Privacy Policy

To fulfill an order we collect:

• Your pasted résumé. The plain text you submit on the intake page.
• Your pasted job posting. The plain text of the posting you are applying to.
• Your delivery email. The address you provide so the finished PDFs have somewhere to land.
• A payment record on Stripe's side. We receive the payment confirmation via Stripe Connect (order total: USD 15, no card data ever touches our servers).
• Basic request metadata. Standard server logs — IP address, user-agent, timestamps — required to operate the Service and prevent abuse.

We do not collect your name, phone number, address, or any piece of identity beyond the delivery email unless you put it in the paste yourself.

We use the information above only to:

• Generate your tailored résumé and cover letter.
• Email the two PDFs to the delivery address you provided.
• Verify that payment cleared through our billing module's verifyCheckoutSession call against Stripe.
• Send the one referral follow-up email — your unique referral link offering $5 off the next order — that lives on the private result page after delivery.
• Make the documents available for re-download on the private result page for as long as we hold the order (see Section 4).
• Operate, secure, and debug the Service.

We do not use your information for marketing, advertising, lead-scoring, analytics resale, or anything of that kind. There is no mailing list you are implicitly signed up for.

The pasted résumé text and the pasted job posting text are sent through the Polsia AI proxy to generate the two documents. That is the only system that reads your paste for the purpose of generation.

Your paste and your generated documents are processed for the order you placed and then discarded; they are not used to train any model. They do not become training data, do not become evaluation data, and do not become a sample in anyone's dataset.

We call this out because this is exactly the kind of language that AI-letter services hide elsewhere on their sites. If we ever change this policy, we will update this page before the change takes effect.

Pasted text. The two text fields you submitted are kept on our side for the 24-hour regeneration window after delivery. That window is what lets you ask for one free regeneration from the result page if anything reads off. We then delete the original paste along with the order record; it is not retained long-term. If the order fails partway, the incomplete paste is purged within 30 days of the failure.

Generated documents. The tailored résumé and cover letter are generated to PDF and emailed to you. They are also made available for re-download through your private result page as long as the order record exists.

Order record. We keep the order record (which includes the delivery email, the Stripe payment reference, the regenerated-document history if you used the free regen, and the location of the generated PDFs) only as long as needed to fulfill re-downloads and meet our tax-record retention obligations. After that window the record is deleted.

Server logs. Standard request logs are rotated on a rolling basis and are not retained long-term.

The information described above is shared with exactly these third parties, and no others:

• Stripe. Our payment processor. Stripe receives the payment confirmation and handles the charge; we receive the payment confirmation back.
• Polsia AI proxy. The sub-processor we route the paste to for document generation. The proxy does not retain the text after generation returns.
• Polsia email proxy. The sub-processor we route your delivery email through so the PDFs reach your inbox.
• Law enforcement or regulators. Only if compelled by a valid legal process, and only the narrowly required information.

We do not sell your information. We do not share your information with advertisers, data brokers, social platforms, or analytics services.

Hearthwright itself does not set any analytics or advertising cookies on our pages. The strictly necessary session cookies that keep the checkout flow working are short-lived and tied to the order session.

When you are redirected to Stripe's hosted checkout page, Stripe sets its own cookies under its own cookie notice. Those cookies belong to Stripe, not to Hearthwright, and are governed by Stripe's privacy and cookie policies.

You can ask us at any time to:

• Confirm what we hold against your order.
• Provide a copy of that information (or have it provided to you in a portable format).
• Delete the order record and everything tied to it.
• Correct anything that is factually wrong.

We honor those requests within a reasonable window and at no charge. To make one, send a signed request from the delivery email you used at checkout to the contact address below; we will reply with what we have and what we will do next.

All traffic between your browser and Hearthwright runs over HTTPS / TLS. Payment data is handled entirely by Stripe; card numbers never reach our servers. The pasted text is transmitted to the AI proxy over TLS and is not stored on our side after delivery is complete.

No system is perfectly secure; if we ever have a security incident that affects your information, we will tell you at the delivery email on file.

The Service is intended for adults engaged in a job search. It is not directed at children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has submitted information through the Service, contact us at the address below and we will delete it.

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the current version. The “Last updated” line records the most recent change.

If we make a material change — particularly any change to how your paste is used or who it is shared with — we will note it prominently on this page before the change takes effect.

Privacy questions, access requests, and deletion requests can be sent to hearthwright-0m0svl@polsia.app. We read everything that comes in and reply within a few business days.

Draft for human review. These pages are user-facing legal text; please have a qualified attorney read them before they ship to production if Hearthwright has counsel.