Privacy Policy
Last updated: January 18, 2026
At Rebase, we take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding your information.
1. Information We Collect
Account Information
When you create an account, we collect:
- •Email address (for authentication and communication)
- •Full name (optional, displayed on your resumes)
- •Password (securely hashed, never stored in plain text)
Profile Information
You may optionally provide:
- •Phone number
- •LinkedIn, GitHub, and personal website URLs
- •A separate email address for your resume
- •University affiliation (for student discount eligibility)
Resume Content
The core of Rebase is storing and organizing your career experiences:
- •Work experience (titles, companies, dates, descriptions)
- •Projects (titles, descriptions, technologies used)
- •Education (institutions, degrees, dates, coursework)
- •Skills and competencies
- •Leadership and extracurricular activities
- •Any content you import from existing resumes
Job Application Data
To tailor your resumes, we collect:
- •Job descriptions you paste for resume tailoring
- •Target company and role information
- •Answers you provide to clarifying questions ("Refine" feature)
- •Quick Add inputs (text you add to update experience records)
Usage and Transaction Data
- •Credits balance and usage history
- •Subscription tier and status
- •Resume generation history
- •Feedback you submit through the app
Analytics Data (With Your Consent)
We use PostHog for product analytics. This is opt-in only. If you consent, we may collect pages visited, session duration, browser/device info, and error reports.
You can decline analytics when prompted, and we will not collect this data.
2. How We Use Your Information
To Provide Our Service
- •Store and organize your resume content
- •Generate tailored resumes using AI
- •Process payments and manage subscriptions
- •Send transactional emails (password resets, receipts)
To Improve Our Service
- •Analyze usage patterns to improve features (with consent)
- •Debug issues and improve reliability
- •Develop new features based on user needs
AI Processing
When you use our AI features, your resume content and job descriptions are sent to our AI providers (Google Gemini and OpenAI) for processing. This data is used only to generate your requested output.
Important: We do not use your personal data to train the public AI models of our third-party providers.
3. Third-Party Services
We use the following third-party services to operate Rebase:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database & Authentication | US (AWS) |
| Stripe | Payment Processing | US/Global |
| Google Gemini | Resume parsing & generation | US/Global |
| OpenAI | Clarifying questions | US/Global |
| PostHog | Product Analytics (consent only) | US (AWS) |
| Vercel | Hosting | US/Global |
4. Data Security
- •All data is transmitted over HTTPS
- •Passwords are hashed using industry-standard algorithms
- •Database access is protected by row-level security policies
- •Each user can only access their own data
- •We implement rate limiting to prevent abuse
5. Data Retention
We retain your data for as long as your account is active. When you delete your account:
- •Your account and all associated data are permanently deleted
- •This includes all resumes, blobs, and profile information
- •Transaction history may be retained for legal/accounting purposes
- •Deletion is irreversible
6. Your Rights
Access Your Data
All your resume data is visible in the app. Contact us if you need a full export.
Delete Your Account
You can delete your account at any time from Settings → Account → Delete Account.
Opt Out of Analytics
Analytics tracking is disabled by default. You can change your preference at any time.
Update Your Information
You can update your profile information at any time from the Settings page.
7. Cookies
We use cookies for:
- •Authentication: To keep you logged in securely
- •Preferences: To remember your settings (like dark mode)
- •Analytics: Only if you consent to analytics tracking
8. Children's Privacy
Rebase is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.
9. International Data Transfers
Our services and third-party providers operate primarily in the United States. By using Rebase, you consent to your data being transferred to and processed in the United States and other countries where our service providers operate.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by email or through the app. Continued use of Rebase after changes constitutes acceptance of the updated policy.