Security

How RoleFathom handles resumes, PII, and application proof.

Your data stays scoped to you

Target configs, resumes, and application records are private to your account. There is no team tenancy model that shares candidate materials across clients.

What we store

• Account authentication details
• Resume source text and tailored per-role variants
• Cover letters, screening answers, submission timestamps, and confirmation screenshots
• Sprint and billing metadata via Stripe

Operator-assisted submissions

When an employer site requires CAPTCHA, MFA, or other friction, the pipeline pauses for a human operator instead of bypassing protections. You authorize operators to submit as your agent under the Terms of Service.

Local model option

Resume tailoring can run against a local OpenAI-compatible model endpoint you configure. Configure that endpoint carefully; do not point production workloads at untrusted hosts.

Security questions: zehao.zhou10@gmail.com.