Privacy Notice
Last updated July 26, 2026
Who is responsible
StrideFolio operates the service described in this notice. Contact privacy@stridefolio.com for privacy questions, access requests, corrections, exports, or deletion.
Information we process
- Account information, including name, email address, profile image, and sign-in identifiers.
- CVs, profile facts, transcripts or supporting materials you choose to upload.
- Application details, job or programme requirements, generated documents, edits, versions, and outcomes.
- Subscription identifiers and status. Stripe, not StrideFolio, processes payment-card details.
- Operational information such as timestamps, usage, errors, security events, and support messages.
How we use information
We use information to authenticate accounts, maintain your workspace, generate and revise requested documents, provide billing and support, secure the service, enforce usage limits, and improve reliability. StrideFolio does not use your documents to train its own AI models.
Service providers
We use service providers to operate StrideFolio, including Render for hosting, Clerk for identity, Stripe for billing, Resend for transactional email, and the configured AI provider for document generation. Relevant information is shared only as needed to provide those functions and may be processed in countries outside your own.
Retention
Raw CV upload artifacts are scheduled for removal after 30 days. Confirmed profile facts, applications, and generated documents remain while your account is active. Account deletion removes active StrideFolio data, while encrypted infrastructure snapshots expire according to the hosting provider's backup cycle. Minimum billing, fraud, or legal records may be retained where required.
Your choices and rights
You can export account data, delete raw uploads, and request account deletion from the application. Depending on your location, you may also have rights to access, correct, restrict, object to, or receive a copy of personal information and to complain to a data-protection authority.
Security and changes
We use access controls, scoped storage, encrypted hosting storage, and managed identity and payment providers. No online service can guarantee absolute security. Material changes to this notice will be dated and may require renewed acknowledgement.