After DD214

Privacy Policy

Privacy Policy

Effective April 26, 2026

1. Who we are

After DD214 (“we,” “our,” or “us”) operates the After DD214 service at afterdd214.com. Questions about this policy can be submitted via the contact form.

2. What we collect

We collect information in two ways:

  • ◆Account data. Your email address, collected when you sign up or sign in. We use Supabase for authentication; passwords (if set) are hashed and never stored in plaintext.
  • ◆Resume content. The resume text and job descriptions you upload or paste. This content is used to generate your rewrites and scores.
  • ◆Usage data. Standard server logs (IP address, browser type, pages visited, timestamps). We use this to operate and improve the service.
  • ◆Payment data. Payments are processed by Stripe. We store only a Stripe customer ID — no card numbers, bank details, or payment credentials reach our servers.

3. How we use your data

  • ◆To provide, operate, and improve the After DD214 service.
  • ◆To authenticate you and manage your account.
  • ◆To process your resume rewrites and scoring requests via the Anthropic Claude API. Resume content is sent to Anthropic solely to fulfill your request and is subject to Anthropic's data handling policy.
  • ◆To send transactional emails (sign-in codes, receipts, password resets). We do not send marketing email without your consent.
  • ◆To detect and prevent abuse, fraud, or misuse.

4. Data retention

We retain your account and resume data for as long as your account is active. You may delete your account at any time from Account settings, which permanently removes your data from our systems within 30 days.

5. Third-party services

  • ◆Supabase — authentication and database hosting (EU/US regions).
  • ◆Anthropic — AI processing for resume rewrites and scoring.
  • ◆Stripe — payment processing.
  • ◆Resend — transactional email delivery.

We do not sell your data to third parties and do not use your resume content for advertising purposes.

6. Cookies

We use session cookies to keep you signed in. We do not use tracking cookies or third-party advertising cookies. The only cookies set are those required for authentication (Supabase session tokens).

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, use the contact form. We will respond within 30 days.

8. Children

After DD214 is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the effective date above and, where appropriate, by email. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this policy can be submitted via the contact form.