🔒
Never sold
Your personal data is never sold to third parties. Ever.
🚫
Not used for ads
We do not use your data to serve you or others with advertising.
🗑️
Delete anytime
Request full deletion of your data at any time, no questions asked.
🔐
Encrypted
All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
👁️
Full transparency
We show you exactly what data we hold and how it is used.
✅
GDPR compliant
We comply with GDPR, CCPA, and UK Data Protection Act 2018.

📄 What happens when you upload your resume

Here is the exact sequence of events when you use our AI Resume Scanner:

1
You upload your fileYour resume is transmitted over an encrypted HTTPS connection directly to our secure servers. It is never stored on your browser or device beyond the upload session.
2
Text is extractedWe extract the text content of your resume — job titles, skills, experience, and education. We do not process photos, signatures, or any embedded non-text content.
3
AI analysis is performedThe extracted text is sent to our AI model (Claude by Anthropic) via an encrypted API connection. Only your anonymised career data — not your name, contact details, or address — is included in the analysis prompt.
4
Results are returned to youYour AI Readiness Score, role matches, skill gaps, and roadmap are displayed on screen. If you are logged in, this analysis is saved to your personal account. If not, it exists only in your browser session.
5
Your file is discardedThe original resume file is not permanently stored on our servers. Only the structured analysis output is retained (if you are logged in and consent to this).

⚠️ Important: We strip your name, email address, phone number, and home address before sending data to our AI model. The AI only sees your career history, skills, and qualifications — not who you are.

📋 What personal data we collect and why

Data Why we collect it How long we keep it
Email address Account login and important service communications Until account deletion
Resume text content Career analysis only — not stored in raw form Session only (not logged in) or until deletion (logged in)
AI Readiness Score + analysis To power your dashboard and track progress over time Until account deletion
Learning progress To track your roadmap and calculate streaks Until account deletion
Chat messages Powering Fiona AI responses and conversation history Automatically deleted after 12 months
Activity logs Platform analytics and improving service quality Automatically deleted after 24 months
Security events Fraud prevention and platform security Automatically deleted after 12 months. IP addresses stored as one-way hash only.
Payment data Subscription billing — handled entirely by Stripe Managed by Stripe — we never see your card details

🤝 Who we share your data with

We share the minimum necessary data with a small number of trusted service providers — only to operate the service. We never share your data for marketing, research, or commercial purposes.

🤖
Anthropic (Claude AI)
We send your anonymised career text for AI analysis. Per Anthropic's API data usage policy, data submitted via API is not used to train their models by default. Please refer to Anthropic's current privacy policy at anthropic.com for the latest terms.
🗄️
Supabase (Database)
Your account data and analysis results are stored in Supabase (EU region). Data is encrypted at rest and access is restricted by row-level security.
💳
Stripe (Payments)
Payment processing only. We pass your email to Stripe for billing. We never see or store your card number or CVV.

✅ We do not share your data with: employers, recruiters, job boards, advertisers, data brokers, or any third party not listed above.

⚖️ Your rights

Under GDPR and UK data protection law, you have the following rights. We honour all requests within 30 days.

✓ Access your data ✓ Correct inaccuracies ✓ Delete all data ✓ Export your data ✓ Withdraw consent ✓ Object to processing

To exercise any of these rights, email us at privacy@futurein.ai or use the data controls in your account dashboard. We will respond within 30 days.

Last updated: March 2026 · Full Privacy Policy · Terms of Service