Privacy Policy

Effective October 10, 2026 · Last updated November 7, 2026

The short version

This policy explains how SlickRez, a California general partnership ("SlickRez", "we", "us"), handles personal information when you use the SlickRez website and app at slickrez.com (the "Service"). By using the Service you agree to this policy and our Terms of Service.

1. Information we collect

Information you give us

Information from Google sign-in

If you choose "Sign in with Google," Google shares your name, email address and profile picture with us, through our sign-in provider. We do not ask for or receive access to your Gmail, Google Drive, contacts, calendar or any other Google data. See section 4 for how we use it.

Information collected automatically

Payment information

If you subscribe to a paid plan, payment is handled by Stripe. Stripe collects your card and billing details directly; we never see or store your full card number. We receive a record of your subscription and payments (plan, amount, date and status).

2. How we use your information

We do not sell your personal information, share it for advertising, use it to build advertising profiles, or give it to anyone for their own marketing. We do not use your resumes or career information to train AI models.

3. Who we share it with

We share information only with service providers that help us run SlickRez, under agreements that limit how they can use it, and only as much as each one needs:

ProviderWhat they do for us
ClerkSign-in and account management (name, email, profile photo).
Google CloudRuns the SlickRez app servers and background tasks, keeps error and security logs, and stores our nightly backups of the database and of the resumes we build for you.
SupabaseDatabase hosting for your account and career data, and storage for the resumes we build for you.
NetlifyHosts the slickrez.com website.
AI providers (currently OpenAI; some features may use Anthropic's Claude)Read the parts of your information needed to write, tailor and check your resumes and cover letters, score how well job postings match your experience, run interview practice, and answer you in chat. We use their business (API) services; by their terms they don't use this data to train their models, and they may keep it for up to 30 days to watch for abuse. With each request we send a coded version of your account number that doesn't reveal who you are, so they can flag misuse. If you connect your own AI key, your requests go to that provider under your own account and its terms.
FirecrawlReads the web page of a job posting when you give us a link, looks for a LinkedIn job on the company's own site by its company and job title, and runs the web searches the Advisor makes for you, such as looking up a company or jobs that match what you asked for. It gets only the link or the search words, not your resume or Career File.
StripeProcesses payments and manages subscriptions. We send it your SlickRez account number so a payment matches your account.
DiscordDelivers the notes you send with Send feedback to the SlickRez team's private Discord channels, so the people building SlickRez can read them. Each post has your note, the page you sent it from and your SlickRez account number. We don't add your name or email; anything you write in the note is posted as you wrote it.

When you give us a link to a job posting, we may also read the posting straight from the website or job board that hosts it (for example Greenhouse, Lever or Ashby). They receive only the request for that page, not your information.

Job Radar checks a shared list of company job boards for new postings once a day. When you save a job link from a company's board on Greenhouse, Lever, Ashby, SmartRecruiters or Workable, that company's board joins the list for everyone. Only the company's board goes on the list; nothing about you or who added it.

We may change or add service providers as SlickRez grows, and we'll update this list when we do. We may also disclose information if the law requires it, to protect the rights, safety or property of our users, SlickRez or others, or as part of a merger, sale or transfer of SlickRez, in which case this policy will continue to apply to your information.

4. Google user data

When you sign in with Google we receive only your name, email address and profile picture. We use your name and email address to create your account, sign you in, show your name in the app, and let the people who run SlickRez recognize your account when they help you or manage plans and limits. We don't currently use your profile picture; it stays with our sign-in provider. We do not sell this information, use it for advertising, or share it with anyone except the sign-in provider (Clerk) that runs sign-in for us. SlickRez's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove SlickRez's access at any time from your Google Account settings.

5. Cookies, browser storage and Do Not Track

We use cookies and your browser's storage only for things the Service needs:

We don't use advertising, analytics or third-party tracking cookies.

Do Not Track. SlickRez doesn't track you across other websites, and doesn't let other companies collect information about what you do on SlickRez to follow you across sites. So we treat every visit the same way, whether or not your browser sends a Do Not Track or Global Privacy Control signal.

6. How long we keep it

We keep your information while your account is open.

When you use Delete my account in Settings, we delete your account, Career File, job records, chats, settings and stored files, and your sign-in, straight away. If you ask us by email instead, we do the same within 30 days.

Feedback notes you've sent are deleted with your account too. The copies already posted to our team's Discord channels stay there unless you ask us to remove them; email us and we'll do it within 30 days.

Copies in backups expire on their own: our nightly backups of the database and of stored resumes are kept for 30 days, and every backup copy is gone within about 40 days. Our hosting providers keep error and security logs for a limited time, usually about 30 days.

We keep a few records that contain no resume or career content: billing and usage records (such as payments and how much AI processing an account used), a note that the account was deleted, and security records of when builds, exports and uploads ran. We keep them as long as we need them for accounting, tax, security and legal purposes. Stripe keeps its own payment records as the law requires.

To stop the free monthly resumes from being reset by deleting an account and creating it again, or by signing up again with a variant of the same email address, we keep a scrambled, one-way fingerprint of each Free account's sign-in email (not the address itself). When a Free account is deleted, we keep that fingerprint and how many free resumes and cover letters it used, until the end of that month.

7. Your choices and rights

California residents. You have the right to know what personal information we collect, how we use it and who we share it with, to get a copy of it, to have it corrected or deleted, and not to be treated differently for using these rights. We offer the same to everyone who uses SlickRez, wherever you live. We do not sell or "share" personal information as those terms are defined in California law, we don't disclose it to others for their direct marketing, and we do not use sensitive personal information to infer characteristics about you. To make a request, use Settings or email us; we'll verify it's you by confirming from the email address on your account. You may use an authorized agent to make a request on your behalf.

Outside the United States. SlickRez is run from the United States and your information is stored and processed there. Depending on where you live, you may have additional rights, such as to object to or restrict certain uses of your information. Email us and we'll respond within the time your local law requires.

8. How we protect it and who can see it

Information travels between your browser and SlickRez over encrypted connections. Each account's data is kept separate, AI keys you give us are encrypted at rest, and access to production systems and backups is limited to the people who run SlickRez.

Our admin area shows each account's name, email address, when it signed up and last signed in, its plan, usage and costs, and whether its builds worked, so we can give support, apply plan limits and stop abuse. It doesn't show your resumes, Career File, documents or chats. It can also download a full backup of the database, to recover from a problem; every download is recorded, and downloaded copies are deleted once they're no longer needed. We look at the content of an account only when you ask us to help with it, or when we need to in order to keep the Service secure or meet a legal obligation.

No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you as the law requires.

9. Children

SlickRez is not meant for anyone under 16, and we do not knowingly collect information from children under 16. If you believe a child has given us information, email us and we'll delete it.

10. Changes to this policy

We may update this policy as SlickRez changes. We'll post the new version here with a new "Last updated" date, and if a change is significant we'll tell you by email or in the app before it takes effect.

11. Contact us

Questions, requests or concerns about privacy: support@slickrez.com.

By mail: SlickRez, 533 West Gainsborough Road #101, Thousand Oaks, CA 91360.