type or documents, your home address or your date of birth. A phone number is asked only as an optional field in your profile. Do not include sensitive details in Resume text or notes that you do not want saved with your account.
• A photograph of you, any video, or any audio recording. The transcript your device writes from a spoken answer is kept, as described above.
• A card or other payment method. Payments are switched off, nothing is charged, and no card is asked for.

Where It Is Stored

In a Postgres database run by Supabase, in the United States. It is encrypted at rest by the host and it travels over TLS. Access is restricted at the database level, deny by default, so a row that does not belong to you cannot be read by you, and the same rule is what stops anyone else reading yours.

Who Else Is Involved

• Supabase hosts the database and handles sign in.
• If you choose Google or Microsoft as your provider for signing in, that provider receives your sign in request and the email address used for your Omni MBA account.
• Cloudflare serves these pages and the application.
• Anthropic: when you use AI tailoring in the Resume Builder, the facts you confirmed and the job posting are sent to Anthropic's API to suggest changes, without your name or contact details.
• An email provider sends verification and password reset messages. It receives your email address and nothing else.

There is no advertising, no data broker, no analytics product that records what you type, and nothing here is sold or shared for anyone else's marketing.

The Page Counter

Cloudflare Web Analytics measures page traffic on this website and the application, including signed-in pages. It does not record the Resume text, facts or answers shown on the page. Page views are not a measure of successful Resume preparation or download.

The counter uses no analytics cookies or browser storage and does not track a visitor across visits. We do not use it to build a personal advertising profile. Additional task measurement is not currently connected.

How Long It Is Kept

For as long as your account exists. Account deletion removes the account and its associated application records. Keep an exported copy of any work you need before deleting the account.

Getting Your Data Out

In Settings, Data And Privacy, Export My Data downloads your account records as JSON: your profile and readiness answers, fact bank and sources, saved checks and their posting text, Resume text and measured layout, decisions, notes and one-page fit, plus saved jobs, interview practice and people. The original Resume files are not included. The file includes your sign-in email.

Deleting Your Account

One button, in Settings, Data And Privacy. It deletes the sign in record, and every row attached to it goes with it, because the database is set up so that deleting the account deletes the rest. It is not a flag that hides you from the interface. If it ever fails, it says so plainly instead of pretending it worked. Export your data first if you want to keep any of it, because nothing is recoverable afterwards. Payments are switched off, so there is no subscription to cancel first and no billing record left behind.

Your Requests

Open Data And Privacy after sign-in to export your account information or delete your account. Correct saved information in the service where you entered it. Help And Support explains these controls and lets you send a ticket from your account.

Who This Is For

Anyone looking for work, including undergraduate, graduate and MBA students. It is not intended for anyone under 16, and we do not knowingly hold data about anyone that age.

Changes

When a new tool ships, this page is updated before it ships, not after. The date at the top is when it was last reviewed.