Resume Bridge Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how People Capital Management LLC, an LLC based in Wyoming, USA (“we,” “us,” “our”), collects, uses, and protects information when you use the Resume Bridge app, browser extension, and services (the “Service”). This policy is maintained by Resume Bridge and describes our actual practices; it is not an independent audit or certification.

1. Information We Collect

• Account information. Your email address and authentication details (for example, whether you signed in with a password or a social provider such as Apple).
• Resume and profile information. The content you enter or upload into the resume builder, including your name, contact details, work history, education, certifications, skills, and — only if you choose to provide them — items such as veterans’ preference status, security clearance level, or federal employment history.
• Uploaded files. Resume files (PDF, DOCX) you upload so we can store and process your information.
• Billing information. If you subscribe to a paid plan, payment is processed through Apple’s in-app purchase system. We receive limited metadata (such as subscription status and plan type) but we do not store full payment card numbers on our systems.
• Support messages. Any messages, tickets, or feedback you send us.
• Usage information. Basic events such as sign-up, resume generations, and feature interactions, used to operate and improve the Service.

2. How We Use Your Information

• Provide the Service — generate, parse, score, and store your resumes.
• Process payments and manage subscriptions.
• Send transactional emails (receipts, security notices, support replies).
• Send lifecycle and product emails you can unsubscribe from at any time.
• Respond to support requests.
• Detect and prevent fraud, abuse, and security incidents.
• Improve the quality and performance of the Service.

3. AI Processing of Resume Content

To generate, parse, score, and extract keywords from your resume, we send the relevant portions of your content to third-party AI model providers. Under the API terms of those providers, content submitted via the API is not used to train their public models. Please avoid entering information you do not want processed by an AI model.

4. Service Providers and Sub-processing Entities

We rely on a small number of vendors to run the Service:

• Firebase — database and authentication.
• Apple In-App Purchase — payment processing for paid subscriptions.
• AI model providers — resume content generation, parsing, and scoring.
• Email delivery provider — transactional and lifecycle emails.

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes.

5. Cookies and Tracking

We use app storage strictly to keep you signed in and to remember your preferences. We do not run third-party advertising trackers or cross-app behavioral ad networks.

6. Data Retention and Deletion

We retain your account and resume data while your account is active. Deleting your account starts a 30-day request period rather than deleting anything immediately — your account and data remain exactly as they are, and fully usable, during that window, and you can cancel the request at any time before it completes. At the end of the 30 days (or sooner, if our team processes it earlier), we permanently delete all information associated with your user record, including saved resumes, uploaded files, profile data, and support messages tied to your account. Limited billing records may be retained by Apple or by us where required to comply with tax, accounting, or fraud-prevention obligations.

You can start a deletion request from Settings > Delete Account in the app, or by emailing support@peoplecapitalmgt.com to have our team start one for you. You can download a copy of your data at any time, including during the 30-day request period, from Settings > Export My Data.

7. Security

Traffic to the Service is encrypted in transit using TLS. Our database uses row-level security policies so that user records are only readable by the account they belong to (or by administrators for support and abuse response). Administrative access is limited to the owner of Resume Bridge. No online service can guarantee perfect security, and you use the Service at your own risk.

8. Your Rights

Regardless of where you live, you may:

• Access and review the resume and profile information stored in your account.
• Correct inaccurate information directly in the app.
• Delete your account and the data associated with it.
• Unsubscribe from marketing and lifecycle emails at any time using the unsubscribe link included in those emails. Transactional emails (receipts, security notices, support replies) cannot be unsubscribed from while your account is active.

California residents and residents of other U.S. states with comprehensive privacy laws have additional rights, including the right to know what personal information we collect, to request deletion, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under applicable U.S. state privacy laws. To exercise any right, email support@peoplecapitalmgt.com.

9. Browser Extension

The Resume Bridge browser extension is a separate, optional way to send a job posting you're viewing into the Service, on top of everything described above:

• Page content. When you click “Send This Posting,” the extension reads the visible job-posting text on the current tab and sends it to the same Service backend used by the app, where it's processed exactly like a pasted or uploaded job description. It never reads or sends anything from a page unless you take that action.
• Sign-in. The extension signs into the same account as the app, via a browser-based sign-in page. It does not create a separate account or collect a separate password store — Firebase Authentication handles sign-in the same way it does for the app.
• Local storage. Your signed-in session is kept in the extension's own local browser storage so you don't have to sign in again every time. It is never readable by the websites you visit.

Everything else in this policy — how we use, store, and let you delete your information — applies the same way to data sent through the extension as it does to the app.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. International Users

The Service is operated from the United States and is intended for users located in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by email or an in-app notice. The “Last updated” date at the top of this policy always reflects the current version.

13. Contact

Questions or requests about your privacy? Email support@peoplecapitalmgt.com.