Privacy policy
Effective and last updated November 15, 2026.
Who we are
TailorLock is run by Quietlathe LLC, a Wisconsin limited liability company, 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913. Contact: ops@quietlathe.com. We are the controller of the personal information described here.
The short version
- The three free tools run in your browser. Your text is not sent to us.
- If you join the early-access list, we keep your email address and a few details about the signup. We email the list once, when checkout opens.
- The tailoring app and checkout are not live yet. The sections below that cover them describe what will happen when those features are live.
- We don't sell your personal information and don't share it for cross-context behavioral advertising. We run no analytics and set no cookies.
What we collect
| Data | When | Why |
|---|---|---|
| Request data: IP address, browser user agent, the page requested | Every visit. Cloudflare processes it to serve and protect the site. | To deliver the site, prevent abuse and keep it secure |
| Early-access signup: product, email address, optional plan, the page you signed up on, a timestamp, and a one-way hash of your IP address | When you submit the early-access form | To email you once when checkout opens. The IP hash is used only for spam rate limits. |
| Emails you send us | When you write to ops@quietlathe.com | To answer you |
| Tool input (resume text, job text) | Free tools: never reaches us. Tailoring app: when it is live, see below. | To provide the feature you asked for |
| Free-use counter: a salted one-way hash of your IP address and a count | When the tailoring app is live | To enforce the free tailorings. Kept 30 days, then deleted automatically. |
| Pass records: a hash of your pass token, plan, dates, use count, and Stripe session and payment IDs | When checkout is live and you buy a pass | To run the pass and refunds. Kept until 120 days after the pass ends. |
We have no user accounts or login. We do not collect your name unless you give it to us in an email.
What happens to your resume text
- Free tools (match score, PDF reader, invented-fact check): everything runs in your browser. Nothing is sent to a server.
- Files: .docx and .pdf files are read in your browser. The file is not uploaded. Only text you choose to tailor would be sent.
- Tailoring app (when it is live): your resume text and the job post are sent to our server in one request and forwarded to Anthropic, our AI provider, which writes the tailored version. The result comes back to your browser. We don't write the resume, the job post or the output to a database, file or log. Anthropic receives this text under its commercial terms for API customers. Our understanding is that Anthropic does not train its models on API inputs by default, but we do not control Anthropic's practices and they may retain the data for a limited period or as the law requires. Read their current terms and privacy policy: anthropic.com/legal/privacy. Don't submit anything you don't want processed this way.
- Exports: PDF and Word files are created in your browser.
Cookies and browser storage
This site sets no cookies. It uses no analytics, advertising or tracking scripts. When the tailoring app is live, a pass you buy will be saved as a token in this browser's localStorage so the pass keeps working; clear your site data to remove it. Your resume text is not saved in your browser between visits. The free tools keep nothing in localStorage.
How we use information
To run the site and keep it secure; to email the early-access list once when checkout opens; to provide the tailoring app and passes once they are live; to process payments and refunds; to answer your messages; and to meet legal obligations.
Who else handles data
- Cloudflare: hosts the site, runs our server code and our database (Pages, Functions, D1), and processes request data such as IP address and user agent to serve and protect the site. Cloudflare privacy policy.
- Anthropic (when the tailoring app is live): receives resume and job text, as above. Privacy policy.
- Stripe (when checkout opens): will process payments. Stripe collects your payment details and email address; we never see or store full card numbers. Stripe privacy policy.
- Resend (when checkout opens): may send the email containing your pass link, using the address you gave Stripe. Resend privacy policy.
We also disclose information if the law requires it, to protect our rights or users, or in a business sale or reorganization. We never sell or share the early-access list.
How long we keep it
- Early-access list: until we send the launch email and you have had a chance to opt out, or until you ask us to remove you. We may keep the list for as long as the product is being launched.
- Free-use hashes: 30 days. Pass records: until 120 days after the pass ends. A one-time token copy used to activate a pass: up to 1 hour.
- Emails to us: as long as needed to deal with your request and keep records.
- Cloudflare keeps its own request logs under its own policies.
Security
We use HTTPS, store hashes instead of raw IP addresses and pass tokens, and keep the data we hold to a minimum. No system is perfectly secure, and we can't guarantee absolute security.
Your California privacy rights (CCPA/CPRA)
If you are a California resident you have the right to know what personal information we collect, use, disclose and keep; to request deletion; to correct inaccurate information; to opt out of the sale or sharing of personal information; and not to be treated worse for using these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. In the past 12 months we have collected the categories shown in the table above (identifiers such as email address and IP address data, and internet activity such as the page you signed up on) for the purposes above.
To make a request, email ops@quietlathe.com. We will ask you to confirm the request from the email address on the list, or to give details that match our records. An authorized agent may make a request for you with your written permission; we may ask you to confirm directly. We respond within 45 days, and tell you if we need more time. Because we don't store resume text, we have none to give you or delete.
Visitors in the EEA and the UK
Quietlathe LLC is the controller. Our lawful bases are: your consent when you join the early-access list (you can withdraw it at any time by emailing us); our legitimate interest in running and securing the site and preventing spam; performance of a contract when you buy a pass; and legal obligation. You have the right to access, correct, delete, restrict or object to our use of your data, to data portability, and to withdraw consent. To use a right, email ops@quietlathe.com. You may also complain to your local data protection authority.
International transfers
We are in the United States, and Cloudflare, Anthropic, Stripe and Resend may process data in the United States and other countries. If you visit from outside the US, your data will be transferred to and processed in the US, where data protection laws may differ from yours. Where required, we rely on the transfer safeguards our providers offer, such as standard contractual clauses.
Children
This site is not directed to children under 13, and we do not knowingly collect personal information from them. For visitors in the EEA and UK, we do not knowingly collect information from anyone under 16. If you think a child has given us information, email us and we will delete it.
Changes
If we change this policy we will update this page and its date. If a change is significant, for example before we turn on the tailoring app or checkout, we will say so here.
Contact
Quietlathe LLC, 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913. ops@quietlathe.com.