Privacy Policy
What we collect
The profile you enter at setup (contact details, work history, education, work authorization and job preferences), your résumé, the applications we send for you, and, if you arrived from an ad, the campaign parameters on that link.
Self-identification data
Gender, race, veteran and disability answers are optional. They are stored separately from your profile, used only to answer the equivalent optional questions on applications, and are write-only: they are never displayed back to you, to staff, or to administrators.
Who receives it
Employers, when we submit an application in your name. Our infrastructure providers (Google Cloud and Firebase for hosting and storage, Google Document AI for reading uploaded documents, Stripe for payments, Resend for email). OpenRouter and the AI model providers it routes to, which receive your résumé text and profile answers to draft application text. We do not sell personal information.
Your application email address
Applications go out with a private FormFeather address instead of your own, so employers and security-code emails reach us first. We store what arrives there and forward it to the email on your account.
Advertising
If you reach the site from an ad we record the campaign parameters and click identifier on that visit so we can tell which campaigns produce signups. This is stored on your account and is not shared with advertisers beyond the conversion itself.
Cookies
We use a session cookie to keep you signed in; the service doesn't work without it. If you arrived from an ad, your browser's local storage holds the campaign attribution described above until it's recorded on your account.
Keeping and deleting it
Your data is kept while your account exists. Ask us to delete it and we remove your profile, résumé and application history. Applications already submitted to employers are held by those employers and are outside our control.
Your rights
Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, get a copy in a portable format, object to or restrict how we use it, and withdraw consent for anything that depends on it, like the self-identification answers. Ask from the address on your account; we'll act on it within the time your local law sets (30 days under CCPA, one month under GDPR).
International transfers
We host data with Google Cloud in the United States. If you're in the UK or EU, that means your data leaves the region it was collected in; that transfer runs under Google Cloud's standard contractual clauses.
Children
FormFeather is for people old enough to work and enter an agreement with us. We don't knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy as the product changes. We'll change the date below when we do.
Contact
Reach us at the address on your account for any request about your data.
Last updated October 7, 2026