Privacy Policy

Effective date: October 5, 2026

1. Introduction

Gridpass (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our Service at gridpass.ai. By using Gridpass, you agree to the practices described in this policy.

2. Information We Collect

Information you provide directly:

  • Account information: Name and email address when you create an account.
  • Resume content: Text you paste or PDF files you upload for analysis.
  • Job descriptions: Text you paste for comparison against your resume.
  • Payment information: Processed entirely by Stripe. We never see or store your credit card details.

Information collected automatically:

  • Usage data: Pages visited, features used, and scan counts.
  • Device information: Browser type, operating system, and IP address.
  • Analytics: We use Google Analytics 4 to understand how visitors use the site. This collects anonymized data such as pages visited, session duration, and general location. Google's data handling is governed by their privacy policy.
  • Cookies: Session tokens for authentication and Google Analytics cookies for site usage measurement. We do not use advertising cookies.

3. How We Use Your Information

  • To provide, operate, and improve the Service
  • To process payments and manage your subscription
  • To send transactional emails (account creation, password reset, billing)
  • To understand how the product is used and where to improve it
  • To monitor usage and prevent abuse
  • To respond to support requests
  • To comply with legal obligations

We do not use your resume content to train AI models, sell data to third parties, or serve advertising.

4. How We Store and Protect Your Data

We take data security seriously:

  • Free and pay-as-you-go users: Your resume and job description are analyzed in memory and never written to our database. Once results are returned, we don't keep them.
  • Pro users: Every analysis is saved automatically. Your resume, the job description, and the analysis results are encrypted at rest and only decrypted to show them to you. The job title, company name, and scores are stored unencrypted so we can list your saved analyses. We keep up to 10 saved analyses; saving another removes the oldest. You can delete any of them at any time.
  • Saved jobs (Pro): Job listings you save (title, company, location, salary, work type, link, and listing text) are stored unencrypted, along with any match score and skill gaps from AI job matching.
  • Job Tracker (early access): Notes and contacts are encrypted at rest. Company, role, job link, status, and the name of any linked resume are stored unencrypted.
  • All data: Transmitted over HTTPS/TLS. Stored in a SOC 2-compliant PostgreSQL database (Neon).
  • Passwords: Hashed before storage. We never store passwords in plain text.

5. PDF Processing

When you upload a PDF resume, it is processed entirely in your browser using client-side JavaScript. The raw PDF file is never uploaded to our servers — only the extracted text is sent for analysis.

6. Third-Party Services

We use the following third-party services to operate Gridpass:

  • Anthropic (Claude): Powers our AI resume analysis. Resume and job description text is sent to Anthropic's API for processing. Anthropic's data handling is governed by their privacy policy.
  • Google Analytics 4: Used to measure site usage and understand how visitors interact with Gridpass. Collects anonymized usage data. Governed by Google's privacy policy. You can opt out using the Google Analytics opt-out browser add-on.
  • Stripe: Handles all payment processing. We never store credit card information.
  • Neon: Our database provider. Data is stored in a SOC 2-compliant environment.
  • Vercel: Our hosting provider. Handles web traffic and serverless functions.
  • Resend: Used to send transactional emails.

We do not sell, rent, or share your personal information with any other third parties for marketing purposes.

7. Data Retention

  • Account data: Retained for as long as your account is active.
  • Saved resumes (Pro): Retained until you delete them, they are replaced by newer analyses (up to 10 are kept), or your account is deleted.
  • Saved jobs and Job Tracker entries: Retained until you delete them or your account is deleted.
  • Payment records: Retained as required by law and by Stripe.

You can delete your account at any time from your Account page. Deletion takes effect immediately and permanently removes your account, scan credits, saved resumes and analyses, saved jobs, and Job Tracker entries from our database. Any Pro subscription is cancelled at the same time, with no refund for the rest of the current billing period. You can also request deletion by emailing support@gridpass.ai from the address on your account; we complete email requests within 30 days. Payment records kept by Stripe are retained as required by law.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Export your data in a portable format

To exercise any of these rights, contact us at support@gridpass.ai. We will respond within 30 days.

9. Cookies

We use cookies for two purposes: essential session cookies required for authentication and sign-in, and Google Analytics cookies for measuring site usage. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, though this may prevent you from signing in. You can also opt out of Google Analytics measurement using the Google Analytics opt-out browser add-on.

10. Children's Privacy

Gridpass is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will announce material changes with a prominent notice on the Service, such as an entry on our changelog. The effective date at the top of this page will always reflect the most recent version.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Gridpass
support@gridpass.ai