Privacy Policy
Last updated: August 2026
ReviewStack is available to small hiring teams worldwide. We process account data (email, name via Clerk) and workplace data you upload (job descriptions, resumes, review decisions) to provide the service.
Resume files and derived analysis results are stored in our backend (Convex) and deleted on the retention schedule (90 days from first successful upload) or when you delete a job/account. Notifications are retained for 30 days.
Before AI scoring, we apply lightweight deterministic redaction (for example emails and phone-like strings). Remaining resume and job text is sent to third-party AI providers to generate rubrics and scores. That processing may occur in regions outside your country, including where the AI provider hosts its API. Optional OCR for scanned or image PDFs uses a separate document-intelligence provider when enabled.
Authentication is provided by Clerk (Google). Payment data is handled by Creem as Merchant of Record; we do not store card numbers. The site is hosted on Vercel, which also provides privacy-oriented page analytics and performance metrics (for example page views and Core Web Vitals). We do not send resume contents or filenames into those analytics products.
We do not claim GDPR certification, contractual data-residency guarantees, or suitability for government, healthcare, or other highly regulated hiring stacks out of the box. If those requirements apply to you, contact us before uploading candidate data.
Contact: wuyuejaymay@gmail.com