Skip to main content

Privacy Policy

Last updated: April 6, 2026

This is a placeholder draft. This policy will be reviewed by legal counsel before scaling.

What We Collect

We collect only what is necessary to generate your documents:

  • Your resume -- processed entirely in memory. Never written to disk. Never stored beyond the generation process.
  • Job posting information -- the URL or text you provide, used only for generation.
  • Your email address -- used to send download links and, for subscribers, magic login links.

What We Store

  • Generated PDFs -- stored for 24 hours, then permanently deleted.
  • Subscriber email + generation count -- stored to track monthly usage. No other personal data is stored.

What We Don't Do

  • We don't sell your data. Ever.
  • We don't share your data with third parties for marketing.
  • We don't use tracking cookies.
  • We don't store your resume beyond the generation process.
  • We don't retain generated content beyond 24 hours.

Third-Party Services

We use the following services to provide LeapLetter:

  • Lemon Squeezy -- payment processing (they handle all payment PII as merchant of record)
  • Resend -- email delivery
  • Vercel -- hosting and temporary file storage
  • OpenAI & Anthropic -- AI generation (your data is sent to these services for processing but is not retained by them per their API terms)
  • Firecrawl & Tavily -- job posting and company research (public data only)

Your Rights

Since we don't store personal data beyond 24 hours (other than subscriber emails), there is minimal data to request or delete. If you want your subscriber email removed, contact us and we will delete it immediately.

Contact

Privacy questions? Contact us at hello@leapletter.co.