Privacy Policy

Last updated: April 9, 2026

1. Information We Collect

When you use SubmittalAI, we collect:

  • Account information: Email address when you create an account or sign in.
  • Usage data: Number of submittals generated, plan type, and feature usage to manage your subscription limits.
  • Input content: Resume and job description text you paste into the tool to generate submittals. This content is processed in real time and not stored permanently.
  • Technical data: Browser type, IP address, and standard server logs for security and performance monitoring.

2. How We Use Your Information

We use the information we collect to:

  • Provide and operate the SubmittalAI service
  • Manage your account and subscription
  • Process payments via Stripe (we do not store payment card data)
  • Send transactional emails (sign-in links, billing receipts)
  • Improve and debug the service
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your resume or job description inputs to train AI models.

3. Data Retention

Account information is retained as long as your account is active. Resume and job description inputs are processed to generate your submittal and are not stored in our database beyond the immediate session. You can request deletion of your account and associated data at any time by contacting support@submittalai.com.

4. Third-Party Services

We use the following third-party services:

  • Cloudflare: Hosting, CDN, and Workers (our backend runs on Cloudflare's infrastructure)
  • Stripe: Payment processing
  • Google AI / Gemini: AI model used to generate submittals

Each provider has their own privacy policy. Your input content is sent to Google's AI API to generate the submittal response. Google's data processing terms apply to that transmission.

5. Cookies

We use minimal cookies required for authentication (session tokens stored in localStorage). We do not use third-party advertising or tracking cookies.

6. Security

All data is transmitted over HTTPS. Authentication uses magic links - no passwords are stored. We use Cloudflare's security infrastructure to protect against common attacks.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by emailing support@submittalai.com. We will respond within 30 days.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.

9. Contact

For privacy-related questions, contact us at support@submittalai.com.