Privacy Policy

Last updated: [DATE, set at publish]

The short version: your resume and the answers you give are yours. We store them privately, use them only to build your documents, never sell or rent them, and delete them whenever you ask. Your card details never touch our systems, and the AI that writes your documents does not train on your data.

What we collect

Your account. The email address you sign up with, and the information needed to keep you signed in.
Your career materials. The resume you upload and the answers you give during the interview, which become the source for your documents.
Purchase records. Which product you bought, the amount, and whether the payment succeeded. Not your card number (see Payments below).
Basic technical data. The routine logs a web app needs to run reliably and stay secure.

Where your data lives and how it is protected

Your data is stored with Supabase, our database and file-storage provider. Two things keep it private:

Private buckets, isolated per account. The resume you upload sits in a private storage bucket, in a folder tied to your account, so one account can never reach another account's files.
A locked-down bucket for finished documents. Your generated resume, bio, LinkedIn copy, and cover letter live in a separate, stricter bucket that no browser can read directly. Only our server can open it, and only after confirming the files belong to you.
Download links that expire. When you download a document, we hand your browser a private link that stops working after five minutes, so a shared or stale link cannot be reused.

The service providers who help us run Coveted

We use a small set of trusted providers to run the product. Each one only handles the data it needs to do its job.

VercelHosts the website and runs the application.

SupabaseStores your account, your resume, and your finished documents, and manages sign-in.

StripeProcesses payments. Your card details go to Stripe directly and never reach us.

AnthropicProvides the AI (Claude) that writes your documents from the information you give.

ResendDelivers sign-in and account emails on our behalf.

How the AI uses your data

Your documents are written using Anthropic's commercial API. Anthropic does not use data submitted through its commercial API to train its models. You can read the specifics in Anthropic's Commercial Terms of Service. Your resume and interview answers are sent to Anthropic for one purpose only: to produce your documents.

Payments

Payments run through Stripe. When you check out, your card details go straight to Stripe and are never stored on or seen by our systems. We keep only a record that a purchase happened: the product, the amount, and the status.

Cookies

Coveted sets only the cookies needed to keep you signed in, managed by our authentication provider, Supabase. We do not use advertising cookies or third-party tracking cookies.

How long we keep your data, and how to delete it

We keep your data while your account is active so you can return to your documents. You can ask us to delete your data at any time. Email hello@covetedresume.com and we will remove it.

Your choices

You can access, correct, or delete your data, and you can ask us any question about how it is handled. Reach us at hello@covetedresume.com.

[FOR LAWYER] Confirm which data-protection rights framework we should name here (for example GDPR or CCPA) based on where Coveted operates and who its customers are, and add the required rights language.

Who Coveted is for

Coveted is a professional tool for working executives and is not directed to anyone under 18.

Changes to this policy

If we update this policy, we will change the date at the top of the page. Meaningful changes will be communicated clearly.

Governing law and contact

[FOR LAWYER] Add the governing-law and jurisdiction statement for this policy.

Questions about your privacy? Email hello@covetedresume.com.