Privacy
File storage is off on PasteApply right now. Temporarily off: saved profiles, the jobs board, referrals, the resume vault, draft history and Save. Nothing is charged for them. Your files come back with each draft and can be downloaded again for 2 hours. Free on PasteApply is a fixed sample right now: it shows what a tailored resume and cover letter look like, and no AI runs on free requests. Tailoring your own resume needs a plan.
What is kept, and for how long
Your Stripe customer record (metadata)
Holds: Only your own plan and usage: your Google account id (google_sub, to tie the plan to you) and one pa2 field with your plan, subscription id, status and start time, when it was last checked, its current billing period's start and end, that period's unlock count and the last few unlock receipts (hashes, no text).
Kept: While you have a Stripe customer record; Stripe keeps billing records as the law requires.
Your draft (posting, resume, tailored resume and letter)
Holds: Sent to the model provider (OpenAI) to tailor it, then returned to you in the response with the files.
Kept: Not stored on our side. The download link is an encrypted, signed token in your browser; it works for 2 hours and only for the same signed-in account.
Free samples
Holds: A fixed example posting and resume.
Kept: Nothing about you: no AI call, nothing stored.
Cookies
Holds: The Google sign-in session (signed); pa2_cus (signed link from your Google account to your Stripe customer, 30 days); pa_acct (signed count of this month's request allowance).
Kept: Until they expire or you sign out.
Request allowance counters
Holds: Per Google account, per UTC month, in server memory: free 300; $3 or $5 300; $10 Pro 3,150; $20 2,350.
Kept: Until the month ends or the server restarts.
Files saved before this change
Holds: Drafts, history, saved resumes and job posts stored before file storage was turned off.
Kept: Kept, not deleted, but they cannot be opened while storage is off, except that deleting your account deletes the ones tied to it (see Deleting your account below). The automatic cleanup cannot run while storage is off either; it resumes when storage is back.
Who else sees it
Stripe (payments and the customer record above), Google (sign-in) and OpenAI (the tailoring for paid drafts). Card numbers go to Stripe only. We do not sell resume text.
Deleting your account
Signed in with Google, open Delete my account at the bottom of the app, type DELETE and confirm. A paid subscription that is still active, trialing, past due or unpaid blocks deletion: cancel it in Manage billing first and delete your account once it has ended. We never cancel billing for you. Only a signed-in browser can delete an account; agent API keys cannot. If our file storage is not reachable, nothing is deleted and you stay signed in; if a step fails, you stay signed in and can safely try again.
Deleted right away
- Drafts you made while signed in that are in your draft history (the job posting, your resume text, the tailored resume and cover letter), plus any of our own QA test drafts tagged to your account. A draft in your history that we can't tie to your account (one added from a link someone shared, or one saved before account deletion launched in September 2026) is removed from your history but not deleted early: it ends on its normal schedule above. Drafts that were never in your history were never linked to your account and also end on that schedule.
- Your draft history index (the whole file).
- Your master resume: the stored copy is deleted on every server, with our email lookup file for your account, and its cookies (pa_mr_n, pa_mr_0, …) are cleared on this browser.
- Your stored plan counters from before file storage was turned off: monthly unlock counts and Jobs search counts for your account and its billing customer, and your daily Jobs publish counts (the current unlock count is in the pa2 plan field, which stays; see Kept).
- Gifts and referrals: your stored referral record (referral code and its lookup file, credits, banked and active gift months, which end with the account) and your entry in our gift registry. Our owner gift log keeps its lines (dates and counts) but they no longer point to your account.
- Agent API keys: revoked right away, so they stop working at once.
- Repeat-generate cache entries for your account (this month and last).
- Every Jobs listing you posted (live, closed or draft) is unpublished and deleted, including any Promote time left.
- Your Jobs tracker marks (other people's tracker marks on your deleted listings go at the next daily cleanup; in our Redis storage they expire on their own, no later than 30 days after the listing's last expiry date).
- The link we keep between your Google account and your Stripe customer (the stored copy, on every server).
- On your Stripe customer record we remove your Google account id and the older fields we added before file storage was turned off (referral code and credits, gift dates and monthly unlock counts). The pa2 plan field stays (see Kept).
- This browser is signed out: the Google sign-in session and our plan, draft and referral cookies (fl_sub, fl_pro, fl_paid, fl_gid, fl_snap_*, pa_ref, pa2_cus) are cleared.
Kept
- The pa2 plan field on your Stripe customer: Your plan, subscription id, status and start time, its billing period and that period's unlock count and last few unlock receipts (hashes, no resume text). It stays so deleting and re-joining does not reset a period's unlocks; your Google account id is removed from that customer.
- The Application Kit field (pak) on your Stripe customer: If you bought an Application Kit: how many Kits you bought and used, your Kit search and redo use (and Power use for its billing period), short hashes of your Kit checkout sessions with each purchase's open, refunded or disputed mark, your last few Kit use receipts (hashes, no resume text), and a flag if a Kit payment was ever disputed. It stays for fraud, refund and dispute integrity, so deleting and re-joining cannot reset or farm Kit credits.
- Older monthly unlock counts on your Stripe customer: We remove the unlock counts for this month and last month; a count from an earlier month (one number per month, no content) stays on the customer record.
- Payment records at Stripe: Stripe keeps your customer record (email and billing details), invoices, receipts and the checkout and subscription records, including the details we attached when you paid (draft id, plan, your Google account id if you were signed in, referral code, campaign source). Payment and tax law require these, so we do not delete them.
- Two markers on your Stripe customer: That your free welcome month was already used and, if a friend referred you, who referred you. They stop a delete-and-rejoin from starting the welcome month or a referral reward again.
- An agent-key revocation marker: A one-way hash of your billing customer id and the time, so old agent keys stay dead. A new paid Checkout clears it.
- Anonymous aggregate counts: Daily funnel counts per campaign source hold no IP address, email, account id or resume text, so they stay (366 days).
- Things that were never linked to your account: Stored resumes (resumeId), free-use counters (IP hash), ad-unlock sessions, drafts that were never in your history, and our host's request logs are not tied to your Google account, so they end on their normal schedule above; email us with a draft or resume id to delete one sooner.
- This month's signed-in request count: Kept in server memory (until the month ends or the server restarts) and in the pa_acct cookie, which is not cleared, so deleting and re-joining does not reset the monthly request cap. Any small count files from before file storage was turned off end 1 day after their UTC month.
- Other browsers: A browser where you are still signed in stays signed in until you sign out there or its 30-day session ends; anything saved there starts a new account. To also withdraw Google's sign-in (and Drive) permission, remove PasteApply in your Google Account's third-party access settings.
Questions or deletion requests: support@pasteapply.com.