This policy explains what HandsOnward collects, why, and what you can do about it. It's written to describe what the product actually does today, not generic boilerplate — if something below changes (for example, when paid subscriptions launch), this page will be updated to match before that change goes live.
What we collect
- Account info: name, email, and a securely hashed password (or nothing, if you sign in with Google).
- Profile info you provide directly: job title, years of experience, location, education level, work history, certifications, and skills.
- Resume files you upload (PDF), the text extracted from them, and the structured data an AI model pulls out of that text — which you always review and approve before anything is saved to your profile.
- Career goals you set, the occupations you're comparing yourself against, and the match scores and roadmap milestones generated from that.
- Basic technical data needed to keep the service secure: sign-in timestamps and rate-limit counters (used to block abuse, not to profile you).
How your resume specifically is handled
When you upload a resume, the file is stored in Cloudflare R2. The text is extracted and sent to OpenAI to pull out structured fields (work history, education, skills). That result is shown to you on a review screen — nothing from a resume is saved to your profile without you confirming it first. If you delete a resume or your account, the underlying file is deleted from storage, not just hidden.
Who else sees your data
HandsOnward doesn't sell your data. A small number of service providers process it on our behalf, strictly to run the product:
- OpenAI — parses resume text and classifies skill names. Resume text is sent only for this purpose.
- Neon — hosts the database.
- Cloudflare R2 — stores uploaded resume files.
- Resend — sends account emails (verification, password reset).
- Google — if you choose to sign in with Google.
- Vercel — hosts the application.
- Sentry — receives error reports if something breaks, to help us fix it.
Occupation and skill data itself comes from O*NET (U.S. Department of Labor, CC BY 4.0) — that's public reference data, not anything about you.
Your choices
- Edit or remove any profile field, work history entry, skill, certification, or resume at any time from your profile page.
- Delete your entire account and everything tied to it from the "Danger zone" section of your profile — this is permanent and cannot be undone.
Security
Passwords are hashed, never stored in plain text. Authentication endpoints are rate-limited against abuse. Every request that touches your data is checked against your account before anything is read or written.
Children's privacy
HandsOnward is not directed at children under 16, and we don't knowingly collect data from anyone under that age.
Changes to this policy
If this policy changes in a way that materially affects how your data is used, we'll update the date above and make a reasonable effort to let you know.
Contact
Questions about this policy or your data can be sent to garrettledbetterdesigns@gmail.com.