Privacy

• Account info: email address (via Supabase Auth) and a hashed password. We never see your password.
• Your resume content: the file you upload (PDF / image / URL text) and the extracted plain text. Stored privately in our Supabase Storage bucket, keyed to your account.
• AI analysis results: the per-model scores and reasoning generated when we analyze your resume. Stored against your account so you can revisit reports.
• Builder inputs: if you use the Activities Builder, the structured form data you submit is stored alongside the generated resume.
• Payment info: handled entirely by Stripe — we receive a Stripe customer ID and the fact that a checkout completed; we never see your card number.
• Product analytics: via PostHog, anonymized per-event data about page views and feature use. No resume content is sent.
• Error monitoring: via Sentry, automatic error reports (stack traces) when something breaks. Resume content is not transmitted.

Your resume content is sent to OpenAI, Anthropic, Google, and Together (our four LLM providers) to generate analysis results, and stored in our database so you can return to your reports. We do not sell, share, or use your resume content for any other purpose. We do not train models on your data.

tyr depends on the following third parties: Supabase (database + auth + storage), Vercel (hosting), Upstash Redis (caching), Stripe (payments), Resend (transactional email), PostHog (product analytics), Sentry (error monitoring), OpenAI, Anthropic, Google AI, and Together AI (LLM inference). Each operates under its own privacy policy.

Go to /account and click Delete my account. We immediately delete your account, your resume files, your reports, and your builder drafts. PostHog / Sentry event data is anonymized but may persist in their retention windows (typically 30–90 days).

Questions about this policy: nour.abdelaziz@yale.edu.