Legal
Privacy Policy
What we collect, why, who processes it, and how to delete it.
Last updated: October 20, 2026
At a glance
- What we collect
- Your account email, the resume you upload, the profile we derive from it, and your search preferences.
- Why
- To rank live job openings against your resume and generate tailored documents when you ask.
- What we never do
- No selling your data, no advertising trackers, no sending your resume to employers or job boards.
- Who else processes it
- Microsoft Azure for hosting, storage, AI models, email delivery, and service monitoring.
- Deleting it
- Delete your account from settings at any time. Your account data goes with it; backups and service logs age out separately.
This summary is for orientation only. The full policy below is what governs.
Who we are and what this covers
BespokeJobs LLC ("we," "us," or "our") operates an AI job-search tool that ranks live job openings against your resume and can generate tailored resumes and a cover letter for a match you choose. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to visitors and account holders in the United States, which is the only market we currently serve.
If you do not agree with this policy, please do not use the service. If you have questions, contact us at privacy@bespokejobs.ai.
Information we collect
We collect only what we need to run the service.
Information you provide
- Account details. Your email address and a securely hashed password, or, if you sign in with Google, Microsoft, or LinkedIn, the basic profile identifier those providers return. We never receive or store your social-login password.
- Resume and profile. The resume file you upload, the structured profile we derive from it (such as work history, education, skills, and titles), and any edits you make.
- Anonymous resume checker. If you use the checker without an account, we process the resume and optional job description only to return the result. We do not add that content to an account, database, or blob storage, and we do not send it to Azure OpenAI. The web server may buffer the request temporarily while processing it and releases that buffer when the request ends.
- Preferences. The search terms you configure, your email digest cadence, and application-tracking status and notes you add, including the job title, company, and link of an application you add from another site. When you ask us to fill in a pasted link, our server loads that page once to read the job title and company and does not keep the page.
Information collected automatically
- Essential session data. A first-party authentication cookie that keeps you signed in. Your browser may also store a local identifier that remembers which account is active between visits; it stays on your device and is not required for the service to work.
- Basic server logs and service monitoring. Standard request metadata such as IP address, timestamp, request path, and error information. We send this operational telemetry to Microsoft Azure Monitor (Application Insights) so we can keep the service running and diagnose failures. It is retained on Azure's monitoring retention cycle, separately from your account data, and it is not used to profile you or to build an advertising audience.
- Usage statistics. Your browser reports to the same Azure Monitor service which pages you open and how long they take to load, your browser and device type, approximate location derived from your connection, and when a resume check, sign-up, email verification, resume upload, first shortlist, resume generation, or cover letter completes, along with any campaign tags in the link that brought you here. Those campaign tags stay in your browser tab's session storage until you sign in or close the tab. The reports use no cookies and no other browser storage, carry no account identifier or resume content, and cannot connect one visit to the next. We use them in aggregate to see which pages and campaigns work.
We do not use third-party advertising networks, behavioral-analytics trackers, or marketing pixels.
Sensitive information in your resume
A resume can contain information that some laws treat as sensitive. You decide what to upload. We process the contents of your resume only to provide the service to you: to parse it, match it against openings, and generate tailored documents. We do not use it to infer characteristics for advertising, and we do not sell it.
How we use your information
- Parse your resume into a structured profile.
- Rank live job listings and compute match scores.
- Generate tailored resumes and a cover letter for a match when you ask.
- Send transactional email (verification, password reset) and match digests. New accounts get a weekly digest by default, and you can switch it to daily. A digest lists jobs we matched you to, including title, company, location, salary where we have it, and why we think it fits. Your email provider processes that content like any other email. You can turn digests off at any time from your account settings, or from the unsubscribe link in the email where one is included.
- Send reminder emails: a nudge to upload your resume if you signed up without one, and up to two reminders listing your top matches if you have a resume on file, get no digest, and have not been back for 14 days. We record the day you last used the site to know when. Reminders are a separate setting from match digests, and you can turn them off from your account settings or the unsubscribe link in any reminder.
- Secure the service, prevent abuse, and debug problems.
- Comply with legal obligations.
Automated processing and AI
Profile parsing, match explanations, and document generation can use AI models. The anonymous resume checker does not. Automated output can be incomplete or wrong, so treat match results and generated documents as decision support, not guarantees. We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Always review any generated document before you submit it to an employer.
Who processes your information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We rely on a small set of service providers that process data only on our instructions to run the product:
- Microsoft Azure. Hosting, database, and file storage for your account and resume data.
- Azure OpenAI. Parsing your resume, scoring matches, and generating tailored documents. This includes embedding models, which turn your resume and profile into numeric vectors so we can compare them against job postings. Azure OpenAI does not use the data we send it to train or improve its foundation models. Microsoft may retain prompts and responses for a limited period for abuse monitoring, which can include review by authorized Microsoft personnel.
- Azure Monitor (Application Insights). Operational telemetry about requests and errors, used to keep the service healthy.
- Azure Communication Services. Delivery of the emails we send you.
- Google, Microsoft, and LinkedIn. Only if you choose to sign in with one of them, and only to authenticate you.
We crawl publicly posted job listings to build the catalog. We do not send your resume or personal information to those job boards. When you apply, you do so on the employer or job board site, under their terms.
We may also disclose information if required by law, to respond to lawful requests, to enforce our terms, or to protect the rights, safety, and property of our users or the public.
Where your data is stored
Your data is stored and processed on Microsoft Azure infrastructure in the United States.
How long we keep it, and how to delete it
Anonymous resume-checker content is released after the request and is not retained as account data. If you create an account and upload a resume to your profile, we keep that account data until you remove it. We do not delete accounts automatically after a period of inactivity, so your profile and matches are still there if you come back after a long break.
When you ask us to email you a password reset or email verification link, we store a security record of that link, including the IP address that requested it. We delete that record 30 days after the link expires, whether or not you used it.
You can delete your account and your personal data at any time from your account settings. When you do, we permanently delete from our database your profile, resume text, generated documents, matches, match explanations, feedback, in-product activity records, and application records, and we delete the associated resume and document files from blob storage on a best-effort basis. We keep no separate archive of your data. In our database, all that remains is a record of your account's internal ID and the dates it was created and closed. That ID also appears in the operational telemetry described above until that telemetry ages out, so the record can still be linked to it, but it does not include your name, email address, resume, or profile.
You do not have to close your account to remove your resume. Deleting it from your profile page removes the uploaded file, the resume text and career history we parsed from it, your match scores, and any documents we generated, with stored files removed on the same best-effort basis described above. The rest of your profile, including your saved search preferences and skills, stays until you change it or close the account.
Two things sit outside that deletion. Routine database backups age out on their normal short-term cycle. Operational telemetry and server logs, described above, are kept separately from your account and age out on their own retention cycle rather than being deleted on request.
How we protect your information
We encrypt data in transit, restrict access using managed identities and least-privilege controls, and store data with a reputable cloud provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your privacy rights (California and other US states)
Depending on your state of residence, you may have some or all of the following rights regarding your personal information:
- Know and access the personal information we hold about you.
- Correct inaccurate personal information.
- Delete your personal information.
- Obtain a portable copy of the information you provided.
- Opt out of the sale or sharing of personal information. We do not sell or share it.
- Limit the use of sensitive personal information. We already limit use to providing the service.
- Be free from discrimination for exercising these rights.
You can delete your account from your account settings, and download a copy of your data from the "Your data" section there. For any other request, email us at privacy@bespokejobs.ai. We will verify your request against your account and respond within the time your state law allows, generally 45 days. You may use an authorized agent where the law permits.
Children
The service is intended for adults who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
Changes to this policy
We may update this policy as the product changes. When we do, we will revise the "Last updated" date above, and we will provide a more prominent notice for material changes. Continued use of the service after an update means you accept the revised policy.
Contact us
Questions or requests about this policy or your data: email privacy@bespokejobs.ai. See also our Terms of Use.