Privacy Policy

Haisleaf is built and run by an independent developer working solo, who decides how the personal data described here is used — the “controller”, if your local law uses that word. This policy covers the Haisleaf website, the editor and everything behind a sign-in.

A resume is unusually personal for a document: it is your name, your contact details, where you have worked and often where you live. This policy is written on the assumption that it deserves to be treated that way.

What you give us for an account. An email address, a display name if you set one, and a password — which is stored only as a hash and is never readable, by us or by anyone who obtained the database.

What you put in your resumes. Everything you type, paste, import or upload: your history, your contact details, any photograph or background image, the job postings you paste in to tailor against, and the version history of all of it. We store it so that you can come back to it.

What the servers see. Ordinary technical data that any web service receives: your IP address, the pages and endpoints you request, timestamps, and your browser’s user-agent string. We use it to keep the service running and to enforce rate limits, which is what stops one account or one address exhausting it for everybody.

What billing needs. If you subscribe, Polar collects and holds your payment details as merchant of record. We receive your subscription’s status, its period, and an identifier for your Polar customer record. We never receive or store your card number.

• To provide the service — storing your resumes, laying them out, producing exports, keeping your history. This is the contract between us.
• To keep it working and secure — logs, rate limiting, spotting abuse. Our legitimate interest in a service that stays up.
• To take payment — for the paid plan, through Polar.
• To run the optional AI features — only on your instruction, each time you ask for one.
• To contact you about your account — a security notice, a change to these documents, a billing problem.

We do not sell personal data. We do not run advertising, we do not profile you, and your resumes are not used to train any AI model.

Two features send text to a third-party AI provider: importing a resume from a file, and tailoring a resume to a job posting. Both are optional and neither runs unless you ask for it, on that occasion.

Importing. Your file is read in memory on our server and the words are pulled out of it there. The text is what goes to the provider. The file itself is never sent anywhere and is never stored — once the import finishes it is gone.

Tailoring. What goes is the rewritable text of your resume — the sentences a rewrite could touch — together with the job posting you pasted. What does not go: the document’s structure, the identifiers of anything in it, your links, your uploaded images or where they are stored, your account, or your email address. This is a property of how the two systems are wired together rather than a promise about our intentions.

The provider processes that text to return a result and does not use it to train its models. If you would rather nothing left at all, do not use these two features: everything else in Haisleaf — writing, laying out, exporting, sharing, version history — works without them.

The job posting you paste is also stored with your resume, so the tailoring panel can show you what it was written against. Deleting the resume deletes it.

Haisleaf sets one cookie. It holds your sign-in session, it is marked httpOnly so that page scripts cannot read it, and without it you cannot stay signed in. There is no analytics cookie, no advertising cookie and no third-party tracker on this site — which is also why you are not being asked to dismiss a banner.

The editor also keeps a few preferences in your browser’s own storage — your light or dark theme, how wide you dragged a panel. Those never leave your device and clearing your browser data removes them.

We use a small number of providers to run the service. Each one only receives what its job needs, each is bound to protect it, and none of them may use it for their own purposes.

Beyond that, we share personal data only where the law requires it, or where it is necessary to establish or defend a legal claim. If the service were ever transferred to somebody else, we would tell you before your data moved with it.

You can also share data yourself: a share link makes one resume viewable by anybody holding that link until you revoke it. Nothing about which job you are tailoring for is ever included in a shared or exported document.

Your account and your resumes stay until you delete them. Deleting a resume removes it and its version history; deleting your account removes the lot.

Server logs are kept for a short period for security and debugging. Billing records are kept for as long as tax and accounting rules require, which is longer than the rest and is not something we can shorten on request. Copies inside routine backups age out on their own schedule.

• Traffic is encrypted in transit, and the database and file storage are private.
• Passwords are stored as salted hashes using a deliberately slow algorithm, so the stored value cannot be turned back into a password.
• Uploaded images live in private storage. Nothing there is reachable by a public URL — each access is a short-lived signed link issued to you.
• Every read and write is scoped to the account that owns it, on the server, on every request.

No service can promise perfect security, and one run by one person should be especially careful about claiming it. If we ever discover a breach affecting your data, we will tell you and any regulator we are required to tell, without undue delay.

Depending on where you live you may have the right to a copy of your data, to correct it, to delete it, to restrict or object to some uses of it, and to take it elsewhere. We extend all of these to everybody, wherever they are, because there is no sensible reason to do otherwise.

• A copy. Every resume can be exported as a PDF or as plain text from the editor, at any time, on any plan.
• Correction. Your account details and everything in your resumes are editable by you.
• Deletion. There is no self-service account deletion yet. Email support@haisleaf.com from the address on the account and we will delete it within 30 days.

Write to support@haisleaf.com for any of it. If you think we have handled your data badly, please tell us first — and you also have the right to complain to the data protection authority where you live.

Haisleaf is operated from Pakistan and its providers run infrastructure in several countries, so your data may be stored or processed outside the country you are in. Where a transfer needs a legal basis — for example out of the UK or the EEA — it is covered by the standard contractual clauses in our agreements with those providers.

Haisleaf is not for children. You must be at least 16 to have an account, and we do not knowingly collect data from anybody younger. If you believe a child has an account here, write to support@haisleaf.com and we will remove it.

As the service grows this policy will change with it — a new provider, a new feature that handles data differently. The date at the top says when it last moved. If a change matters to you, for instance because something new starts leaving the service, we will tell you by email or in the app before it takes effect.

Privacy questions, requests and complaints all go to the same place: support@haisleaf.com.

The Terms of Service cover the rest of the relationship — what the service promises, what it does not, and how billing works.