Privacy Policy
Last updated 22 August 2026
A resume is one of the more revealing documents a person owns. It holds your name, contact details, where you have worked, and often enough to identify you completely. We treat it that way.
Who controls your data
Stucci Media, a Florida company, is the data controller for information collected through Fitted. For any privacy question, data request, or deletion request, contact rocci@stuccimedia.com. Postal address available on request.
What we collect
Account data. Your email address and authentication details, so you can log in.
Resume content. Files you upload and the text extracted from them: contact details, work history, education, skills, and anything else your resume contains.
Job targets. Job descriptions you paste or link, and the analysis we produce from them.
Generated documents. Tailored resumes, cover letters, interview preparation, and LinkedIn text.
Writing samples. If you build a voice profile, the samples you paste and the style fingerprint derived from them.
Application tracking. Companies, roles, dates, statuses, and notes you enter yourself.
Billing data. Handled by Stripe. We store a customer reference and your plan status. We never receive your full card number.
Basic usage data. Enough to run the service, enforce limits, and fix problems.
We do not ask for and do not want special category data such as health information, racial or ethnic origin, religious beliefs, or trade union membership. Resumes sometimes contain this incidentally. If yours does, it is processed only as part of the document and never used to categorise you.
Why we process it, and on what basis
We process your content to perform the contract you entered into when you signed up: tailoring, scoring, and generating documents. We process account and billing data to run your account and meet legal obligations. Where we rely on legitimate interests, such as preventing abuse and improving reliability, we have weighed that against your rights.
How your resume is used
To tailor and score your resume, its contents are sent to third-party AI providers for processing. This is how the product works and cannot be opted out of while using those features.
Content sent for processing is used to generate your output and returned to you. We do not sell your data. We do not use your resume to advertise to you.
On AI training: we do not submit your content for model training, and we select providers on the basis that content sent through their APIs is not used to train their models. We cannot audit a third party's internal practices, so we are telling you what we do and what we require rather than making a promise about someone else's systems.
Who processes your data
| Processor | Purpose | Location |
|---|---|---|
| Base44 | Application hosting, database, authentication | United States |
| Stripe | Payment processing | United States |
| AI processing providers | Generating tailored resumes and documents | United States |
We do not sell, rent, or trade your personal information. We do not share your resume with recruiters, employers, or job boards. Nothing in Fitted sends your resume anywhere on your behalf. You export it and you decide where it goes.
We may disclose data if legally required, and will tell you unless prohibited from doing so. If we are acquired, your data may transfer as part of that transaction, and you will be notified.
If this list changes materially, we will update this page and notify account holders.
How long we keep it
Your content stays until you delete it or close your account. There is no automatic expiry, because a resume you wrote two years ago is still useful to you.
When you delete an item, it is removed from your account immediately. When you delete your account, your resumes, job targets, generated documents, voice profile, and tracked applications are deleted within 30 days.
Encrypted backups may retain copies for up to 35 days after deletion before rotating out. Billing and tax records are retained for 7 years as required by US tax law. This period cannot be waived on request.
Your rights
You can, at any time:
- See everything stored about you, from inside the app.
- Correct anything inaccurate by editing it directly.
- Delete individual resumes and documents, or erase all of your content at once.
- Download a machine-readable copy of everything, free, from your account page.
- Ask us for a copy of your data, or for deletion, by email.
If you are in the UK, EU, or EEA, you also have the right to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority.
If you are in California, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA, so there is nothing to opt out of. We will not discriminate against you for exercising any right.
We respond to requests within 30 days and honour them regardless of where you live.
Security
Data is encrypted in transit and at rest, and access is restricted to your own account. No system is perfectly secure, and we would rather say that than imply otherwise. If a breach affects your data, we will notify you and any required regulator without undue delay.
Children
Fitted is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us information, email us and we will delete it.
International transfers
Our processors are located in the United States and your data will be processed there. If you are in the UK, EU, or EEA, these transfers rely on Standard Contractual Clauses or another approved safeguard. You can request details of the mechanism used.
Cookies
We use cookies and similar storage that are strictly necessary to keep you logged in and to remember interface preferences. We do not use advertising or cross-site tracking cookies.
Changes
If we change how we handle your data in a material way, we will notify you before it takes effect rather than quietly updating this page.
Contact
Email rocci@stuccimedia.com for any privacy question, data request, or deletion request.