Privacy Policy

BDRecruit is a résumé builder tool. We collect minimal data and store your résumé content locally in your browser — it never leaves your device unless you explicitly share it. This policy explains what we collect, why, and how we protect it.

Account data: When you sign up, we collect your email address. If you use Google Sign-In, we also receive your name and profile picture from Google.

Résumé data: Your résumé content is stored in your browser’s localStorage. It is not transmitted to or stored on our servers. If you use the “Share link” feature, your résumé data is encoded in the URL you generate — only you control who you share that link with.

Usage data: We do not currently run analytics or tracking scripts. We may collect basic server logs (IP address, request path, timestamp) for security and abuse prevention.

• Email — to authenticate your account and send the one-time sign-in code
• Name & picture (Google only) — to display in your dashboard
• Server logs — to diagnose errors and prevent abuse; not used for profiling

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Google OAuth: If you sign in with Google, authentication is handled by Google. See Google’s Privacy Policy.

Groq AI:If you use AI features (AI Coach, bullet rewriter, cover letter generator), text from your résumé is sent to Groq’s API to generate suggestions. Your Groq API key is stored only in your browser’s localStorage — we never see it. Review Groq’s Privacy Policy.

Resend: We use Resend to deliver OTP sign-in emails. Your email address is passed to Resend solely to send the authentication email.

We use a single HTTP-only session cookie to keep you logged in after authentication. This cookie contains a signed JWT with your email, name, and plan — no tracking or advertising identifiers.

Your résumé data, design preferences, and panel layout are stored in your browser’slocalStorage under keys prefixed with bdr_. Clearing your browser data will delete your résumé.

Session cookies expire after 7 days. Your résumé data persists in localStorage until you clear it or use the in-app “Reset” function. We do not retain a server-side copy of your résumé.

You may delete your local data at any time by clearing your browser storage or using the browser’s developer tools. To request deletion of your account email from our authentication records, contact us at hello@bdrecruit.net.

All data in transit is encrypted via HTTPS. Session tokens are signed with a secret key and stored in HTTP-only cookies (not accessible to JavaScript). We do not store passwords.

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13.

We may update this policy from time to time. The effective date at the top of this page will reflect the latest revision. Continued use of the Service constitutes acceptance.

Privacy questions or data requests: hello@bdrecruit.net