Privacy Policy

Data Processing & AI Retention

We prioritize data minimization and candidate privacy:

• Ephemeral LLM Processing: Resume data processed through our AI tailoring pipeline utilizes Google Gemini Context Caching with an automatic 1-hour Time-to-Live (TTL) expiration window. Data is not used to train foundation models.
• Guest Data Isolation: A guest tailoring runs in memory: the resume you paste is sent to the model for that request and the result is returned to your browser, and we do not keep the text. What we do keep for a guest is described under “Information We Collect”.
• Account Data Security: Registered candidate records, subscription statuses, and application records are stored in isolated databases with encrypted transport and strict access controls.

Information We Collect

• Visitors: the address and browser details your device sends with every request (kept in server logs for 30 days), and the cookies described below.
• Guests who try the tool: once you pass the security check to tailor a resume or set up a search, we keep a trial record (a random identifier, when it was created and when you passed the check, and your remaining free credit). If you upload a resume, we also keep the resume and the profile we read from it: your name, phone number, email address, LinkedIn link, location, and target job titles and preferences. We remove inactive guest trial records from time to time; we keep the resume and profile of a guest who gave us contact details until they ask us to remove them.
• Account holders: your sign-in email and name, your profile and resume, the jobs you track and your notes, the documents you generate, your credits and subscription status, and billing records held by our payment processor.
• Sources: you, your browser, and the sign-in provider you choose (Google, Microsoft, Dropbox or Apple). We do not buy personal information.

How We Use Your Information, and Email

• To run the service: match and score jobs against your profile, tailor your documents, keep your credits and billing correct, and prevent abuse.
• To contact you about Axiom Tailor. If you give us your contact details as a guest or an account holder, we may email you about the service and related offers. Every such marketing email names us as the sender, states how to reach us, and has an unsubscribe link that we honor within 10 business days. Service emails (sign-in links, credit and billing notices) are sent regardless. You can also ask us to stop marketing email at support@axiomtailor.com.
• We do not sell your personal information, and we do not use your resume to train models.

Who We Share It With

Service providers that process data for us: Google (Gemini model processing, Firebase and Firestore for credits and accounts, Analytics, and AdSense on our guides), Vercel (hosting and the site's analytics), Supabase (our database), Cloudflare (the Turnstile security check), Resend (email), and Stripe (payments). We share information with others only when the law requires it or to protect the service.

Third-Party Advertising & Cookies (Google AdSense Disclosure)

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to our sites and/or other sites on the Internet.
• Users may opt out of personalized advertising by visiting Google Ads Settings or by opting out of third-party vendor cookies via aboutads.info.
• Ads appear only on our guides, never in the workstation. To learn how Google uses data from sites that use its services, see How Google uses information from sites or apps that use our services.

Analytics & Cookies

• Google Analytics 4: measures how pages are used (pages viewed, approximate location, device and browser). It sets cookies with Google as the processor.
• Vercel Analytics and Speed Insights: count page views and measure page speed (load times and layout shifts). They set no cookies and do not follow you across sites.
• Cloudflare Turnstile: before a guest session can tailor a resume, a script loaded from Cloudflare checks that a person is present. Cloudflare receives your IP address and browser signals for that check. It is used only for abuse prevention and is not shown to signed-in visitors.
• Sign-in session: a secure, HttpOnly session cookie keeps you signed in. It is strictly necessary and is removed when you sign out.

Your Consent Choices

In the European Economic Area, the United Kingdom and Switzerland, advertising and analytics cookies stay off until you agree. Google's consent tool shows the choice on your first visit. Elsewhere those cookies are on by default and you can still opt out. To change or withdraw your choice at any time, use Privacy settings in the footer of any page. You can also block cookies in your browser; the site works without them.

Your Rights and Choices

• Review, correct and delete: you can see and edit your profile and resume in the workstation, and you can ask us to export or permanently delete your records at any time at support@axiomtailor.com. Deleted records remain in encrypted backups for up to 90 days.
• Do Not Track: the site does not change its behavior in response to a Do Not Track signal. Use Privacy settings in the footer to control advertising and analytics cookies.
• Residents of California and other states: you may ask what we hold about you and have it corrected or deleted, and we do not treat you differently for asking. We do not sell personal information.
• Changes to this policy: we post changes here and update the effective date above. For a material change we also email account holders.

Browser Extension (Chrome)

The Axiom Tailor Chrome extension fills job application forms from your saved profile. It never submits an application for you. The side panel shows this summary the first time it opens and does nothing until you agree.

• Stored in your browser (chrome.storage.local): your candidate profile (name, email, phone, address, profile links, current title and company, years of experience, salary expectation, summary, work authorization, sponsorship and notice period, and the optional voluntary self-identification answers for gender, race or ethnicity, veteran status and disability status), which profile is selected, the extension's settings, and a personal access token that signs the extension in to your account. Removing the extension deletes all of it.
• Sent to axiomtailor.com (over HTTPS): when the side panel opens, it requests your saved profile using the access token. When you save changes to your profile in the panel, the profile is sent so the site and the extension stay the same. When you press Auto-fill, it sends the address (URL) of the application page and the profile you selected, and receives your profile and a PDF resume generated from it. We keep a record of each Auto-fill (your account, the page address, your email, the time and the result) so the extension can refuse to fill an application you already submitted, and so your application history stays accurate. As with any website, our servers receive your IP address with each request the extension makes.
• Not collected: your browsing history, the contents of the pages you visit, or what you type. Form fields are read on the page only to fill them, and only the page address is sent, and only when you press Auto-fill. The Quick Copy buttons copy to your clipboard when you click them.
• Site access: the extension runs on its own only on Greenhouse, Lever, Ashby and Workday pages. On any other site it does nothing until you press “Turn on for this page”, which may ask Chrome for access to websites. Whether Chrome shows a prompt depends on your site-access setting and on whether you have already clicked the toolbar icon on that page. You approve any prompt in Chrome's own dialog, and you can withdraw access at any time under chrome://extensions, Details, Site access.
• Retention and deletion: the data in your browser lasts until you remove the extension or clear its data. Your profile and Auto-fill records on axiomtailor.com are kept until you ask us to delete them at support@axiomtailor.com. We store only a hash of the access token, and connecting the extension again replaces the previous token.
• Limited Use: the use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this data only to provide the extension's autofill features. We do not sell it, transfer it except as needed to provide those features, to follow the law, or as part of a merger or sale of the business, use it for advertising, or use it to judge creditworthiness. People at Axiom Tailor do not read it unless you ask us to, it is needed to investigate abuse or a security problem, the law requires it, or it has been aggregated so it cannot identify you.