Privacy Policy

1. Scope

Workscaler Inc., doing business as Resumás (“Resumás,” “Workscaler,” “we,” “us,” or “our”), provides the Resumás web app (at dash.resumas.com and the other addresses that serve it), the Resumás app for iOS and Android, the Resumás Job Saver Chrome extension, and related resume, job-search, and career-support services (collectively, the “Services”). This Privacy Policy explains what personal information we access, collect, use, disclose, retain, and delete when you use the Services.

This Policy applies to visitors, registered users, subscribers, and other users of the Services.

2. Privacy Summary

• We use personal information to provide and secure the Services, generate requested career content, process transactions, communicate with you, and improve product performance.
• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising or use it for third-party targeted advertising.
• We do not track users across apps or websites owned by other companies for advertising purposes. If this changes, we will update this Policy and applicable store disclosures and obtain any consent required before tracking begins.
• We do not use identifiable resumes, profiles, job-search materials, private communications, or AI prompts to train generalized AI models unless we first provide a separate explanation and obtain your affirmative opt-in consent.
• If you create an account, you can initiate deletion in the app and through our external deletion page.

3. Information We Collect

3.1 Account and Contact Information

We may collect your name, email address, telephone number, username, password or authentication credential, account identifier, profile details, communication preferences, and subscription status. Passwords are stored only in protected form or handled by an authentication provider; we do not store readable passwords.

3.2 Resume and Career Information

We collect information you enter, upload, import, or generate through the Services, including resumes and CVs, employment history, education, skills, certifications, accomplishments, military occupation information, career preferences, desired roles, location preferences, job descriptions, application records, interview materials, cover letters, LinkedIn-related content, and other professional information.

Resumes and related materials may incidentally contain sensitive information that you choose to provide, such as age indicators, citizenship or immigration information, demographic information, disability or accommodation information, military status, or membership information. Do not include Social Security numbers, government identification numbers, financial-account credentials, health records, or other information unnecessary for career services.

If you use Auto-Fill and choose, in its Auto-Fill settings, answers to the voluntary self-identification questions employers ask (gender, Hispanic or Latino origin, race, veteran status, or disability), we keep the answers you choose, encrypted, so they can be filled in on later applications. They are optional, we never infer them, and you can clear them in Auto-Fill settings at any time. Answers you type or change on application forms, and your answers to work-authorization and other legal questions (such as whether you are at least 18), may also be remembered, encrypted, so you are not asked twice. Resumás never remembers the answer to a question that it recognises as asking for an identity number (such as a Social Security, passport, driver's licence or bank account number), your date of birth, how old you are or, on a form, your self-identification, and never remembers any answer containing a number shaped like a Social Security number or a run of nine or more digits. You can delete remembered answers in Auto-Fill settings.

3.3 AI Inputs, Outputs, and Inferences

When you use an AI-powered feature, we collect the prompts, instructions, documents, job descriptions, profile information, feedback, and other content you submit to that feature. We also process generated drafts, scores, classifications, recommendations, job-match assessments, Ghost Job Detector results, Do Not Apply Guidance, and other inferences produced from your inputs.

AI outputs may be incomplete or inaccurate. Ghost-job indicators, match scores, and application guidance are decision-support tools, not guarantees or employment decisions. You decide whether to use an output or apply for a position.

3.4 Payments and Subscriptions

If you purchase a subscription or service, we collect transaction details such as the plan, amount, date, subscription status, and transaction identifier. Payment-card information is processed by Stripe. We do not store full payment-card numbers.

3.5 Device, Usage, and Diagnostics

We collect your IP address, browser and device type with each sign-in, login events, the features you use, and security and error logs. We use this information to operate, troubleshoot, secure, and improve the Services.

We do not use advertising identifiers or device fingerprinting to track you across third-party apps or websites.

3.6 Location Information

We collect the locations you type, such as the places in your job preferences and the location you search in Job Search. We do not access your device's location.

3.7 Communications and Coaching

We collect messages, support requests, survey responses, feedback, and other communications you send to us. If you participate in coaching, interview practice, or another audio/video feature, we will provide notice and request permission before recording or storing audio, video, or a transcript.

3.8 Connected Services

If you choose to connect or sign in through a third-party service, we receive only the information you authorize that service to provide, such as your name, email address, profile identifier, or authorized professional-profile content. We do not store third-party account passwords. You may disconnect Sign in with Google through your Google Account.

3.9 Service Providers and Public Sources

We may receive transaction status, fraud signals, email-delivery status, or support information from service providers. We may also process job postings, employer information, and professional information from public or licensed sources where permitted by law.

3.10 Previous Resumás Platform

If you had an account on the previous Resumás platform, we hold the name and email address from that account so you can move it here. You can ask us to delete them, as described in Section 11.

4. Mobile Permissions

The Resumás app for iOS and Android asks for no device permissions. To choose a résumé file it uses the device's own file picker, which gives the app only the file you pick. It does not access your camera, photos, microphone, location, contacts or notifications.

5. How We Use Information

We use personal information to:

• Create, authenticate, maintain, support, and delete accounts.
• Provide resume creation and optimization, job matching, application tracking, career guidance, Ghost Job Detector, Do Not Apply Guidance, and other requested features.
• Generate, display, save, export, and synchronize user-requested content.
• Process subscriptions, transactions, refunds, and related records.
• Deliver service messages, security notices, and support responses.
• Personalize the Services based on information and preferences you provide.
• Detect abuse, fraud, security incidents, and technical problems.
• Debug, analyze, and improve reliability, accessibility, and product performance.
• Comply with law, enforce agreements, and establish or defend legal claims.
• Create aggregated or deidentified statistics that cannot reasonably be linked to you.

Where applicable law requires a legal basis, we rely on performance of a contract, consent, legitimate interests that are not overridden by your rights, compliance with legal obligations, and establishment or defense of legal claims.

6. AI Processing

6.1 Data Used for AI Features

Depending on the feature, AI processing may use your resume content, profile and career information, selected job description, prompts, application history, location preferences, and the output being generated. Resumás transmits only the fields needed to perform the feature you requested.

6.2 Third-Party AI Providers and Consent

Some AI features may send personal information to the following service providers acting on our behalf:

Before personal information is sent to a third-party AI provider for the first time, the Resumás app for iOS and Android will display a clear notice identifying the provider, the data to be sent, and the purpose, and will ask for your affirmative permission. Declining optional third-party AI processing will not block unrelated non-AI functionality. You can withdraw permission for future AI transfers in the app under Profile, then AI features. Withdrawal does not affect processing already completed at your request.

AI features send this information to OpenAI when you use them, including the checks that run in the background on jobs you save. If you do not want it processed this way, do not use the AI features, or ask us to delete your account and its content as described in Section 11.

6.3 Model Training

Resumás does not permit a third-party AI provider to use your identifiable account information, resume, career documents, private communications, or prompts to train generalized models on the provider’s own behalf. Resumás does not use those materials to train a generalized Resumás model unless we first give you a separate, specific explanation and obtain opt-in consent.

Service-quality review, abuse detection, and feature evaluation may use access-controlled samples only when legally permitted and consistent with your settings; where practical, information is minimized or deidentified.

6.4 Reporting AI Output

You may report inaccurate, unsafe, offensive, or otherwise inappropriate AI-generated output with the Report button beside it in the app or on the website, or at support@resumas.com. Reports may include the relevant prompt and output so that we can investigate and improve safeguards.

7. When We Disclose Information

7.1 Service Providers

We use service providers to perform services on our behalf.

We do not use analytics services or crash-reporting SDKs.

Service providers may use information only to perform contracted services for us, must protect it under written obligations, and may not sell it or use it for their own advertising. We require providers that access user data to provide the same or equivalent protection described in this Policy, as applicable to their role.

7.2 User-Directed Disclosures

We disclose information when you direct us to export, share, submit, or connect content to a third party. The recipient’s privacy terms apply after it receives the information.

When you use Auto-Fill, the Resumás Job Saver extension fills the employer's application form in your own browser with the details, answers and files you review, and your browser sends them to the employer when you submit. A form that uploads a file as soon as it is attached, such as your résumé, may receive that file then, before you submit. We keep a record of what was submitted as your receipt. It leaves out the answers to questions that Resumás recognises as self-identification or as a code a site sends you, and it shows only the last two characters of an answer to a question it recognises as asking for an identity number or a date of birth, and of any other answer containing a number shaped like a Social Security number or a run of nine or more digits, apart from the contact details filled in from your résumé. Resumás does not send your application to employers from its servers.

7.3 Business Transfers

Information may be transferred as part of a merger, financing, acquisition, bankruptcy, reorganization, or sale of all or part of our business. We will provide notice and choices when required by law.

7.4 Legal, Safety, and Security Purposes

We may disclose information when reasonably necessary to comply with law or valid legal process, protect users or others, investigate fraud or abuse, enforce agreements, or establish or defend legal claims.

8. No Sale, Targeted Advertising, or Tracking

We do not sell personal information. We do not share personal information for cross-context behavioral advertising and do not use it for targeted advertising based on activity across unaffiliated apps or websites. We do not share resume or career information with employers or recruiters unless you direct us to do so.

If our practices change, we will update this Policy and our Apple App Privacy and Google Play Data safety disclosures and provide required notices, choices, and platform permission prompts before the changed practice begins.

9. Cookies and Analytics

The website and the app use only essential cookies and local storage: to keep you signed in, to complete Sign in with Google, to remember your preferences and work in progress on your device, and, on the checkout page, Stripe's cookies that help prevent payment fraud. We do not use analytics or advertising cookies, pixels, or SDKs.

We honor legally required browser-based opt-out preference signals where applicable. We do not interpret a general “Do Not Track” signal as a universal consent withdrawal where no legal standard requires it.

10. Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to legal, accounting, fraud-prevention, security, and dispute-resolution requirements.

When an account is deleted, we delete the account and associated user content from active systems; account deactivation is not a substitute. If we retain limited records for tax, fraud prevention, security, legal compliance, or legal claims, we isolate them, limit their use to that purpose, and delete them when the applicable period ends.

11. Account and Data Deletion

All registered users may initiate deletion regardless of location.

• In the app: open Profile, then Legal & account, then Delete my account, review the consequences, and confirm.
• On the web: visit https://dash.resumas.com/delete-account to delete the account or submit a deletion request without reinstalling the app.
• By privacy request: visit https://dash.resumas.com/privacy-request or email support@resumas.com.

We may use proportionate steps to verify that the requester controls the account. We will confirm receipt, explain any expected completion time, and notify you when deletion is complete. We will not require a telephone call or unrelated support interaction merely to submit a deletion request.

Deleting your Resumás account cancels your Resumás subscription. It does not by itself entitle you to a refund; refund rights depend on applicable law.

12. Your Choices and Rights

Subject to applicable law, you may request access to, correction of, portability of, or deletion of personal information and may object to or restrict certain processing. You may also withdraw consent for future processing where consent is the basis used. We do not discriminate against you for exercising a privacy right.

Available controls include:

• Update profile and career information in the app.
• Delete individual resumes, documents, saved jobs, or other content where the feature provides that control.
• Withdraw future third-party AI permission in the app under Profile, then AI features.
• Disconnect Sign in with Google through your Google Account.
• Request account deletion as described in Section 11.

To exercise a right, visit https://dash.resumas.com/privacy-request or contact support@resumas.com. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law. If we deny a request, we will explain the reason and any appeal right required by law.

California residents have rights to know, delete, and correct personal information and, where applicable, to limit use of sensitive personal information. Because we do not sell or share personal information for cross-context behavioral advertising, there is currently no sale or sharing from which to opt out.

13. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted transmission using HTTPS/TLS, access controls based on job responsibilities, authentication safeguards, logging and monitoring, vendor review, employee confidentiality obligations, incident-response procedures, and secure deletion processes.

No service can guarantee absolute security. Protect your password, use unique credentials, and contact us promptly if you suspect unauthorized account activity.

14. Children

The Services are intended for people age 18 or older and are not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we collected such information, we will delete it and close the related account. A parent or guardian may contact support@resumas.com regarding a child’s information.

15. International Transfers

Resumás operates from the United States. If you use the Services from another country, information may be transferred to and processed in the United States and other countries where our service providers operate. Where required, we use appropriate transfer safeguards and provide the rights required by applicable law.

16. Third-Party Sites and Job Listings

The Services may link to job boards, employer sites, professional networks, app stores, and other third-party services. Their privacy practices apply when you interact with them. A link or job listing does not mean that Resumás controls or endorses the third party.

17. Policy Changes

We may update this Policy to reflect changes in our Services, technology, providers, or legal obligations. We will change the “Last Updated” date and provide additional notice when required. If a change materially expands how we use or disclose personal information, we will provide notice and obtain consent where required before applying the change.

18. Contact

Resumás / Workscaler Inc. Attn: Privacy Team 717 K Street Sacramento, CA 95814 Email: support@resumas.com Privacy request form: https://dash.resumas.com/privacy-request Account deletion page: https://dash.resumas.com/delete-account

19. Resumás Job Saver Chrome Extension

Resumás Job Saver is a browser extension for Google Chrome. It saves job postings you choose, and, when you ask, companies and contacts, to your Resumás account at dash.resumas.com. It works only while you are signed in to Resumás in the same browser, and it sends data only to the Resumás service at dash.resumas.com, apart from the application form you fill and submit to an employer with Auto-Fill (19.7). The sections below describe everything the extension reads, what it sends and what it keeps on your device.

19.1 What the Extension Reads

On the job sites it supports (LinkedIn, Indeed, Google job search, Greenhouse, Lever, Ashby and Workday), the extension reads the job posting shown on the page, in your browser, so it can recognise the posting and show a Save button. On any other website it reads the page only when you open the extension on that page or use its right-click menu there, or on every website if you turn on "Detect jobs on every site" in its settings. When you open the extension on an email in Gmail, it reads the job links in that open email so it can list them for you; the email itself is not sent anywhere. When you ask it to save a company or a contact, it reads the details that page publishes, such as a name, job title, employer, website, email address or phone number.

19.2 What Is Sent to Resumás

The extension sends information to your Resumás account only in these cases. (1) When you save a job, a company or a contact: the details it read from that page. For a job, that is the posting's web address, title, company, location, description and any posted or closing dates; for a company or a contact, the details described above. (2) When you open the extension on a job posting: the posting's web address, to check whether you have already saved it, and its description, to calculate how well it matches your résumé. The description is used for that calculation and is not stored. (3) When you open the extension on a page that looks like a job posting but cannot be read directly, when you ask it to find a company or a contact on a page, or when you save selected text with the right-click menu: that page's visible text, or your selection, so our service can extract the posting or the details. (4) When you revisit a job posting you have already saved: its current details, at most once a day, so your saved copy stays up to date. (5) When you use Auto-Fill: the questions on the application form you are filling, that page's title, the web addresses of that form and of the posting, the extension's version number, and any cover letter you are applying with; and, when you submit, the answers that were submitted and the confirmation the employer's page showed, as your receipt. When Chrome lets the extension capture the visible tab at that moment (after you opened the extension on the page, or if you turned on "Detect jobs on every site"), it also sends a picture of the confirmation page. The extension also downloads your list of saved jobs, to show which postings you have saved and which close soon, and downloads updated site-reading rules once a day. These downloads send no page content.

19.3 Artificial-Intelligence Processing

In case (3) above, the page text or selection is processed by our artificial-intelligence sub-processor, OpenAI, solely to extract the job posting, company or contact; under OpenAI's API terms it is not used to train their models. After you save a job, Resumás also checks it in the background against your résumé, using the same sub-processor, to show whether the job is worth applying for and whether the posting looks active. Requests that use AI are recorded, encrypted, in a diagnostic log that our team uses to find and fix problems; only your most recent requests are kept. When you use Auto-Fill, the form's open questions are answered by the same sub-processor from your résumé, your Resume Base (the career details saved in your Resumás account), your job preferences and the job description. Questions that Resumás recognises as being about your eligibility to work, legal attestations or voluntary self-identification are never sent to it.

19.4 What Stays on Your Device

The extension keeps a list of the job postings it detected while you browsed (up to 50, for 7 days), so you can save them later. This list stays in your browser and is sent to Resumás only when you save an item from it; you can clear it at any time in the extension's settings. The extension also keeps its own settings, and a temporary note of the posting found on each open tab, in your browser's extension storage. While Auto-Fill is filling an application, the extension also keeps a temporary record of it there: the job, the cover letter and, once you submit, the answers sent. It deletes the record when Auto-Fill stops. If Auto-Fill stops while its application form is still open, the extension keeps only the identifiers of that attempt, its tab, the frame and the page the form is in (none of your answers), so that a submission you then make on that form can still be recorded, and deletes them once that submission is recorded, or shortly after you close the tab.

19.5 What the Extension Does Not Do

The extension does not collect your browsing history beyond the job postings described above, does not collect analytics, does not track you across websites, does not show advertising, and does not sell or share the information it handles with anyone other than the service providers listed in Section 7 and, when you use Auto-Fill, the employer whose application form you fill and submit (Section 7.2). It does not read your passwords: it relies on the sign-in you already have with Resumás in the same browser, and it does not run in incognito windows. Auto-Fill never fills or clicks anything on LinkedIn or Indeed. When it fills an application form it never types a password, a verification code or a CAPTCHA answer, and never ticks a consent box for you unless you turn on, in Auto-Fill settings, the setting that ticks “I agree” and “I certify” boxes for you, and even then never one that signs you up for anything (19.7). It submits a form by itself only if you turned Confirm off and nothing on that form is left for you (19.7); otherwise you press Submit.

19.6 Your Choices

You can delete saved jobs, companies and contacts at any time from your Resumás dashboard, which removes the stored copy. Signing out of Resumás stops the extension from saving anything to your account. Removing the extension from Chrome deletes everything it kept in your browser. In Auto-Fill settings you choose where Auto-Fill opens a form, and whether it ticks “I agree” and “I certify” boxes for you, which it does not unless you turn that on (19.5). For questions about this section, contact us at support@resumas.com.

19.7 Auto-Fill

When you press Auto-Fill in Resumás, the extension opens the job posting where you chose in Auto-Fill settings: in a new window, maximized (the default), in a new window, in a new tab, or in a minimized window. When the application form is on Greenhouse, Lever or Ashby, or, if you turned on "Detect jobs on every site", on the posting's own website or on Gem, iCIMS or SmartRecruiters, and the page names the employer, the extension reads the form's visible questions, asks your Resumás account for answers, fills them in and shows you what it filled. On any other page it first asks you whether the form is this job's, or waits until you open the extension there and press "Start filling here". It does not fill Workday forms in this version. You review the answers and press Submit. If you turned Confirm off in Resumás, the extension presses the form's own Submit button for you after a five-second countdown that you can stop, but only when every required question is answered, every answer to a legal question (such as whether you may work in the country or need sponsorship) is one you already submitted to that question on an earlier form, and the page is not asking you to sign in, for a code or for a CAPTCHA; otherwise it waits for you to review the answers and press Submit. Either way, it then records the confirmation as your receipt.

It fills text boxes, drop-downs, radio buttons and check-all-that-apply questions from your own documents and settings; in a check-all-that-apply question it ticks only the options your résumé, your Resume Base, your Job Profile or your Auto-Fill settings support, and none when they support none. If you turned on the setting that ticks “I agree” and “I certify” boxes for you (it is off unless you do), it also agrees, as if you answered yourself, to a form's required privacy notice or terms, to the processing, storage or transfer of your application's data, and to a statement that the information you gave is true, whether the form asks with a box or with a Yes/No question. If you also turned Confirm off, these agreements do not stop the extension from submitting the form: you agreed in advance. It never subscribes you to anything, such as a newsletter, marketing email, a talent pool or text messages. It never agrees to a background, credit or drug check, a release of liability, an arbitration or non-compete clause or any other waiver of a right, never ticks an optional box, never ticks a box that states a legal fact about you, such as your right to work, and never signs or initials for you.

The Auto-Fill card in Resumás says that the form is being filled, whether questions need you and when the form is ready for you to press Submit, and, once the application is recorded, shows it as applied, with its receipt. In a minimized window the form is filled out of sight and you follow it on that card; nothing comes to the front by itself except the small Resumás window that asks whether a form on a site it does not know is this job's, and "Open the form" on the card, or pressing Auto-Fill again, brings the window up. Once your submission is recorded, a minimized window closes itself. Chrome cannot capture a minimized window, so the receipt of an application filled in one has no picture of the confirmation page. Auto-Fill stops 30 minutes after you press it, unless its form is still being filled in, checked or submitted, in which case it carries on for up to two hours after you pressed it. It also stops when you close the form's tab or window or press Stop.

20. Resumás App for iOS and Android

The Resumás app for iOS and Android is a companion to your Resumás account and works only while you are signed in. It talks only to the Resumás service, over an encrypted connection. This section describes what the app handles. For everything else, the rest of this Privacy Policy applies.

20.1 What the App Collects and Why

The app handles the information you give it, to provide the features you use: your name and email address (your account); the résumé you paste or upload, and the job descriptions you paste, fetch or save; the résumés, cover letters, follow-up emails and interview answers made from them; your applications and their status; your job preferences; and the companies and contacts you add. It is stored in your Resumás account, and the résumé itself is stored encrypted. To choose a résumé file, the app uses the device's own file picker, so it never needs access to your files, photos or storage in general. The app does not ask for, and does not collect, your location, contacts, calendar, camera, microphone, photos, advertising ID or other device identifiers.

20.2 Artificial-Intelligence Processing in the App

When you tailor a résumé, check a job, write a letter, prepare interview questions or use the LinkedIn, milXwalk and similar tools, the relevant résumé and job text is sent from the Resumás service to our artificial-intelligence sub-processor, OpenAI, solely to produce the result you asked for. Under OpenAI's API terms it is not used to train their models. Requests that use AI are recorded, encrypted, in a diagnostic log that our team uses to find and fix problems; only your most recent requests are kept.

Before the app sends anything to OpenAI, it asks whether you allow AI features, naming OpenAI, what is sent and why. It asks once for your account on each phone or tablet, right after you sign in. If you choose Not now, or later turn AI features off in Profile, the app sends nothing to OpenAI and asks the Resumás service not to start background checks on your saved jobs; jobs you save with the Chrome extension are still checked, as Section 19 describes.

20.3 What Stays on Your Device

The app keeps your sign-in, and your answer about AI features, in the device's secure storage, and removes the sign-in when you sign out. When you share or copy a résumé, the file or text is created on your device and handed to the app you choose, at your request. The app does not include advertising or analytics, does not track you across other apps or websites, and does not sell or share your information with anyone other than the service providers listed in Section 7. Subscriptions and payments are handled on the Resumás website, not in the app.

20.4 Deleting Your Account and Data (App)

You can delete your account from the app: open Profile, then Legal & account, then Delete my account. The app asks for your password, or for a code we email you if your account has no password, and then permanently removes your account and the data stored in it, including your résumés and saved jobs. You can also delete your account at https://dash.resumas.com/delete-account, or ask us at support@resumas.com. The app is intended for people aged 18 and over.