Legal

Privacy Policy

Last updated: June 15, 2026

tobywins.ai takes your privacy seriously. This policy explains what information we collect, how we use it, and what choices you have. Plain English throughout.

1. What We Collect

We collect information in two ways: what you give us directly, and what is collected automatically when you use the site.

Information you provide directly:

Your email address when you sign up for a resume rewrite
Your resume text and job posting text when submitted through the resume form
Your name, phone number, LinkedIn URL, current job title, and location if included in your resume (extracted automatically to help us personalize your delivery)
Your responses to the three onboarding questions (work description, skills, career intent)
Payment information when you subscribe — processed entirely by Stripe; we never see or store your card number

Information collected automatically:

Pages visited and time spent on the site (via Netlify Analytics and Google Analytics)
General geographic location at the country or city level
Job titles searched in the score lookup tool (stored without any personally identifying information)
Device type and browser (for improving mobile experience)

2. How We Use Your Information

To generate and deliver your rewritten resume and AI risk report by email
To send subscription-related emails (welcome, usage nudges, renewal reminders) via Brevo
To improve the site, fix bugs, and understand which content is most useful
To process payments and manage your subscription through Stripe
To notify us internally when a resume delivery is completed

We do not sell your personal information. We do not use your resume content for advertising. We do not share your data with third parties except the service providers listed in Section 4.

3. Email Communications

By submitting your email address, you agree to receive your resume delivery and any directly related follow-up emails. If you subscribe, you will also receive subscription lifecycle emails (welcome, usage updates, renewal notices).

You can unsubscribe from marketing emails at any time using the unsubscribe link in any email. Transactional emails related to an active subscription (receipts, renewal notices) will continue until your subscription ends.

4. Third-Party Service Providers

We use the following services to operate tobywins.ai. Each has its own privacy policy.

Supabase — stores your resume delivery records and subscription data securely
Brevo — sends your resume and all follow-up emails
Stripe — processes subscription payments; we never see your card details
Netlify — hosts the site and runs our server functions
Anthropic — powers the AI that rewrites your resume and generates your risk report; content is processed per Anthropic's API usage policy and is not used to train their models
Google Analytics and Netlify Analytics — aggregate site traffic data
Cloudflare — manages DNS and email routing

5. Data Retention

Your resume delivery record is stored in our database for as long as your account is active or as needed to provide the Service. If you cancel your subscription and request deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

To request deletion of your data, email hello@tobywins.ai with the subject line "Data Deletion Request."

6. Cookies

tobywins.ai uses minimal cookies. Google Analytics sets standard analytics cookies to help us understand site usage. We do not use advertising cookies or tracking pixels. You can disable cookies in your browser settings at any time.

7. Children's Privacy

tobywins.ai is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

8. Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), secure database access controls through Supabase, and payment processing entirely through Stripe's PCI-compliant infrastructure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you. To exercise any of these rights, email us at hello@tobywins.ai. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. We will notify active subscribers of material changes by email.

11. Contact

Questions about this policy? Email us at hello@tobywins.ai.