Legal

Privacy Policy

How GetPruf collects, uses, stores, and protects the data you entrust to our resume screening service.
Last updated: April 15, 2026

1. What We Collect

When you use GetPruf, we collect the following information:
  • Account information: email address, name, and password (hashed with bcrypt)
  • Uploaded resumes: processed for analysis and stored as part of your screening report
  • Usage data: number of resumes screened, timestamps, plan and quota information
  • Session data: stored server-side in Redis for authentication purposes

2. How We Use Your Data

We use your data solely to provide the resume screening service:
  • Analyze uploaded resumes for fraud indicators using AI models
  • Verify employer claims against public web sources
  • Generate risk scores and downloadable PDF reports
  • Track your screening history and usage quota
We do not sell, share, or provide your data to third parties for marketing purposes.

3. Third-Party Services

GetPruf uses the following third-party services to process resumes:
  • Enterprise LLM inference provider - for AI-based resume analysis and web grounding
  • Independent LLM review provider - for optional second-opinion analysis
  • Search API providers - for public web verification of claimed employers and institutions
A complete list of sub-processors, including commercial names and jurisdictions, is available to enterprise customers upon written request under a signed Data Processing Agreement.
Resume text is sent to these services for analysis. We do not store resume content on third-party servers beyond the duration of the API call.

4. Data Retention

Screening reports are retained in your account for as long as your account is active. You can request deletion of your account and all associated data by contacting us. Upon account deletion, all reports, user data, and uploaded files are permanently removed within 30 days.

5. Data Security

We protect your data using:
  • TLS encryption for all data in transit
  • bcrypt password hashing (cost factor 12)
  • Server-side sessions (no sensitive data in cookies)
  • Tenant isolation - your data is never accessible to other organizations
  • Rate limiting and input sanitization to prevent abuse

6. Your Rights

You have the right to:
  • Access all data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your screening reports

7. Cookies

GetPruf uses a single session cookie for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Contact

For privacy-related questions or data requests, contact us at privacy@getpruf.ai.