Privacy Policy

Scoritly (“Scoritly,” “we,” “us,” or “our”) operates the website at scoritly.comand the related resume-optimization, job-search, and application-tracking services (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service, you agree to the practices described here.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a password. Passwords are never stored in plain text — they are hashed using bcrypt before storage. We also store your notification and marketing-email preferences and, when you opt in to marketing emails, the time of that consent. If you subscribe, our payment processor collects your billing details (see Payment Information below).

Resumes and Documents

When you upload a resume file (in DOCX, PDF, or TXT format), or paste resume text into your authenticated dashboard and choose to save it, we store that resume and extract its text so we can score and rewrite it. Resumes typically contain personal information such as your name, contact details, work history, education, and skills. Uploaded files are stored in Amazon Web Services (AWS) S3 with all public access blocked.

Application and Usage Data

We collect the job postings you save or apply to, the contents of your application tracker (such as company names, roles, statuses, and notes), the scores and rewrites we generate for you, and basic usage data such as the features you use and the dates and times you access the Service. If you join through a Scoritly referral link, we record the referring account and resulting signup so we can measure the referral program. The referrer does not receive your email address, resume, job description, or account activity.

Payment Information

Subscription payments are processed by Stripe. We do not store your full credit card number on our servers; Stripe handles card data under its own security and privacy practices. We retain limited billing metadata (such as subscription status and the last four digits of your card, where provided by Stripe) to manage your account.

2. How We Use Your Information

• To provide the core Service — scoring your resume against a job, rewriting and optimizing your resume, and generating cover letters using AI.
• To match and surface relevant job listings and power the built-in job board.
• To maintain your application tracker and account settings.
• To process payments, manage your subscription, and honor our 30-day money-back guarantee.
• To send you service-related and transactional emails (for example, welcome messages, scan-complete notifications, and account or billing notices) via AWS Simple Email Service (SES).
• With your optional consent, to send occasional Scoritly marketing emails. You can withdraw that consent at any time in Settings.
• To secure the Service, prevent abuse, debug issues, and comply with legal obligations.
• To improve the Service and, where you have consented or where permitted by law, to measure and target advertising.

We do not sell your personal information. We do not use the contents of your resume to train our own models, and we do not share your resume with other users.

3. Third-Party Services and Subprocessors

We rely on a small number of trusted service providers to operate the Service. These providers process data on our behalf and are bound by their own terms and privacy commitments:

• Anthropic (Claude API) — We send the text of your resume and the relevant job posting to Anthropic's Claude API to generate scores, rewrites, and cover letters. Anthropic processes this content to return results to us and, per its commercial terms, does not use API inputs or outputs to train its models.
• Amazon Web Services (AWS) — We use AWS S3 to store uploaded resumes and generated documents, AWS SES to send email, and other AWS infrastructure to host the Service.
• Stripe — We use Stripe to process subscription payments and manage billing.

4. Cookies and Analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used.

We may use third-party analytics and advertising technologies, including Google Analytics 4 (GA4) and the Meta (Facebook) Pixel, to measure traffic, understand engagement, and deliver and measure advertising. These tools may set their own cookies and collect information such as your IP address, device and browser type, and the pages you visit. You can control cookies through your browser settings and opt out of certain advertising through the Digital Advertising Alliance and similar industry tools.

Separately, the public keyword preview uses first-party daily aggregate counters for preview sessions, share actions, and signup-button clicks. We do not send or store the pasted resume text or job description or preview result with these counters, and we do not create a persistent visitor ID. Sharing sends only the public Scoritly checker link and generic introductory text to the sharing option you choose. A per-tab session-storage flag prevents duplicate counts. The request IP address is used only in memory to rate-limit abuse and is not saved with the aggregate event.

5. Data Retention and Deletion

We retain your account information, resumes, and application data for as long as your account is active or as needed to provide the Service. We may retain certain information longer where required for legal, accounting, or fraud-prevention purposes.

You can delete your account from Settings or request deletion of your account and associated personal data — including uploaded resumes — at any time by emailing contact@scoritly.com. We will process verified deletion requests within a reasonable time and remove your files from our storage, subject to any legal retention obligations.

6. Your Rights

Depending on where you live, you may have rights over your personal data. Under the EU/UK General Data Protection Regulation (GDPR), these may include the right to access, correct, delete, restrict, or port your data, and to object to certain processing. Under the California Consumer Privacy Act (CCPA/CPRA), California residents may have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of any “sale” or “sharing” of personal information.

We do not sell personal information. To exercise any of these rights, contact us at contact@scoritly.com. We will not discriminate against you for exercising your privacy rights.

7. Data Security

We use industry-standard safeguards to protect your data, including password hashing with bcrypt, access controls, and storage of files in private AWS S3 buckets with public access blocked and server-side encryption at rest. Data is transmitted over encrypted connections (HTTPS/TLS). No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at contact@scoritly.com and we will delete it.

9. International Users

Scoritly is operated in the United States, and your information may be processed and stored in the United States and other countries where we or our service providers operate. By using the Service, you understand that your information may be transferred to and processed in jurisdictions that may have different data-protection laws than your own.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at contact@scoritly.com.