Last updated November 2, 2026
Recruiter in Your Pocket (RIYP, we, or us) is an independent software service operated from Colorado, United States. RIYP is the service operator and controller for personal data collected directly through this website and product. Stripe and the other providers listed below act under their own terms or as processors for the services they provide.
This policy covers resume inputs, account information, usage data, extension capture data, saved job data, analytics metadata, support requests, and billing events processed by the web app.
| Data type | Purpose | Retention | Control |
|---|---|---|---|
| Resume upload text (analysis input) | Generate recruiter-style feedback, scoring, and rewrite guidance. | RIYP does not store raw input for anonymous runs. OpenAI may retain API abuse-monitoring logs containing customer content for up to 30 days by default. | Sign in to save your history, or delete your account in Settings. |
| Report output + resume preview | So you can open past reports, compare versions, inspect evidence excerpts, and export. | A completed anonymous report output and its evidence excerpts are held for browser recovery for no more than 24 hours; the raw anonymous resume and job description are not stored by RIYP. If you sign in and save, history includes report output, evidence excerpts, a short resume preview, any job description you add, and the answers you type into a card's blanks, until you delete the report or account. | Anonymous recovery expires automatically. Delete saved reports in Reports, or delete your account in Settings. |
| Answers you add to a card | Build a revised line from your own answers, so you can copy it into your resume. | Sent to OpenAI with the resume line you're improving, to smooth the wording. Signed out, RIYP doesn't keep them; signed in, they're saved with the report until you delete it or your account. OpenAI may retain API abuse-monitoring logs containing customer content for up to 30 days by default. | Every question is optional. Only answers you type are sent. |
| Feedback on a report | Check whether the report picked the right thing to fix first, and improve future reports. | We store your yes or no, any note you write, and the report wording it was about, which can name an employer or project from your resume. We don't store the resume itself. Feedback is kept for 12 months to check report quality, then deleted. Feedback from a signed-in account is also deleted when you delete the account. | Feedback is optional. Delete your account in Settings to remove feedback you sent while signed in. |
| Saved resume profile (default resume) | Job matching and extension workflows. | Stored until you replace it, remove it, or delete your account. Includes raw resume text for matching plus derived skills, seniority signals, embeddings, hash, and preview. | Replace or remove it in Settings > Matching, or delete your account. |
| Captured jobs and job descriptions | Save roles from the extension, run role-fit checks, and compare your resume against specific postings. | Stored when you save a job or sync extension captures. Includes job title, company, URL, description text, match signals, and latest report links until you delete the saved job or your account. | Delete saved jobs from Jobs, delete linked reports from Reports, or delete your account in Settings. |
| Account identity (email, name) | Authentication and account access. | Retained while account is active. | Update your profile in Settings, or delete your account. |
| Support communications and attachments | Respond to product, account, billing, privacy, and security requests sent to the public support address. | Kept only as long as reasonably needed to resolve the request, preserve security or billing evidence, meet legal obligations, and maintain support continuity. Provider logs follow their configured retention windows. | You choose what to send. You can ask us to delete a support conversation unless we need to retain it for security, fraud prevention, billing, or legal compliance. |
| Usage, reliability, and abuse-prevention metadata | Free-report eligibility, rate limiting, reliability diagnostics, billing state, and product health. | Signed browser cookies used for anonymous identity and free-report status may remain for up to 365 days, and their browser expiration renews when we set them again. Server-side anonymous eligibility records, including separately salted network hashes, expire within 40 days. Raw network addresses are not stored in the eligibility ledger. Rate-limit and idempotency records are short-lived; other operational records are retained for product and security needs. | Anonymous eligibility records are not attached to an account. Deleting your account removes app-level history. |
| Background job events and results | Generate account exports and, when used, PDF files without keeping the request open. | Retained under Inngest's configured event and run-history windows. Completed account exports stored in Supabase expire after seven days. | Background export work starts only when you request it. You can delete your account and its app-level export records in Settings. |
| Product analytics and conversion telemetry | Measure product quality, onboarding friction, billing funnel health, and which kind of site or link a visit came from, when analytics is enabled. | Retained under the analytics vendors' configured retention windows. | Optional analytics starts only after you allow it in Privacy choices. You can withdraw permission there at any time. Do Not Track and Global Privacy Control keep analytics off. |
| Billing events and invoices | Charge processing, receipts, purchase restoration, refunds, and dispute handling. | Stripe retains authoritative billing records under its policies. RIYP keeps limited receipt and entitlement metadata for reconciliation, security, and reversal handling. | View receipts and restore purchases from Billing settings. Account deletion removes user-linked app billing records; opaque reversal identifiers may remain to prevent access from being re-granted. |
OpenAI generates reports and smooths the revised lines you build from your answers, Supabase handles auth and database storage, Stripe handles billing, Vercel provides hosting and basic page statistics, Sentry handles error and performance monitoring, and Mixpanel handles optional product analytics after you allow it. Vercel's page statistics use no cookies: they record the page, the referring site, approximate location, and device and browser type, identify a visit only by a hash that is discarded after 24 hours, and never include report ids or other private parts of a page address. Upstash provides shared rate limiting and short-lived idempotency storage. Inngest coordinates background account-export jobs when you request one. Resend delivers authentication email and receives public support mail; support messages and attachments are forwarded to and handled in Google (Gmail). Stripe manages card data on its systems. We never have access to it.
Use Privacy choices in the footer to allow or decline optional analytics. Declining also stops Vercel's page statistics in this browser, as does a Do Not Track or Global Privacy Control signal. Declining does not affect your report or account. We remember your choice in this browser. Withdrawing permission stops future analytics and clears its local identifiers and queued events; it does not delete events already received by Mixpanel. Essential storage still supports sign-in, free-report eligibility, and your privacy choice. You can delete individual reports from Reports. In Settings, you can export your account data or permanently delete your account. Account deletion removes user-owned product data from RIYP's application database and cancels any legacy RIYP subscription we can verify. Stripe may retain payment records, and RIYP keeps narrowly scoped deletion and billing-reversal records when needed to prevent restored access, investigate fraud, meet accounting obligations, or comply with law. We don't sell personal data, and anonymous history is not silently attached to an account.
To request access, correction, deletion, portability, restriction, or an appeal where those rights apply, email support@recruiterinyourpocket.com with the subject “Privacy request.” We may verify that you control the account email before releasing or changing personal data. We aim to acknowledge requests within 10 days and complete verified requests within 45 days unless the applicable law permits more time. We will explain any extension or denial and will not discriminate against you for making a privacy request.
Questions, privacy complaints, and authorized-agent requests can be sent to support@recruiterinyourpocket.com. If a privacy concern is not resolved, you may contact the regulator or attorney general available in your jurisdiction. Security disclosures follow section 9 below.
| Data type | Purpose | Retention | Your control |
|---|---|---|---|
| Resume upload text (analysis input) | Generate recruiter-style feedback, scoring, and rewrite guidance. | RIYP does not store raw input for anonymous runs. OpenAI may retain API abuse-monitoring logs containing customer content for up to 30 days by default. | Sign in to save your history, or delete your account in Settings. |
| Report output + resume preview | So you can open past reports, compare versions, inspect evidence excerpts, and export. | A completed anonymous report output and its evidence excerpts are held for browser recovery for no more than 24 hours; the raw anonymous resume and job description are not stored by RIYP. If you sign in and save, history includes report output, evidence excerpts, a short resume preview, any job description you add, and the answers you type into a card's blanks, until you delete the report or account. | Anonymous recovery expires automatically. Delete saved reports in Reports, or delete your account in Settings. |
| Answers you add to a card | Build a revised line from your own answers, so you can copy it into your resume. | Sent to OpenAI with the resume line you're improving, to smooth the wording. Signed out, RIYP doesn't keep them; signed in, they're saved with the report until you delete it or your account. OpenAI may retain API abuse-monitoring logs containing customer content for up to 30 days by default. | Every question is optional. Only answers you type are sent. |
| Feedback on a report | Check whether the report picked the right thing to fix first, and improve future reports. | We store your yes or no, any note you write, and the report wording it was about, which can name an employer or project from your resume. We don't store the resume itself. Feedback is kept for 12 months to check report quality, then deleted. Feedback from a signed-in account is also deleted when you delete the account. | Feedback is optional. Delete your account in Settings to remove feedback you sent while signed in. |
| Saved resume profile (default resume) | Job matching and extension workflows. | Stored until you replace it, remove it, or delete your account. Includes raw resume text for matching plus derived skills, seniority signals, embeddings, hash, and preview. | Replace or remove it in Settings > Matching, or delete your account. |
| Captured jobs and job descriptions | Save roles from the extension, run role-fit checks, and compare your resume against specific postings. | Stored when you save a job or sync extension captures. Includes job title, company, URL, description text, match signals, and latest report links until you delete the saved job or your account. | Delete saved jobs from Jobs, delete linked reports from Reports, or delete your account in Settings. |
| Account identity (email, name) | Authentication and account access. | Retained while account is active. | Update your profile in Settings, or delete your account. |
| Support communications and attachments | Respond to product, account, billing, privacy, and security requests sent to the public support address. | Kept only as long as reasonably needed to resolve the request, preserve security or billing evidence, meet legal obligations, and maintain support continuity. Provider logs follow their configured retention windows. | You choose what to send. You can ask us to delete a support conversation unless we need to retain it for security, fraud prevention, billing, or legal compliance. |
| Usage, reliability, and abuse-prevention metadata | Free-report eligibility, rate limiting, reliability diagnostics, billing state, and product health. | Signed browser cookies used for anonymous identity and free-report status may remain for up to 365 days, and their browser expiration renews when we set them again. Server-side anonymous eligibility records, including separately salted network hashes, expire within 40 days. Raw network addresses are not stored in the eligibility ledger. Rate-limit and idempotency records are short-lived; other operational records are retained for product and security needs. | Anonymous eligibility records are not attached to an account. Deleting your account removes app-level history. |
| Background job events and results | Generate account exports and, when used, PDF files without keeping the request open. | Retained under Inngest's configured event and run-history windows. Completed account exports stored in Supabase expire after seven days. | Background export work starts only when you request it. You can delete your account and its app-level export records in Settings. |
| Product analytics and conversion telemetry | Measure product quality, onboarding friction, billing funnel health, and which kind of site or link a visit came from, when analytics is enabled. | Retained under the analytics vendors' configured retention windows. | Optional analytics starts only after you allow it in Privacy choices. You can withdraw permission there at any time. Do Not Track and Global Privacy Control keep analytics off. |
| Billing events and invoices | Charge processing, receipts, purchase restoration, refunds, and dispute handling. | Stripe retains authoritative billing records under its policies. RIYP keeps limited receipt and entitlement metadata for reconciliation, security, and reversal handling. | View receipts and restore purchases from Billing settings. Account deletion removes user-linked app billing records; opaque reversal identifiers may remain to prevent access from being re-granted. |
If you find a security issue, email support@