We built SignedIt with privacy at the center — not as an afterthought. Your resume is used to help you, not stored, sold, or shared. Here's exactly how we handle your data.
SignedIt ("we," "us," or "our") is an AI-powered interview preparation platform operated at signedit.app. Our service helps job seekers across all industries prepare for interviews by generating personalized prep guides based on their resume and the job description they provide.
We take privacy seriously because our product literally handles the most personal professional document you own — your resume. This policy explains exactly what we do and don't do with that information.
Here is a complete and honest breakdown of every piece of data that flows through SignedIt:
| Data Type | Collected? | Stored? | Notes |
|---|---|---|---|
| Your resume text | Used | Never stored | Sent to AI for generation, then discarded immediately |
| Job description text | Used | Never stored | Used for generation only, not retained |
| Extracted skills | Used | Anonymous only | Skill names saved by role type — no personal link |
| Role type | Used | Anonymous only | e.g. "vfx-coordinator" — used to build skills pool |
| Company name | Used | Anonymous log | Logged without any personal identifier |
| Payment information | Used | Not by us | Handled entirely by Stripe — we never see card details |
| Stripe session ID | Yes | Yes | Stored to verify access — no personal data attached |
| Your name | Never | Never | We don't ask for or store your name |
| Your email address | Never | Never | No account creation required |
| IP address | Minimal | Not retained | Used for rate limiting only, not logged long-term |
| Usage analytics | Anonymous | Aggregate only | No individual tracking — only counts and totals |
This is the most important section of this policy. Your resume is your most personal professional document and we treat it that way.
🔒 Your resume is never written to our database. It arrives at our server, is sent to the AI to generate your prep guide, and then it is gone. Permanently. There is no copy anywhere in our system.
The only thing we save from your resume submission is an anonymous list of technical skills and your normalized role type — for example, "vfx-coordinator" alongside skills like "shotgrid, nuke, maya." This is saved without any connection to you personally. We explain exactly how this works in Section 4.
⚠️ One important note: Your resume content is processed by Anthropic's Claude AI. Anthropic has their own privacy policy governing how they handle API inputs. We recommend reviewing Anthropic's privacy policy if you have questions about AI processing.
SignedIt is designed to get smarter over time. Every time someone submits a resume, we extract the skills listed and add them to our shared skills dictionary. This allows future users in the same role type to receive better, more accurate skills gap analysis.
✓ The skills dictionary is fully anonymous by design. There is no way to trace any entry back to the individual who submitted it. A "vfx-coordinator" entry in our database contains only a list of tool names — nothing that identifies who submitted them.
SignedIt maintains a curated library of company hiring frameworks — documents like Amazon's 16 Leadership Principles — that are used to tailor prep guides when a user selects a known company.
Company frameworks are shared anonymously — we do not record who uploaded a specific framework document.
All payments on SignedIt are processed by Stripe, one of the world's most trusted payment processors. We do not handle, store, or ever see your credit card or payment information.
None of these stored values contain your card number, billing address, or any financial information. Stripe handles all of that under their own security standards. You can review Stripe's privacy policy for details on how they handle payment data.
We use the limited data we collect for exactly these purposes and nothing else:
We do not use your data for advertising, profiling, or any purpose not listed above.
SignedIt is built on a small, carefully chosen set of third-party services. Here is every service that touches your data and what they receive:
Your resume text and job description are sent to Anthropic's Claude API to generate your prep guide. Anthropic processes this data under their API terms. Your resume is not retained by SignedIt after the API call completes.
Our database is hosted on Supabase, a PostgreSQL cloud database. Anonymous skills data, session tokens, and company frameworks are stored here. No resume text or personal identifiers are stored in our database.
Stripe handles all payment processing. We store only the session identifiers Stripe provides — never card or billing details.
Our backend API server runs on Railway. Resume and job description text passes through Railway's servers during API processing but is not logged or stored there.
Our website is hosted on Vercel. Vercel may collect standard web server logs (IP address, browser type, page accessed) as part of normal hosting operations.
✓ We do not use advertising networks, tracking pixels, social media cookies, or any marketing analytics platforms. SignedIt is ad-free and does not share your data with advertisers.
We retain different types of data for different periods based on what is necessary to operate the service:
| Data Type | Retention Period |
|---|---|
| Resume text | Zero — discarded immediately after generation completes |
| Job description text | Zero — discarded immediately after generation completes |
| Anonymous skills data | Indefinite — grows the shared pool for all users |
| Session tokens (one-time) | Until the session is used or 1 year, whichever comes first |
| Session tokens (monthly) | Until subscription is cancelled + 30 days |
| Generation logs | 90 days — used for abuse prevention and service monitoring |
| Company frameworks | Indefinite — part of our curated library |
Depending on where you are located, you may have certain rights regarding your personal data. Because we collect very little personal data by design, most of these rights are already satisfied automatically — but we honor all of them.
You can request a summary of any data we hold that could be linked to you. Since we don't collect names or emails, the most we could surface is session data linked to your Stripe customer ID.
You can request that we delete your session data and any associated records. Contact us and we will process your request within 30 days. Note that anonymous skills data cannot be deleted because it contains no identifier linking it to you.
If you prefer that your extracted skills not be added to the anonymous skills pool, contact us before or immediately after your session and we will remove the contribution.
California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of sale. We do not sell personal information. To exercise any CCPA rights, contact us using the information in Section 13.
If you are located in the European Economic Area, you have rights under the GDPR including access, rectification, erasure, portability, and the right to object to processing. Our legal basis for processing is legitimate interest (operating the service you paid for). Contact us to exercise any GDPR rights.
We implement security measures appropriate to the sensitivity of the data we handle:
No system is perfectly secure. If you discover a vulnerability in SignedIt, please contact us responsibly at the email in Section 13 before disclosing publicly.
We may update this Privacy Policy as SignedIt grows and evolves. When we make material changes we will update the "Last updated" date at the top of this page.
Because we do not collect email addresses, we cannot notify you of changes directly. We encourage you to review this policy periodically if you use SignedIt regularly. Continued use of the service after changes are posted constitutes acceptance of the updated policy.
We will never make changes that retroactively allow us to sell your data or use it in ways materially different from what was described when you used the service.
If you have any questions, concerns, or requests related to this Privacy Policy or your data, please reach out. We are a small team and we respond personally.
Privacy questions, data deletion requests, vulnerability reports, or general feedback — we read everything and respond to every message.
support@signedit.appWe aim to respond to all privacy-related requests within 5 business days.