Privacy Policy

Wynhire (wynhire.com) is a resume builder operated by App Str LLC, Sheridan, Wyoming, United States (“we”, “us”, “our”). This policy explains what personal information we collect, why we collect it, how long we keep it, and the rights you have over it.

For any privacy question or request, contact us at legal@wynhire.com.

Resume content you enter

Everything you type into the builder: your name, email address, phone number, city, links, work history, education, skills, and any other section you add. This is the core of the service — we store it so your resume is saved and can be edited, previewed, and downloaded.

Draft saving by email

When you enter your email address at the Contact step, we save your in-progress resume (a “draft”) on our servers, keyed to that email address, so you can continue on any device through a private resume link. We may send you a small number of reminder emails about your unfinished draft (see Section 5). Drafts that stay inactive are automatically deleted after 30 days.

Account information

If you create an account, we store your email address and a hashed version of your password (we never store the password itself), plus your purchase and subscription records.

Payment information

Payments are processed by our payment processor, Whop. We never see or store your full card number. We receive transaction records (amount, date, status, the email used at checkout) needed to deliver what you bought, manage your subscription, and handle refunds.

Cookies and advertising attribution

We use a small set of first-party cookies: a consent cookie storing your cookie choice, session cookies (sign-in and anonymous usage analytics), and — only if you accept cookies — advertising attribution cookies that store ad-click identifiers (such as Google “gclid”) and UTM campaign parameters for 90 days. The full list is in our Cookie Policy.

Support correspondence

If you email us, we keep the correspondence so we can help you and keep a record of the request.

Some features use artificial intelligence: importing an existing resume from a PDF or photo, suggesting bullet points, and tailoring your resume to a job description. To provide these features, the relevant resume content (and, for import, the file you upload) is sent to our AI provider, Anthropic (the Claude API), processed to produce the result, and returned to you.

• We only send the content needed for the feature you actively use.
• Under Anthropic’s commercial API terms, content submitted through the API is not used to train Anthropic’s models.
• AI output is a suggestion: you review and edit everything before it becomes part of your resume.

• Provide the service — build, save, preview, and export your resume; sync drafts across devices; operate your account and purchases.
• Communicate with you — transactional emails (account, purchases) and a limited number of reminders about an unfinished draft, each with a working unsubscribe link.
• Measure advertising — with your cookie consent, attribute sign-ups and purchases to the ad campaign that brought you here (Google Ads click identifiers and UTM parameters).
• Security and abuse prevention — rate limiting, fraud prevention, and debugging.
• Legal compliance — tax, accounting, and responding to lawful requests.

We do not sell your personal information for money, and we never sell or share the content of your resume.

We share personal information only with service providers who process it on our behalf to run the product:

• Vercel — website hosting and infrastructure.
• Supabase — database hosting (resume data, drafts, accounts).
• Resend — sending our transactional and reminder emails.
• Whop — payment processing.
• Anthropic — AI processing described in Section 3.
• Google — advertising measurement, only if you accept cookies.

We may also disclose information if required by law, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to the transferred data).

• Unfinished drafts — deleted automatically after 30 days of inactivity.
• Resume data and account information — kept while your account is active, and deleted on request (Section 8).
• Advertising attribution cookies — 90 days.
• Cookie consent choice — 6 months.
• Transaction records — kept as long as required by tax and accounting law.

Wherever you live, you can ask us to access, correct, or delete the personal information we hold about you, and to stop reminder emails at any time (every reminder email contains an unsubscribe link). Email legal@wynhire.com from the address associated with your data; we will verify the request and respond within the time required by applicable law.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights:

• Right to know — what categories of personal information we collect (Section 2), the purposes (Section 4), and the categories of recipients (Section 5).
• Right to delete — request deletion of your personal information, subject to legal exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — see below.
• Right to non-discrimination — we will never treat you differently for exercising your rights.

Do Not Sell or Share My Personal Information

We do not sell personal information for money. However, using advertising cookies (Google Ads measurement) may qualify as “sharing” for cross-context behavioral advertising under the CPRA. You can opt out of this sharing at any time by refusing cookies — the opt-out takes effect immediately and existing advertising cookies are deleted:

You can also exercise any of these rights by emailing legal@wynhire.com. An authorized agent may submit a request on your behalf with proof of authorization.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR (or equivalent law) applies. Our legal bases are:

• Performance of a contract — providing the resume builder, saving your drafts, delivering purchases.
• Consent — advertising cookies and attribution (you can withdraw consent at any time via “Manage cookies”).
• Legitimate interests — security, abuse prevention, and reminding you about a draft you started (you can object via the unsubscribe link in every email).
• Legal obligation — tax and accounting records.

You additionally have the rights to data portability, to restrict or object to processing, and to lodge a complaint with your local supervisory authority. Our service is operated from the United States: by using it, your data is transferred to and processed in the United States.

All traffic is encrypted in transit (HTTPS). Passwords are stored hashed, resume links use unguessable random tokens stored only as cryptographic hashes, and access to production data is restricted. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law.

The service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child provided us personal information, contact us and we will delete it.

We may update this policy as the product evolves. We will change the “Last updated” date above and, for material changes, notify you by email or with a notice on the site before the change takes effect.