Security and Data Handling
Last updated September 23, 2026
Your resume is personal data, and you deserve plain answers about what happens to it — not just a legal document. This page is the plain-language version; the privacy policy is the formal one.
What we never do
- Sell or rent your personal data — to anyone, for anything.
- Share your contact details with recruiters, job boards, or lead brokers.
- Train AI models on your resumes.
- Send your data anywhere it isn't needed to run the product.
- Keep your card details — payments run entirely through Stripe.
Where your data lives
All traffic is encrypted in transit (HTTPS/TLS). Your resumes and account data are stored in our database at Supabase; the services below are the complete list of processors that touch user data:
| Service | What it does |
|---|---|
| Vercel | Hosting and web analytics |
| Supabase | Database where resumes and account data are stored |
| Clerk | Sign-in and authentication (your password never touches our servers) |
| Stripe | Payments — we never see or store card numbers |
| OpenAI API | AI text processing for rewrites, scores, and cover letters |
| Resend | Transactional email and support inbox |
| Google Analytics | Aggregate usage statistics |
AI processing, specifically
When you use an AI feature — rewriting a bullet, scoring a resume, generating a cover letter — the relevant text is sent to a commercial AI API to produce your result. That processing runs under the provider's business terms; we do not use your content to train models of our own. AI features run when you trigger them, not silently in the background.
Deleting your data
- Individual resumes: delete them anytime from your dashboard; deletion removes them from the database.
- Your whole account: email support@onetworesume.com from your account email and we delete your account data. Payment records that tax and accounting law require us to keep are retained only as long as legally mandated.
- Subscriptions: cancel from the billing portal linked in your dashboard — no email or call needed. Plans renew until you cancel; canceling stops the next renewal.
Questions we're often asked
Does OneTwo Resume sell my resume data?
No. We do not sell personal data to recruiters, job boards, data brokers, or anyone else, and we don't share your contact details with third parties for their marketing.
Is my resume used to train AI models?
We don't train AI models on your resumes. AI processing happens through commercial APIs under their business terms; your content is sent to generate your results, not to build our own models.
How do I delete my data?
Delete individual resumes anytime from your dashboard. For full account deletion, email support@onetworesume.com from your account email and we remove your account data; payment records required for tax and accounting law are retained only as long as legally required.