Privacy Policy

tillumakeit scores an application document — a resume, CV, or activities list — and rewrites parts of it. To do that we process the text you give us and the email address you provide. Your document is never used to train any AI model, it is not stored long-term, and we do not sell your data or run advertising trackers. The sections below spell out the details.

“tillumakeit” (“we”, “us”) operates this website and the resume-scoring tools on it. This policy covers information handled through the site. If you have questions, contact us at hello@tillumakeit.com.

Information you give us directly:

• Application content. The resume, CV, or activities list you upload (PDF or DOCX) or paste as text, plus any target role, major, or program you type in. This can include your name, contact details, work and education history, and anything else you chose to put in the document.
• Email address. If you join the waitlist or ask us to email your results, we collect the email address you enter.

Information collected automatically when you use the site:

• IP address. Used to enforce rate limits and prevent abuse. It is not linked to your document or results.
• Standard technical logs. Our hosting provider records basic request data (timestamps, error traces, approximate region) for operating and securing the service.

• To generate your analysis — sending your document text to our AI provider to produce a score, diagnosis, and rewritten suggestions.
• To email you your results, if you request that, and to send you product updates if you joined the waitlist.
• To rate-limit requests, detect abuse, and keep the service running and secure.

We do not use your information for advertising, we do not sell or rent it, and we do not use your application content to train models — ours or anyone else’s.

This is the part that matters most, so it’s explicit. When you submit a document, the file is read in memory to extract its text; the file itself is not written to long-term storage. To make repeat requests fast, a copy of the extracted text and its results is cached briefly and automatically expires within one hour. Your document text is sent to our AI provider (Anthropic) to generate the analysis and is not used to train any model.

If you ask us to email your results, a record of that result — your email address, the score and sub-scores, and the short verdict and summary text — is retained so we have a history of what was sent. That record does not include your full document.

We rely on a small set of service providers (“subprocessors”) to run the product. Each receives only what it needs:

• Anthropic (the Claude AI API) — receives your document text and target role to generate the analysis. Under Anthropic’s commercial API terms, inputs and outputs are not used to train their models. See anthropic.com/legal.
• Upstash (hosted Redis) — stores your waitlist email and its metadata, the results records described above, rate-limit counters, and the short-lived cache.
• Resend (email delivery) — if email is enabled, receives your email address to send you messages and may store it in a contacts audience.
• Vercel (hosting & analytics) — serves the site, keeps standard operational logs, and provides the cookieless usage analytics described below.

Some of these providers may process data on servers outside your country. We share data with them only to operate the service, and only as described here.

We do not use third-party advertising or cross-site tracking cookies. We use a small amount of browser storage for the app to function:

• Local storage remembers your theme preference and whether you’ve joined the waitlist (so you don’t have to re-enter your email to see your full results).
• A secure, HTTP-only cookie is used only for our internal admin area, which regular visitors never touch.

For usage analytics we use Vercel’s privacy-friendly, cookieless web analytics to understand aggregate traffic and conversion — for example, how many visitors score a document and how many join the waitlist. It does not set cookies, does not track you across other sites, and the events we record carry no personal information (no email, no document content).

• Document text: processed in memory; the brief cached copy auto-expires within one hour.
• Waitlist email and metadata: kept until you ask us to remove it or the waitlist is retired.
• Results records: kept as a recent history and pruned to a limited number of most-recent entries.
• Rate-limit and log data: short-lived, retained only as long as needed for abuse prevention and operations.

You can ask us to access or delete the personal information we hold about you (primarily your email address and any results records), and you can unsubscribe from emails at any time. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA — including the right to access, correct, delete, or port your data, and to object to certain processing. To exercise any of these, email hello@tillumakeit.comand we’ll respond within a reasonable time. The simplest way to limit what we hold is not to submit information you don’t want processed.

We take reasonable measures to protect your information — data is transmitted over encrypted connections, uploads are validated and size-limited, and access to stored data is restricted. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

Many of our users are students applying to college, so some are minors. The service is not directed to children under 13, and we do not knowingly collect their personal information. If you are under 18, use tillumakeit only with a parent or guardian’s involvement. If you believe a child under 13 has provided us information, contact us and we will delete it.

We may update this policy as the product evolves. When we do, we’ll revise the “last updated” date above; material changes will be made clear on this page.

Questions about this policy or your data? Email hello@tillumakeit.com.