ResumeAI at resume.w-skill.com keeps résumés for 7 days by default. A scheduled job then physically deletes the rows.
Account records hold email, a password hash, and an optional name. Product records hold the résumé text you upload, the parsed structure, and analysis fields such as ATS, technical assessment, market positioning and salary benchmark.
If you run a JD match we also store the job description, the match report and rewrite suggestions. Usage logs record token counts and similar meters — never the résumé original.
Content travels over HTTPS to Cloudflare Workers. At rest it is encrypted with AES-256-GCM; the master key exists only as a Worker secret.
Plaintext lives briefly in Worker memory to call the model. We do not write résumé text into usage logs.
Every résumé and JD match has an expiry. A scheduled job physically deletes expired rows; you can also delete immediately from the desk.
Deletion cannot be undone — this is a short retention window, not a long-term archive. Export a copy when you are done.
Credit packs and time passes are sold through Stripe. Your card details go straight to Stripe — they never reach our servers and we never store them.
We keep the order itself: an order id, which pack you bought, the amount, currency, status and the Stripe session id, plus your credit balance, pass expiry and any redeem codes you used.
These are accounting records, so they are not covered by the 7-day résumé window — we need them for reconciliation, refunds and support. Email us if you want your account and its order history deleted.