Legal

Privacy Policy

Last updated: October 28, 2026

This Privacy Policy explains how AI Cover Letter Maker ("we", "us") collects, uses and protects your personal information when you use our website and services (the "Service"). AI Cover Letter Maker writes cover letters for job seekers. You paste your resume and a job description, and an AI model writes a cover letter for that job, which you can edit, copy, download or print.

Information we collect

Account information: your name, email address and profile picture from the Google account you sign in with. You need an account to write a cover letter; you don't need one to read the example letters.
Resumes, job descriptions and letters: when you write a cover letter, we receive the resume and job description you paste, the job title, company and tone you choose, and the letter the AI model writes. We use them only to write that letter and send it back to you. We don't store them: they aren't saved to our database, kept in a cache or written to our logs. The letter stays in your browser until you copy, download or print it. If you upload a resume file (PDF, Word or text), your browser reads the text out of it on your device; the file itself is never sent to us, only the text in the resume box when you write a letter. Your resume can contain personal details, such as your phone number or address; leave out anything the letter doesn't need.
Usage records: for each letter we record your account, the time, whether it worked, how many AI tokens it used and its estimated cost, so we can count your free letters and credits. These records don't contain your resume, the job description or the letter.
Feedback: the message you send through the feedback form, and any images you attach to it.
Billing information: your orders and credit history. Our payment provider holds your card details. We never see or store them.
Technical information: your IP address, browser and device type, and error logs.

How we use your information

To create and secure your account and sign you in.
To write the cover letters you ask for.
To manage your credits and purchases.
To read and answer your feedback.
To send service emails, such as payment notices.
To prevent fraud and abuse, limit how often free AI requests can be made, fix errors and meet legal obligations.

We do not use your resume, job descriptions or letters to train AI models. We do not sell your personal information.

Service providers

We share your information only with providers that help us run the Service, and only as much as each one needs:

Cloudflare: hosts the website and runs scheduled jobs (Cloudflare Workers). Stores files, such as feedback images, in private storage (Cloudflare R2).
Neon: hosts our database, which holds your account, feedback, billing records and usage records.
Alibaba Cloud Model Studio: the AI model it hosts (now DeepSeek V4.1 Flash) writes your cover letter. We send it the resume and job description you paste and the job title, company and tone you choose, not your account's email address. It processes this text outside the United States, under its own data terms.
Waffo Pancake: processes card payments as our Merchant of Record.
PayPal: processes your payment if you choose to pay with PayPal. We receive the payment's status and amount, not your PayPal login or card details.
Google: signs you in, if you choose Google sign-in.
Resend: delivers our emails.
Cloudflare Web Analytics: counts page views and measures how fast pages load, without cookies and without building a profile of you.
PostHog: if analytics is on, measures page visits, signups, sign-in starts, letters written, resume file uploads (the file's type and whether it could be read, never its name or contents), copies, Word downloads and printing, the credit packs page, checkout starts and successful payments, so we can improve the Service. The first page view of each visit also carries the referring site's address without its query and any utm_ campaign tags in the link. Events carry a pseudonymous account identifier and limited product, credit and price details. We do not send resumes, job descriptions, letters, email addresses or payment credentials. We do not enable session replay.
Sentry: if error monitoring is on, receives error reports so we can fix bugs. We use it for errors only, with no session replay.

We also share information when the law requires it.

Google user data

When you sign in with Google, we receive your name, email address and profile picture from your Google account, and nothing else. We use them only to create your account, sign you in and show your name and picture in your account. We don't access your Google Drive, contacts or any other Google data. We never sell this information. We share your email address only with the service providers above that run the Service, such as Resend for emails and Waffo Pancake at checkout. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove our access at any time in your Google account settings, and delete your account on your profile page.

Cookies and local storage

A session cookie keeps you signed in.
A cookie remembers whether the dashboard sidebar is open, for 7 days.
Your browser's local storage remembers the sign-in method you used last.
If analytics is on, local storage holds a random browser identifier and your last signed-in account identifier for up to 30 days. Signing out or switching accounts resets the browser identifier.
A first-party cookie (rs_ft) and local storage remember how you first reached the site, for 90 days: the referring site's address without its query, any utm_ campaign tags in the link, the page you landed on, your browser's language and the time. If you create an account, we save this with it to learn which channels bring users.

We do not use advertising cookies.

Data security

We use HTTPS for all traffic. Feedback images are private to your account. We open stored files only through signed links that expire after one hour. We limit who can access production systems.

Retention

Resumes, job descriptions and letters: not kept. We discard them once the letter is sent back to your browser.
Usage records: kept with your account; when you delete your account, they stay without your name or email for our cost records.
Feedback: we keep your feedback and its images until you delete your account. Then we delete them with it.
Account: we keep your account information while your account is open. When you delete your account, we delete your personal information within 30 days, unless the law requires us to keep it longer.
Billing records: we keep them as long as tax and accounting laws require.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to restrict or object to its use, and to withdraw consent. You can delete your account on your profile page at any time. For other requests, email support@aicoverlettermaker.com. We reply within 30 days. You can also complain to your local data protection authority.

Emails

We send only service emails, such as payment notices. We do not send marketing emails.

Where we process data

We and our providers process data in the United States and other countries. Where the law requires it, we protect international transfers with appropriate safeguards.

Children

The Service is for adults (see our Terms of Service). It is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we hold personal information from a child under 13, we delete it. If you think a child has given us information, email support@aicoverlettermaker.com.

Third-party services

Waffo checkout, PayPal and Google sign-in follow their own privacy policies.

Changes

We may update this policy. If the changes are material, we will tell you by email or in the Service at least 15 days before they take effect.

Contact

Questions about this policy: support@aicoverlettermaker.com.