What we collect, and why.

• Your email address, when you sign in. We use it to authenticate you and to email you sign-in codes and links.
• Your resume PDF, when you upload it. We store it so we can re-parse it on demand and so you can see what you uploaded.
• Your answers to onboarding questions (vibe, density, color, priority section). We keep these so re-tailoring your design works the way you expect.
• Anything you edit on your site. The text, links, and section toggles you save in the editor live on our servers and are served publicly at your handle.

• Structured fields from your resume — experience, projects, education, skills, etc. — extracted by our AI parser so we can render them in your site.
• A design plan (theme, palette, section order, accent color) generated by AI based on your answers and your resume.

If your SKRYPT is published, we log a tiny anonymous analytics event each time someone views it, so you can see traffic on the Founder tier. We deliberately keep this very small:

• Country(a 2-letter ISO code from the CDN’s edge header). No IP address.
• Referrer origin only — the scheme + host of the page they came from (e.g. https://linkedin.com). Never the full URL, never the path, never the query.
• No user-agent. No fingerprinting. No cookies set on your visitors’ browsers from us.

We use a small number of vendors. Each gets only what they need:

• Supabase — our database, authentication, and storage for your PDF.
• Google Gemini — receives your resume contents (as PDF and as extracted text) to parse it, and receives selected text from your site when you ask for AI rewrite suggestions on the Founder tier.
• Resend — sends our transactional emails (sign-in codes, billing receipts).
• Lemon Squeezy — handles payments and subscriptions. They get your billing email and payment details directly; we never see your card.
• Vercel — hosts the app and runs our edge functions.

• We don’t sell your data.
• We don’t train AI models on your resume or your edits.
• We don’t run any third-party ad networks or social pixels.
• We don’t send marketing emails unless you ask us to.

You can see what we have on you — your resume, your site content, and your subscription status — by logging in. Your published SKRYPT is yours; the content you wrote is yours.

To delete your account and everything associated with it, email hello@skrypt.xyz from the address you signed up with. A self-serve delete button is on the roadmap; until then we’ll handle it manually within a few business days.

If we change anything material, we’ll update the date at the top and, if it affects existing users, email everyone with an account before the change takes effect.

Email hello@skrypt.xyz. A real person reads it.