Privacy Policy
Effective October 17, 2026
The short version: your resume is yours. We use what you tell us only to build your resume and help your job search. We don’t sell your data, show you ads, or share anything with employers. You can download or delete everything at any time.
Who we are
Ivy’s Index (“we”, “us”) runs ivysindex.com, operated by its owner as a sole proprietorship in Washington State. Questions about privacy: [email protected].
What we collect
- If you don’t make an account: nothing leaves your device. Your resume, answers, and saved jobs are stored in your own browser. If you upload a resume file, it’s read right there in your browser and never sent to us.
- Your account: your email address and a password. Passwords are stored only in scrambled (hashed) form; nobody at Ivy’s Index can see them.
- What you build: your resumes, your answers to our questions, jobs you save, applications you track, and notes you write. We store these so they’re there on any device you log in from.
- Your plan: which plan you’re on and whether it’s active, plus an ID that links your account to your billing record at Stripe.
- Payments: handled entirely by Stripe. Your card number goes straight to Stripe and never touches our servers. We see only your plan, its status, and the last receipt date.
- Basic technical data: like every website, our hosting provider receives your IP address and browser type when you visit, and keeps short-lived logs to keep the site running and secure.
What we don’t do
- We don’t sell or rent your personal information, and we don’t share it for advertising.
- We don’t send your resume or answers to employers. You decide what to send and where.
- We don’t use advertising or tracking cookies, or analytics that follow you across sites.
- We don’t use your resume to train AI models.
How we use it
To build and save your resume, match you with jobs, prepare you for interviews, run your account, process your subscription, answer you when you write to us, and keep the site secure. We may email you about your account (like a password reset or a billing receipt). We won’t send marketing emails unless you ask for them.
Who helps us run Ivy’s Index
These companies process data for us only to provide their service, under their own security and privacy commitments:
- Cloudflare hosts the website and its servers.
- Supabase stores accounts and saved work, in the United States, encrypted on disk.
- Stripe processes payments.
- Google Fonts, jsDelivr, and cdnjs deliver the site’s fonts and some code libraries, so they receive your IP address when pages load.
We may also share information if the law requires it, to protect someone’s safety, or as part of a sale or merger of Ivy’s Index (in which case this policy keeps applying to your data).
Job listings
Jobs come from employers’ own public career sites. When you open a job, you go to the employer’s site, and their privacy policy applies there.
Keeping it safe
Everything travels over encrypted connections (HTTPS). Our database lets each account read and change only its own data, and the site blocks code from anywhere but a short list of trusted sources. No system is perfectly secure, but if a breach ever affected your data, we would tell you promptly.
How long we keep it
We keep your data while your account is open. When you delete your account, your resumes, answers, and account are deleted from our database right away, and any paid plan is canceled. Copies in our providers’ backups are removed within 30 days. Stripe keeps payment records for as long as tax and financial laws require.
Your choices and rights
- See and download everything: open Your data in the app.
- Correct anything: edit it in the app at any time.
- Delete everything: Your data → Delete my account, or email us.
- Depending on where you live (for example, California), you may have additional rights under laws like the CCPA. We honor these requests for everyone, wherever you live. Email us and we’ll respond within 30 days. We will never treat you differently for using them.
Children
Ivy’s Index is for people 13 and older. If you believe a child under 13 has given us information, email us and we’ll delete it.
Changes
If we change this policy in a way that matters, we’ll update the date above and tell account holders by email or in the app before the change takes effect.