Your information, explained.
A straightforward look at how the current beta handles your details.
What you save
Your account, contact details, career entries, job postings, generated resumes, and feedback are stored in the app’s Supabase project. Saved resumes include a snapshot of the information used to create them, so later archive changes do not rewrite older versions.
When AI is involved
When you generate a resume, your career evidence and the target job posting are sent to OpenAI. Your personal contact fields are added to the PDF separately and are excluded from that request. Avoid putting sensitive details you do not want processed into career notes or job descriptions.
Importing an existing resume
When you upload or paste a resume, its extracted text (including contact details it contains) is sent to OpenAI to organize your career information. The text, extraction, and your review history are stored privately in Supabase. The original PDF or Word file is processed in memory and is not saved. You review new information before it is merged into your career bank.
Who can access it
The app restricts career records, resumes, and feedback to the signed-in account that owns them. Service providers and authorized project administrators operate the underlying services. There is no public resume-sharing page in this beta.
Links, logos, and sign-in
Importing a job link requests that public page. Company icons use public organization-name and website lookups. Google sign-in requests basic account identity; it does not connect your Gmail mailbox.
Account emails
Supabase sends confirmation and password-reset emails through Resend using your account email address. These messages contain the links needed to complete the requested account action. Email open and click tracking are disabled.
Payments and hosting
Stripe hosts checkout and manages subscriptions. Card details are entered directly with Stripe and are not stored by RallyDraft. The app stores your Stripe customer and subscription identifiers, payment-access status, and renewal dates in Supabase. Vercel hosts the web application. Test-mode payments use a separate Stripe sandbox.
Public-page analytics
We use Vercel Web Analytics to understand visits to public information and signup pages, including general device and referral information. Our page-view filter removes unrecognized query parameters and keeps only known campaign labels. Career pages, resume content, payment pages, sign-in callbacks, and password recovery pages are excluded from this marketing measurement. No advertising pixels or session recordings are installed.
Your choices
You can edit and delete career entries in their sections, edit saved resumes, and leave optional profile links blank. Use Beta feedback for questions or requests about your information. Your theme preference is stored on this device; sign-in uses session cookies.
This describes the current beta, updated October 1, 2026. Need a hand?