Skip to content
Otto Sensei
Check my resume

Privacy policy

Last updated:

Otto Sensei helps you check and improve your resume. This page explains what we collect, why, and who else sees it. The short version: we collect as little as we can, we never sell your data, and you can delete it whenever you like.

What we collect

  • Your email address, if you sign in, either with Google or with a code we email you. We use it to sign you in and to send important notices about your account or billing. There are no passwords. If you use Google, it also shares your name and profile picture with our sign-in provider; we don't use them.
  • Your resumes. They're saved in your browser's local storage, on your device. If you sign in, we also keep a backup copy in our database so you can open them on other devices.
  • Share links. If you share a resume, we keep a copy of that version (without hidden lines or tailoring notes) so anyone with the link can read it and download it as a PDF. Your email and phone show only if you turn that on, and search engines are asked to skip the page unless you allow them. We count views: to count each reader once, we keep a scrambled code made from their network address and browser (not the address itself) for about two days. Turning the link off deletes the copy.
  • Applications you log. If you track job applications, we store what you enter (company, job title, job link, date, status and notes) and which resume you sent, so you can see your own interview rate. If you make an interview prep pack for one, we save it with that application. Nobody else sees it.
  • Reminders. When you mark a job applied, we store a follow-up date (7 days later unless you pick another number). When it comes, we add a note to your dashboard. We email you about it only if you turn reminder emails on on your account page. We store the note, whether you've read it, the date, and your reminder settings. Read notes are deleted after 90 days, unread ones after a year.
  • Your work profile. If you fill it in, we store the country you live in, your time zone, where you can work without a sponsored visa, whether you want full-time or contract work, and whether you only want remote jobs. Otto checks job posts against it in your browser, and on our server when ranking the Jobs tab. Nobody else sees it.
  • Jobs you match and save. To rank open jobs for you, your browser sends the skills, job titles and years of experience it reads from your resume, never the resume itself or your contact details. We use them for that one request and don't store them or send them to an AI. If you save a job, we store which one and when. The jobs themselves come from public job boards, each linked to its original post.
  • Files you upload. We read them in memory to pull out the text and run the checks. We don't store the files.
  • Usage counts. For signed-in users, how many line fixes, tailored versions, cover letters and answers you've used this month (this week on a weekly plan, or during your trial), plus any extra an invite earned you, so plan limits work.
  • Plan and billing status. If you subscribe or start a trial, we store your plan and the subscription details Creem sends us, such as whether it's active, when your trial ends and when it renews. We never see your full card number.
  • Trial record. So each person gets the free Pro trial once, we keep a one-way fingerprint (a SHA-256 hash) of the email of anyone who has started a trial or paid. It can't be turned back into your email, and we keep it after you delete your account, only to check whether that email has had a trial.
  • Feedback you send. Your note, whether it's a problem or an idea, and the page you sent it from. If you're signed in, it's linked to your account.
  • Invites. Your invite code, which account joined through whose link, and the device cookie ids (below) of the browsers used, so nobody can invite themselves. Inviters only see counts, never who joined.
  • Abuse-prevention counters. To stop abuse, we count requests per IP address, device and email address in short time windows. These counters are deleted after about two days.
  • Technical logs. Our servers log events such as errors. Logs never include your resume text, and email addresses in them are masked.
  • Usage events. Which steps people take, such as uploading a resume, downloading a PDF or upgrading, with simple counts like how many checks failed. They never include your resume text, job posts, name or email address. If you're signed in, they're linked to your account's random id. If your browser sends Do Not Track or Global Privacy Control, we send none at all.

How Otto uses AI

Otto uses AI models (by default Z.ai's GLM) through OpenRouter. Each feature sends only the text it needs, and only when you use it:

  • Importing a resume: the text of the file, to sort it into sections.
  • Fixing a line: the line, its job title and company, and your answers to Otto's questions.
  • Writing your summary: your resume without its contact details, or only the summary you asked Otto to tighten.
  • Tailoring, cover letters and application answers: your resume, the job post and, for an answer, the question.
  • Interview prep: your resume and the job post.
  • "Build with Otto": the job you want and what you wrote about each job, never your name.
  • Import from GitHub: the description, README and pull request text of the repos and pull requests you pick.

Before any of this goes to the AI, Otto replaces your name, email, phone number and links with placeholders, and puts them back afterwards. It spots them by their usual patterns, so an unusual format can slip through. OpenRouter passes the text to the model's provider and sends back the result. We tell OpenRouter to use only providers that don't train on this data. Providers may keep it for a limited time under their own policies, for example to detect abuse.

The recruiter checks, the editor and PDF downloads don't use AI. Line checks and PDFs are made right in your browser.

A LinkedIn data export or a JSON Resume file you import is read in your browser and never uploaded. The job post eligibility check also runs in your browser, with no AI.

"Import from GitHub" reads only public data from GitHub (your repos and merged pull requests) by the username you type, without your GitHub login. Nothing is added to your resume until you confirm. We don't store the GitHub data: a server keeps it in memory for up to an hour, so a second look doesn't ask GitHub again.

Payments

Creem handles payments as our merchant of record. They collect your payment details (also for a free trial, so the plan can start when it ends), charge you, send receipts and handle sales tax, under their own privacy policy.

Cookies and local storage

We use only what the app needs to work:

  • Sign-in cookies keep you signed in. They renew while you use the app and are removed when you sign out.
  • A device cookie holds a random id that limits free uploads and checks per device. It isn't linked to your name or email, and it lasts a year.
  • An invite cookie holds a friend's invite code for 30 days after you open their link, so the invite still counts if you sign up later. It's removed once the invite is settled.
  • Local storage (not a cookie) keeps your resumes, your progress and which tours you've seen on your device until you delete them or clear your browser data.

We don't use ads or tracking cookies. For the usage events above, a random id is kept in local storage so your steps can be counted together, across visits. It isn't linked to your name or email, and clearing your browser data removes it.

Who we share data with

We don't sell your data or share it for advertising. We only use these providers to run Otto Sensei:

  • OpenRouter and the AI model provider it routes to process resume text for the AI features above.
  • Creem processes payments as our merchant of record.
  • Supabase hosts our database and runs sign-in, including your sign-in sessions.
  • Resend delivers our sign-in and reminder emails.
  • Google, only if you choose to sign in with your Google account.
  • GitHub receives the username you look up, only if you use Import from GitHub.
  • Vercel hosts the app itself.
  • Sentry receives error reports when something breaks, with emails, phone numbers and resume text removed first.
  • PostHog receives the usage events above, so we can see which steps help and where people get stuck.

These providers may process data outside your country, including in the United States. We may also share information if the law requires it.

How long we keep data

  • Account data, resume backups, logged applications, interview prep and your work profile: until you delete them or your account.
  • Share links: until you turn the link off or delete your account.
  • Saved jobs: until you remove them, or 30 days after the job closes.
  • Reminder notes: 90 days once read, a year if never read.
  • Sign-in codes: they work once and expire after 10 minutes.
  • Feedback and invite records: until your account is deleted. Feedback sent while signed out isn't linked to any account.
  • Abuse-prevention counters: about two days.
  • Uploaded files: not kept at all.

Your choices

  • Delete any resume in the studio whenever you like. Its backup goes right away; the copy in this browser waits in Recently deleted for 30 days, or until you sign out or empty it.
  • Delete your account from your account page. This removes your email, sign-in record, resume backups, logged applications and their prep, work profile, saved jobs, share links, reminders, invite records, feedback and usage records right away, and signs you out on every device. Deleting your account cancels your paid plan or trial right away, and you won't be charged again. Only the trial fingerprint above stays.
  • Ask us for a copy of your data, or to correct or delete it, by emailing hello@ottosensei.com. You can also complain to your local data protection authority.

Children

Otto Sensei isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we use your data, we'll email signed-in users before it takes effect.

Contact

Questions about privacy? Email hello@ottosensei.com.