Last Updated: September 30, 2026

Privacy Policy

Welcome to FilteredIn ("we," "us," "our," or the "Company"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume analysis platform (the "Service").

FilteredIn provides AI-driven resume optimization and job matching services. Paid analyses are routed to Anthropic Claude first, then Google Gemini only when separately enabled after eligibility review, and Cloudflare Workers AI as bounded fallback processors. By using our Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Resume Data:

• Full name and contact information
• Work history and employment information
• Educational background and qualifications
• Skills, certifications, and achievements
• Professional summary and objectives

Job Description Data:

• Job titles and descriptions you submit for analysis
• Company names and industry information
• Required qualifications and skills from job postings

Account Information:

• Email address
• Payment information (processed securely through third-party payment processors)
• Communication preferences

1.2 Information Collected Automatically

Usage Data:

• IP address and approximate geographic location
• Browser type and version
• Device information and operating system
• Pages visited and time spent on the Service
• Referring URLs and exit pages

2. How We Use Your Information

2.1 Core Service Delivery

• Analyzing resumes against job descriptions
• Generating match scores and compatibility reports
• Providing optimization recommendations
• Creating tailored resume suggestions

2.2 Service Improvement

• Improving AI analysis accuracy and relevance
• Developing new features and functionality
• Debugging and performance optimization
• Understanding usage patterns and trends

3. Data Retention

• Resume and job description data: Raw text is submitted directly to the paid analysis endpoint and is not retained in the 30-day checkout-compatibility record. After a valid result is produced, an AES-GCM-encrypted delivery-recovery copy is stored in Cloudflare D1 so a disconnected request can receive the same result without another AI call. Access to that recovery copy expires 24 hours after it is stored, and the Service will not return it after expiry. The expired ciphertext is then physically deleted by bounded scheduled cleanup. Cleanup normally occurs on the next successful scheduled run, but outages or a deletion backlog may delay physical deletion; monitored receipts and alerts require operators to investigate and clear those failures. A complete result is separately available for 30 days only when you opt in.
• Derived analysis signals: When you opt in to save results and follow-up tips, we send a derived summary of your analysis associated with your email address (overall match score, score bucket, count of skills/keywords, up to five broad skill and keyword-gap categories, rather than verbatim skill or keyword strings, formatting status, sections detected) to Klaviyo. We do not send raw resume text, job descriptions, candidate names, or contact details extracted from your resume to Klaviyo. The email address used for delivery is sent separately. Stripe payment confirmation email processing is separate from this optional analysis event; see section 3.1 below.
• Email and communication preferences: Used for purchase communications and any follow-ups you opt in to receive. The saved-report expiry does not delete these records; contact us to request deletion.
• Payment records: Retained as required by law (typically 7 years for tax purposes)

3.1 Optional results storage and follow-up emails

A payment confirmation email may be sent for a paid purchase regardless of this opt-in. The detailed Analysis Delivered event, saved-results link, and follow-up analysis tips are opt-in only.

Before you unlock a paid report, you can additionally opt in to "Save my results for 30 days & send me follow-up tips." The checkbox is unchecked by default. When you check it, the following additional processing occurs:

1. A complete copy of your scan result (score, keywords, formatting analysis, action plan, bullet rewrites) is stored in Cloudflare D1 behind a cryptographically random capability token. Only a one-way hash of that token is stored. You can revisit your results at filteredin.com/results/<token> at any time during the window.
2. Your results URL is included in your confirmation email so you can return to the report from your inbox.
3. An opt-in event is sent to Klaviyo (including a results_persisted: true property) for personalized follow-ups — for example, a win-back nudge if your score was low or an upsell for a recruiter review.

The 30-day window applies to access to the saved report. It does not automatically delete payment records or Klaviyo profile and event history. To request deletion or stop follow-up emails, contact us or use the unsubscribe link in an email.

When the 30-day window ends, the URL stops working and the stored copy becomes eligible for physical deletion by the same bounded scheduled cleanup process described above. Outages or a deletion backlog may delay that physical deletion. If you leave the checkbox unchecked, none of these three optional things happen: no public results capability is created and no 30-day result or Analysis Delivered follow-up event is stored. The separate encrypted operational recovery copy described above cannot be retrieved after its 24-hour access expiry and remains stored only until scheduled cleanup physically deletes it.

The URL itself is the only access control on a saved results page — anyone with the link can view the report during the 30-day window. Don't share the link with anyone you wouldn't share the underlying scan with.

4. Information Sharing and Disclosure

4.1 We Do NOT Sell Your Data

FilteredIn does not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share data with trusted service providers who assist in operating our Service:

4a. Applicant OS Founder Pilot

4a.1 What checkout collects

Checkout for the Applicant OS Founder Pilot collects only your email address and payment information. Your career evidence, resume content, and job-target information are never collected at checkout and never appear in Stripe or our checkout-tracking storage.

4a.2 Private intake

After purchase we email you to schedule a structured evidence interview. For the Founder Pilot, career evidence is collected only through the path we specify in that email. Automated upload, R2 intake, and scanner features are not enabled for this offer.

4a.3 AI processing and buyer approval

Your intake responses and uploaded evidence are reviewed and assembled into your evidence, bullet, and skill banks, and into job-specific resume drafts, by FilteredIn operators and vetted contractors under human review. This fulfillment-side assembly work is separate from the automated resume-scan analysis described in Section 5: the specific third-party AI tool(s) our operators and contractors use to assist assembly are still being finalized ahead of full launch and will be confirmed here before the Founder Pilot expands beyond its initial cohort. No new factual claim is added to your evidence bank or any draft resume without your explicit approval, regardless of which AI tool assisted in generating it.

4a.4 Retention and deletion

FilteredIn-controlled working copies of your Applicant OS materials — including private R2 storage, restricted Google Drive working folders, dedicated-mailbox correspondence, contractor workspaces used for fulfillment, and any FilteredIn-controlled AI workspace copies — are deleted according to a fixed schedule: no later than 14 days after purchase if intake was never started, 30 days after your last intake activity if intake was left incomplete (with an absolute 60-day cap from first activity), 7 days after a withdrawal, cancellation, refund, or dispute, and 30 days after final delivery of your completed package. Deletion is carried out and independently reviewed by our operations team; it is a verified operational procedure, not an automated background job.

The delivered portable package, and any copies you keep on your own devices or in your own AI-provider workspace, are controlled by you after delivery. Those buyer-controlled copies are outside FilteredIn's deletion control — FilteredIn does not monitor, retain, or have the ability to delete them.

4a.5 Payment and order records

Stripe (payment processing) receives your email and payment information as part of checkout. Our internal order-tracking database stores an opaque order identifier, Stripe checkout identifiers, access/order status, upload file metadata (size, type, integrity digest, scan state), and timestamps — it never stores your email, career evidence, resume content, or intake answers.

5. Third-Party AI Processing

We use Anthropic Claude as our primary analysis provider. If it is unavailable, times out, or returns invalid output, we may send the same resume and job-description content to Google Gemini only when that route has been explicitly enabled after eligibility review, and then to Cloudflare Workers AI. Each eligible configured provider is attempted at most once per request. Provider availability is not guaranteed, and we do not substitute fabricated analysis if all providers fail.

Processing by each provider is governed by that provider's applicable API or commercial terms and privacy commitments. The current provider documents are available from Anthropic, Google, and Cloudflare.

This processing is essential to our core service. We use encrypted connections (HTTPS/TLS) for all data transmission.

6. Your Privacy Rights

All Users:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities

7. Data Security

• HTTPS/TLS encryption for data in transit between your browser, our service, and processing providers
• Encryption at rest for stored data
• Access controls for operational storage and payment-processing services
• Validation of payment authorization, analysis output, and access to saved results

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

FilteredIn Privacy Team
Email: [email protected]
Address: Houston, TX, United States

Response Time: We aim to respond to all privacy-related inquiries within 30 days.