What we keep, why, and who else sees it
Last updated 13 November 2026. This policy covers wingsoncv.com and the WingsOnCV app at app.wingsoncv.com, operated by VerticalServe Inc.
The short version
- Your resumes, job postings and letters belong to your account. Other users cannot see them and we do not sell or publish them.
- To produce tailored resumes, reviews and letters, the relevant text is sent to AI model providers that process it on our behalf.
- This website loads analytics only if you agree. The app does not use advertising trackers.
- You can delete a resume or an application yourself, and ask us to delete your whole account.
What we collect
| Data | What it is | Why we hold it |
|---|---|---|
| Account details | Name, email address, and a password (stored only as a salted hash) or your Google sign-in identity. | To sign you in and to send account email such as password resets. |
| Resumes | The files you upload and the resume content you type or edit, including any photo you add. | To store, display, edit and export your resumes. |
| Job postings and applications | Postings you paste, the tailored resumes, cover letters and interview questions made from them, and your tracker notes. | To produce and keep the documents for each application. |
| Usage records | A count of the AI and export actions on your account, with the time. | To apply the daily limits that keep the service available and affordable. |
| Technical logs | IP address, time and the page or action requested. | Security, abuse prevention and fixing faults. |
We do not ask for, and you should not put in a resume, government identity numbers, bank details or health information.
How AI features use your content
When you upload a resume, tailor one to a job, ask for a review, improve a bullet, or generate a cover letter or interview questions, the text involved (your resume content and the job posting) is sent to an AI model to produce the result. We use models from Anthropic through Amazon Bedrock and models from OpenAI. These providers process the text to return a response; under their terms for business customers the content is not used to train their models.
The AI is instructed to use only what your resume already says. You should still read every result before you send it to an employer: you are responsible for the accuracy of your resume.
Who processes data for us
- Amazon Web Services: hosting, storage, database, email sending and AI models (Amazon Bedrock), in the United States.
- OpenAI: AI models used for some features, such as reading an uploaded resume.
- Google: sign-in with Google, if you choose it; and Google Analytics on this website, only with your consent.
- Cloudflare: the "verify you are human" check on the sign-up and password-reset forms.
We do not sell personal data, and we do not share your resumes with employers or recruiters. A resume leaves the service only when you download it or send it yourself.
Cookies and analytics
This website stores your analytics choice in your browser. If you choose "Allow analytics", Google Analytics is loaded and sets its own cookies to count page views. If you decline, it is not loaded. The app keeps your sign-in session in your browser's storage so you stay signed in; it has no advertising or cross-site tracking cookies.
How long we keep it
We keep your account and its content for as long as the account exists. Deleting a resume removes it and its uploaded file. Deleting an application removes its tailored documents. Technical logs are kept for a limited period for security and then removed. Backups are overwritten on a rolling schedule.
Your choices and rights
You can view, edit, export and delete your resumes and applications in the app. To get a copy of your data, to correct account details you cannot change yourself, or to have your account and everything in it deleted, write to contact@verticalserve.com from the email address on the account. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA, including the right to object to processing and to complain to a regulator; we will honour valid requests.
Security
Data is encrypted in transit. Access to an account's content is limited to that account. Sign-up is protected against automated abuse and sign-in attempts are rate-limited. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as the law requires.
Children
WingsOnCV is for people of working age. It is not directed at children under 16 and we do not knowingly collect their data.
Changes and contact
If this policy changes in a way that matters, we will update the date above and, for significant changes, tell account holders by email. Questions: contact@verticalserve.com. VerticalServe Inc.