Privacy.

Last updated: June 7, 2026

Second Round helps you tailor your resume to a job and roast it before you send it. This policy explains what we collect, how we use it, and the control you have. Plain language, no dark patterns. Second Round is operated by an individual based in Illinois, USA.

What we collect

• Account basics from Google sign-in: your name, email, and profile image. We don’t use passwords.
• Content you give us: resume files or text you upload, your profile details, job descriptions you paste, and the tailored resumes and critiques we generate for you.
• Billing metadata from Stripe: your subscription status and renewal dates. We never see or store your card number; Stripe handles payment details directly.
• Minimal technical data: privacy-friendly, cookieless analytics for aggregate page views, and error logs to fix bugs. Error logs never include your resume content.
• How you use the app: to learn which features help and where people get stuck, we record in-app events tied to your account, such as signing up, analyzing a job description, tailoring a resume, or exporting. We also capture session recordings of how you move through the app, with every typed value, form field, and piece of resume and job-description content automatically masked. The recording shows the shape of your session, never your personal content. This runs through PostHog and uses a cookie to recognize your session across visits.
• Advertising measurement: if you reach us from one of our ads, we use the Meta (Facebook) Pixel, which sets cookies, to measure whether ads lead to sign-ups and to show relevant ads. When you’re signed in, we also share a hashed, irreversible form of your email address and account identifier with Meta so these measurements match accurately. Meta cannot reverse the hash to recover your email. This is the only place we use advertising cookies, and it is never applied to your resume content.

How we use it

Only to run the product: sign you in, store your profile, analyze a job description, tailor and critique your resume, build your export, send you essential account and support email, and manage billing. That’s it.

Who we share it with

We rely on a small set of service providers, and share only what each needs to do its job: Google (sign-in), Fly.io (application hosting), Supabase (database hosting), Stripe (payments), OpenRouter (the AI provider that runs the language-model steps), Resend (transactional email, such as account and support messages), PostHog (product-usage analytics and masked session recording, hosted in the United States), Meta (advertising measurement via the Meta Pixel, including a hashed form of your email and account identifier for signed-in users), and Vercel (cookieless page-view analytics).

What we don’t do

We do not train AI models on your data. We do not sell your data, ever. Your resume and profile content is sent to our AI provider for the sole purpose of generating your output; it is not used to train models.

Keeping and deleting your data

Your data lives in your account until you remove it. You can delete your entire account from Settings at any time, which removes your profile, applications, tailored resumes, critiques, and logs in the same request. Want to know what we hold about you? Email us.

Cookies

We use essential cookies to keep you signed in. Our product-usage analytics (PostHog) sets a cookie to recognize your session across visits, and our aggregate page-view analytics (Vercel) stays cookieless. If you reach us from one of our ads, the Meta (Facebook) Pixel also sets cookies to measure ad performance, as described under “Advertising measurement” above.

Changes & contact

If this policy changes in a meaningful way, we’ll update the date at the top. Questions: support@secondround.app.