Skip to main content
Margin
← Margin

Privacy Policy

Effective September 30, 2026

Margin is operated by Douglas Wang. This policy explains what data we collect, why, and what you can do with it.

What we collect

  • Account data — your email address and, optionally, your name. Required to create and maintain your account.
  • Resume and job description content — the text you submit for tailoring. Stored in your account and sent to our AI provider (see below).
  • Usage data — pages visited, features used, and actions taken within the product. Collected via PostHog only with your consent.
  • Error data — technical errors captured automatically via Sentry to help us fix bugs. May include the page you were on and browser information.
  • Log data — IP addresses and request metadata captured by our hosting provider (Vercel) and database provider (Supabase) as part of normal server operation.

Why we collect it and our legal basis

Contract: Account data and resume content are necessary to deliver the service you signed up for. Without them, Margin cannot function.

Legitimate interests: Error tracking, performance monitoring, and server logs help us keep the service stable, fast, and secure.

Consent: Analytics cookies (PostHog) are only set after you explicitly accept. You can decline and the product works the same. If you opt in to Improve tailoring with my data in Settings → Privacy, that's a separate consent from analytics cookies, covering the training-data use described below.

AI processing

When you tailor a resume, the text of your resume and the job description are sent to Anthropic (makers of Claude) via their API — including when we extract text from an uploaded PDF or DOCX file. We don't separately attach your account email or name to this request, though your resume text itself may include your name and contact details, since that's the document being tailored. Anthropic's data handling is governed by their privacy policy. As of the effective date of this policy, Anthropic does not train on API inputs by default, and retains API inputs and outputs for up to 30 days before deletion.

A small, randomly-sampled fraction of tailor requests may also have their AI-generated output reviewed a second time by an AI system, using the same resume and job description text already sent for the original tailoring request. This is for internal quality and accuracy auditing only, and only runs if you've accepted analytics cookies.

If you turn on Improve tailoring with my data in Settings → Privacy, a copy of your completed reviews is stored separately and may be reviewed in batches to improve our tailoring system over time. This is off by default. An automated check attempts to strip identifying details before storage, and anything it can't verify as clean is discarded rather than stored. We don't store your account ID with this copy, but we do keep an identifier derived from the review's ID. Other records we hold, such as your reviews or, if you accepted analytics cookies, usage events, can identify that review, so we may be able to match a stored copy back to you, including after you delete your account. We don't currently offer removal of an individual contribution. Turning this off only stops new contributions from being collected.

Third-party services

  • Supabase — database and authentication
  • Vercel — hosting and infrastructure
  • Anthropic — AI processing of resume and JD content
  • PostHog — product analytics (consent-gated)
  • Sentry — error monitoring
  • Stripe — payment processing for subscriptions and one-time purchases; receives your email address to create a billing customer record
  • Google and LinkedIn (Sign-In) — if you choose to sign up or log in using Google or LinkedIn, we receive your name, email address, and profile photo from that provider and store them in your Margin account to create and authenticate it. We do not request or receive access to your Google or LinkedIn contacts, files, or any other data beyond basic profile information, and we do not use this data to train AI or machine learning models. This information is retained for as long as your account exists, the same as account data described above.
  • Jina Reader — if you paste a job posting URL instead of the text directly, that URL is sent to Jina Reader to fetch the page content

We do not sell your data. We do not share it with advertisers or data brokers.

Your rights

Access and portability: Download all your data at any time from Settings → Privacy → Export data — your account details, master resume, tailored versions, applications, and project-pack credit history. Anonymized training contributions aren't included in the export (see "AI processing" above).

Deletion: Delete your account from Settings → Privacy → Delete account. This permanently removes your data from our database and cancels any Stripe billing record, with one exception: an anonymized training-data copy (see "AI processing" above), if you opted in, is not deleted along with your account and may still be matchable back to you afterward. Some data may persist briefly afterward in infrastructure backups, error-monitoring records, or with processors under their own retention terms (see below) before it is fully purged.

Correction: Update your name at any time from Settings → Account.

Withdraw consent: Change your analytics cookie choice at any time from Settings → Privacy.

If you are in the EU or UK, you also have rights to restrict processing, object to processing, and lodge a complaint with your local supervisory authority.

Data retention

We retain your data for as long as your account exists — there is no automated deletion based on inactivity today. If you delete your account, your data is removed from our database immediately and your Stripe billing record is canceled, except for an anonymized training-data copy as described under "AI processing" and "Deletion" above; some processors we use (Anthropic, PostHog, Sentry, and our infrastructure providers) retain limited records under their own retention terms for a short period afterward, described above where applicable.

Margin currently operates out of, and processes data in, the United States. If you access Margin from outside the United States, your data will be transferred to and processed in the United States.

Children's privacy

Margin is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this policy

If we make a material change to this policy, we'll update the effective date above and notify you by email or an in-product notice before the change takes effect.

Contact

Privacy questions, data requests, or concerns: dwang2015@gmail.com