ResumeAI at resume.w-skill.com keeps résumés for 7 days by default. A scheduled job then physically deletes the rows.
Account records hold email, a password hash, and an optional name. Product records hold the résumé text you upload, the parsed structure, and analysis fields such as ATS, technical assessment, market positioning and salary benchmark.
If you run a JD match we also store the job description, the match report and rewrite suggestions. Usage logs record token counts and similar meters — never the résumé original.
Content travels over HTTPS to Cloudflare Workers. At rest it is encrypted with AES-256-GCM; the master key exists only as a Worker secret.
Plaintext lives briefly in Worker memory to call the model. We do not write résumé text into usage logs.
Every résumé and JD match has an expiry. A scheduled job physically deletes expired rows; you can also delete immediately from the desk.
Deletion cannot be undone — this is a short retention window, not a long-term archive. Export a copy when you are done.
Credit packs and time passes can be paid two ways: Alipay payments go through a third-party payment service that hands off to Alipay; cards and other methods go through Stripe Checkout. Your Alipay account, card number and other payment details go straight to those providers — they never reach our servers and we never store them.
We send a payment provider only the order id, product name and amount (Stripe orders also carry an internal user id for reconciliation) — never your résumé or email. We keep the order itself: an order id, the payment channel, which pack you bought, the amount, currency, status and the provider's transaction reference (such as a Stripe session id), plus your credit balance, pass expiry and any redeem codes you used.
These are accounting records, so they are not covered by the 7-day résumé window — we need them for reconciliation, refunds and support. Email us if you want your account and its order history deleted.