Privacy

POC Resume is a pilot for Berkeley Haas classmates, run by one student (the operator) on one server. In plain words, this is what it keeps and why.

What is stored

• Your Google account email and Google account id, and when you first and last signed in, to sign you in. Only @berkeley.edu accounts can sign in.
• Your profile and documents: the profile text and the resumes that you or your AI save.
• Usage metadata: which tools ran, from which app and when, how long they took, how many characters went in and came out, page counts, whether the page fit, PDF downloads, and error messages with any quoted text removed. It is filed under a pseudonym rather than your email, and it never contains the text of your resume. The operator can link it to your account, for example to look into a problem you report.
• Sign-in records: which apps you approved, and the sign-in tokens they were given, stored only as hashes. Sign-in tokens expire on their own.

Your IP address is used, in memory, to limit how fast requests can come in. The server keeps no access log.

Where it is, and who can read it

Everything is on one server run by the operator, a student. The operator can technically read what is on it, but does not read your documents except to fix a problem you report.

The PDF download links that export gives you open without signing in for 24 hours and always show the document’s current version, so anyone you pass a link to, or who sees it in a shared chat, can read that document until the link expires. Deleting the document makes its links stop working.

Your AI provider

The text your AI sends to this server, and what the server sends back, also passes through your AI provider under its own terms: for claude.ai, that is Anthropic. This server has no AI of its own and sends your text nowhere else.

Deleting your data

Ask your AI to delete a document at any time (the delete_document tool). To delete your account, meaning your sign-in record, profile, documents and usage records, ask the operator. The operator's backups of the server may still hold a copy for up to 14 days after that.

No selling, no sharing

Your data is not sold, not shared with anyone, and not used for anything but running this service.

A pilot

This is a pilot. It may be shut down at any time, and when it ends, the data on the server is deleted.