Zero-Hallucination • Zero-Retention Guarantee

tailor.tlrd.ai Privacy Policy & Data Guarantees

We believe your professional career history, credentials, and work samples belong solely to you. This policy codifies our commitment to complete self-service account & file erasure, automated 24-hour guest purging, and strictly fact-grounded artificial intelligence.

Effective & Last Updated: October 2026
🗑

1. User Account & Permanent File Erasure

Self-Service Deletion

You have absolute sovereignty over your candidate profile and stored assets. At any time, you can permanently erase your account and all associated data via Settings → Delete Account & All Files or programmatically via our authenticated REST API endpoint:

DELETE https://tailor.tlrd.ai/api/v1/auth/user

Upon triggering account deletion, everything else is immediately and irreversibly purged from our database tables and object storage systems:

  • Uploaded Master Documents: All original resume files (PDF, DOCX, TXT, MD) and rendered thumbnail preview images.
  • Generated Application Documents: All ATS-tailored resume PDFs and custom cover letters created for target jobs.
  • Visual Branding Assets: All generated 400x400 headshots, platform cover banners, and OpenGraph social cards.
  • Canonical Career Graphs: All de-duplicated work experience blocks, bullet points, skills taxonomies, and education records.
  • OAuth Credentials: All external provider tokens (GitHub, LinkedIn, Google) and profile links.
  • Active Sessions: All session records and authentication tokens in our session store.

Credit Accounting Retention: For compliance, financial auditing, and tax accounting obligations, immutable credit transaction ledgers and balance histories are decoupled from personal identity and kept indefinitely. All personal identifiers, vault assets, career graphs, and files are permanently deleted.

⏱

2. Guest Sessions & Automated 24–48 Hour File Purge

24–48h Purge

We provide frictionless guest access across our 4 bespoke atelier tailors (Julian Mercer, Sloane Weaver, Theo Linden, Zoe Tanner). If you explore or tailor without creating an account:

  • 24–48 Hour Ephemeral Lifetime: Guest sessions, uploaded resume files, extracted career data, target job descriptions, and temporary generated previews are retained temporarily and deleted after 24 to 48 hours.
  • Automated Cleanup: An automated background purge daemon executes on schedule to permanently delete all expired guest sessions and scrub any temporary files from storage after 24 to 48 hours.
  • Seamless Account Claim: If you choose to log in via Google, GitHub, or LinkedIn, your temporary guest work is promoted to your encrypted account and the guest session is immediately destroyed.
✔

3. Zero-Hallucination & AI Data Ethics

Fact-Grounded Only

Our tailoring engine enforces rigorous guardrails to safeguard professional integrity:

  • Grounded in Verified Facts: AI models are constrained to rewrite, format, and highlight accomplishments exclusively using facts present in your master vault. We never fabricate job titles, companies, or credentials.
  • Zero Model Training: Your private resumes, job descriptions, and career metrics are never utilized to train or fine-tune public foundation models.
  • Full Auditability: We record token consumption and model identifiers per generation for complete transparency.
🛡

4. Zero Data Selling & No Third-Party Tracking

No Ad Tracking

We do not sell, rent, monetize, or broker your personal information or resume contents to third-party advertisers, recruitment agencies, or data brokers.

  • No Behavioral Ad Tracking: No Facebook Pixels, Google Analytics ad trackers, or surveillance cookies are deployed.
  • Offline & Vanadium Compliant: Engineered with self-contained WebAssembly and CanvasKit binaries with zero external Google Fonts or CDN telemetry dependencies.
🔒

5. Encryption & Security Standards

AES-256 Fernet

We employ state-of-the-art security controls across our infrastructure:

  • Cryptographic Encryption at Rest: OAuth tokens (GitHub, LinkedIn, Google) are encrypted at rest using AES-256 Fernet symmetric cryptography.
  • Strict Transport Security: All API and web endpoints require TLS 1.3 / HTTPS.
  • Granular Visibility Toggles: Your hosted web resume (me.tlrd.ai/{username}/resume) and candidate directory listing (me.tlrd.ai/resumes) are opt-in only and disabled by default.
📩

6. Exercising Your Rights & Contact

[email protected]

You have the right to request access to, export, rectify, or request immediate deletion of your data.

Manage Account & Privacy Settings Return to Atelier Reception