Resume Agent
Privacy
This page describes the information used by the school tools and access-request process currently available in Resume Agent. Student job search and application assistance are still in development.
When you request access for a school
The request form asks for your school’s name and website, your name and email, and optional details: your title, a preferred school address, an approximate student count, a sign-in preference and a message. We email a confirmation link to the address you provide. Confirming that link sends the request to the review queue.
Platform administrators can view access requests, including unconfirmed requests, to review them, handle unwanted submissions and set up approved schools. We store the request details, confirmation status and review decision. A hashed IP address is stored with the request to limit repeated submissions.
School accounts and records
A school account can include your name, school and personal email addresses, account role and status, and identifiers used by the school’s sign-in provider. School records can include student IDs, programs, courses, syllabi, enrollments and completions.
Students can view their own account and educational records. School staff and managers can work with people and educational records according to their role. The Claude and ChatGPT connector is available to staff and managers only and uses those same school permissions.
Students can request deletion of their record on My profile. School managers complete or decline requests in the app; a platform administrator can complete a request through logged support access.
Signing in and sending email
Your school chooses whether to enable emailed codes, Microsoft sign-in or SAML sign-in. The selected method provides the information needed to identify your account, such as an email address or a provider identifier. We store verification and sign-in records to check codes, complete sign-in and manage sessions.
Cloudflare Email Service sends sign-in and email-verification codes, access-request confirmation links and school setup messages. The recipient address and message content are provided to that service for delivery.
Cookies and abuse prevention
Cookies keep you signed in and connect a sign-in attempt to the browser that started it. These cookies apply to the host where they are set. Session records include the sign-in method, activity times and browser information used to show your active sessions.
Resume Agent uses hashed IP addresses for request and sign-in rate limits. Access logs record account and school actions, including support access. These records help operate the service and investigate problems.
The school request form, the sign-in pages that send an emailed code and the form for adding a personal email address use Cloudflare Turnstile to tell people from automated traffic. Your browser loads the check from Cloudflare, which decides from information about your browser and connection whether you are a person. Resume Agent sends Cloudflare the check's response code and your IP address to confirm the result, and does not store the response code.
Support access
A platform administrator can open a school's student data only through support access scoped to that school with a stated reason. Each use is recorded in the school's access log.
Contact
For questions about this page or your information, email hello@resumeagent.org.
Back to Resume Agent