Privacy Policy

Who we are and what Tailored does

Tailored is a hiring and onboarding platform. Organizations ("employers") use it to post roles, review applicants, and run onboarding. Applicants use it to build an applicant passport, apply to roles, and complete onboarding paperwork digitally.

When you apply to an organization, that organization is the controller of your application and onboarding data — it decides why and how your information is used in its hiring process. Tailored processes that data on the organization's behalf, and is the controller for your account itself and for platform operations.

What we collect

• Account information — name, email, password (stored as a strong one-way hash), and sign-in activity. Accounts are persistent until you delete them.
• Applicant profile and passport — work history, skills, credentials and their verification status, training records, quiz results, and references.
• Onboarding vault — information required by the employer's onboarding paperwork. Depending on the role this can include sensitive identifiers and employment-eligibility data such as Social Security number, date of birth, driver's license, I-9 work-authorization details, tax-withholding (W-4) elections, background-check and drug-screening authorizations, health screenings required for the role (e.g. TB test), and emergency contacts.
• Usage and telemetry — pages used, feature interactions, and technical logs used to operate and secure the service.

How your information is used

• To let you apply to organizations and to let those organizations evaluate, hire, and onboard you.
• To prefill onboarding forms from your vault so you answer once, not per form.
• To operate, secure, and improve the platform (authentication, rate limiting, abuse prevention, diagnostics).
• To send transactional email (verification, password reset, invitations). We do not sell your data, and we do not use it for third-party advertising.

AI processing. Some features (e.g. extracting details from a pasted resume, drafting a profile summary) send relevant text to large-language-model providers. Inputs are sanitized before sending, and the platform can be configured to use a provider that does not train on submitted data. AI output never replaces the employer's human hiring decisions.

How your information is protected

• Sensitive onboarding data (the vault and form answers) is encrypted at the application layer (AES-256-GCM) in addition to database and disk protections; all traffic uses TLS.
• Access is tenant-scoped and role-based: only the organization you applied to can see your application, and platform operators cannot view applicant PII.
• Signed onboarding documents are immutable — they cannot be edited or re-signed after signature.

Who we share it with

• The organizations you apply to — your application, passport, and onboarding records, so they can hire and onboard you. If you share your passport link, anyone with the link can view what you chose to share.
• Service providers — hosting and database (Railway), transactional email (SendGrid/Twilio), payments (Stripe), and AI providers as described above — each only to the extent needed to run the service.
• Legal — if required by law or to protect the service and its users.

Cookies and analytics

We use essential cookies for sign-in and security. We currently use web analytics (Plausible, and Google Analytics) to understand aggregate usage; analytics are not used to build advertising profiles.

Retention and your rights

We retain your account and applicant data while your account is active, and as needed for the employer's legal obligations (e.g. employment-eligibility records) and ours (e.g. financial records). You can, at any time from your Account page:

• Export a complete copy of your applicant data (JSON), and
• Erase your applicant data and delete your account, permanently.

You can also request access, correction, export, or erasure by emailing privacy@tailored-resume.com. Where GDPR/CCPA or similar laws apply, these are your statutory rights and we honor them for all users. Note that an employer may be required to retain certain records it already lawfully holds (e.g. completed I-9s for hired employees) under its own legal obligations.

Children, changes, contact

The service is for people of legal working age and is not directed at children. We will update this policy as the service evolves and change the date above; material changes will be highlighted in the product. Questions: privacy@tailored-resume.com · support@tailored-resume.com.