Privacy Policy

Depending on how you use our service, we collect the following types of information:

• Google Authentication: When you sign in with Google OAuth, we receive your email address, full name, and avatar URL provided by Google.
• Submitted Content: Resumes (PDF or plain text), LinkedIn profile content, job descriptions, and website URLs you submit for auditing or rewriting.
• Billing & Transactions: Payment information is processed directly by Stripe under PCI-DSS Level 1 compliance. We do not store or process raw credit card numbers on our servers.
• Performance Telemetry: Anonymized performance telemetry and usage metrics provided by Vercel Web Analytics to optimize load times and edge uptime.
• Behavioral Heatmaps & Session Replays (Microsoft Clarity): Anonymized interaction data such as mouse movements, scroll depth, and clicks to diagnose UX friction. All sensitive input fields (including uploaded resumes and email text) are strictly masked and never recorded.
• Advertising & Attribution (Meta Pixel): Standard referral interactions and conversion milestones (such as free roast submissions and purchases) when you visit from an Instagram or Facebook advertisement.

Your content is used exclusively to deliver the Brutal Roaster services you request:

• Conducting AI-driven roast audits, ATS scoring, and bullet-point evaluations.
• Powering the Executive Career Suite (STAR interviews, tailored cover letters, recruiter profile optimization).
• Persisting your generated documents in your private, authenticated cloud drawer (Firebase Firestore) so you can access them across devices.
• Never selling or renting your resume data or contact information to third-party data brokers.

We partner with industry-standard, secure infrastructure providers:

• OpenAI: Text and visual analysis is processed via OpenAI Commercial APIs. Under OpenAI's commercial terms, data transmitted via the API is not used to train or improve public models.
• Google Cloud / Firebase: Secure authentication, authorization, and encrypted cloud database storage.
• Stripe: PCI-DSS certified payment processing for one-time Pro Burns and Executive Career Suite upgrades.
• Vercel: Global edge compute hosting and DDoS security delivery.
• Meta Platforms, Inc. (Meta Pixel): We utilize the Meta Pixel to measure the effectiveness of our advertising campaigns and understand actions users take on our site. Meta may use cookies, web beacons, and other storage technologies to collect or receive information from our website and use that information to provide measurement services and target ads. You can opt out of interest-based advertising by visiting AboutAds.info, Your Online Choices (EU), or configuring your Facebook Ad Preferences.
• Microsoft Corporation (Microsoft Clarity): We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replays to improve site usability. Website usage data is captured using first and third-party cookies and other tracking technologies. All sensitive input fields are automatically masked to safeguard your privacy. For more information, visit the Microsoft Privacy Statement.
• Google Analytics (Optional): We may utilize Google Analytics 4 to analyze aggregated traffic patterns and referral sources. Google Analytics uses first-party cookies with IP anonymization enabled. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We use cookies and similar tracking technologies (such as local storage and web beacons) to provide essential website functions, remember your preferences, and analyze site performance:

• Essential Cookies: Required to maintain authentication sessions, store guest draft roasts in your local browser, and preserve applied discount/promo codes (br_promo).
• Analytics & Usability Cookies: Used by Vercel Analytics and Microsoft Clarity to understand page performance, scroll depth, and navigation flow without identifying you personally.
• Advertising Cookies: Set by Meta to track ad campaign conversions and attribute referrals.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some features of our website (such as cross-page resume drafting and promo codes) may not function properly.

You maintain full ownership of your data and resume contents. You have the right to:

• Request an export of your saved documents.
• Permanently delete your account and all associated cloud-stored roasts and executive career packages.
• Revoke Google OAuth permissions at any time via your Google Account security settings.

For any questions regarding this Privacy Policy or to request immediate deletion of your data, contact our support team at: