Tailor. privacy policy
Updated October 1, 2026. Developer: Nathan Fennel.
Local career library
Tailor stores your profile, contact details, work and education history, applications, resumes, cover letters, CVs, saved content and preferences on your device. Local API history can contain full requests and responses. Imported or uploaded files may also be copied into Application Support. API keys are stored in the system Keychain. There is no required Tailor account or full-library cloud sync.
Optional signature handoff publishes one signature PNG, its date and a coarse device type through your Apple iCloud key-value store for explicit import on another supported device. Contacts permission lets the app read contacts locally for its picker and name matching, then copy the fields you select into your career library.
AI choices and transmitted content
Online AI features require acceptance of the current service disclosure. Depending on the action, they send career data, job descriptions and URLs, drafts, messages, writing samples, PDFs or images to the configured Tailor backend and OpenAI. Profile name, email, phone, location, profile URLs, work history, education and skills can be included even when hidden on an exported resume. Resume visibility controls affect document rendering; they do not limit all data sent to AI. Review your profile and selected material before starting an online action.
Direct OpenAI mode sends supported requests directly to OpenAI with your own key. Some web extraction still uses the Tailor service. In hosted mode, a supplied OpenAI key is forwarded to the configured server for the request. A persistent installation/device UUID supports usage limits and promotion accounting. Choose a server you trust. Disable AI in Settings stops new AI requests; it does not recall requests already sent or erase service records.
Service retention
The default Tailor service does not store a cloud copy of your whole career library. It does retain specific caches and operational records. Extracted job-posting content and structured results are cached for seven days under a hash of the normalized submitted URL. Unmatched company and university names, lookup counts and generated lookup guesses have no automatic expiration. Device UUIDs, credit usage, quota/reserve values, promotion redemption and known-device records can also persist without automatic expiration. The 30-day credit calculation window is not a deletion deadline. Aggregate counters have no automatic expiration. Some temporary credit bonuses expire at their configured deadline. Company-values results in server memory are considered stale after 30 days and can disappear sooner when the runtime restarts.
IP-based rate limiting, hosting, database and AI services process request and security information. No universal retention deadline is established for their logs. PDF import uploads a file to OpenAI Files; the service requests deletion after processing or failure and attempts to remove its temporary copy. Cleanup can fail, and this does not retroactively delete uploads from older releases. OpenAI's API data controls describe applicable retention and data use; no special zero-retention arrangement is claimed. OpenAI describes default abuse-monitoring retention of up to 30 days, with policy exceptions. The current job-search and job-description web-search routes use its Responses API without disabling response storage; the documented default application-state retention is at least 30 days.
Company logos and version differences
Prepared iOS 1.0 build 11 and macOS 1.2 build 11 add an initially off "Online company logos and colors" choice in Settings > API. If enabled with your Logo.dev publishable key, Logo.dev receives company and profile-link domains, that key, your IP address and request metadata. Its API privacy policy describes logging for delivery, metering and security without a fixed deletion deadline. Logos provided by Logo.dev.
If AI sharing is also accepted, online company colors can visit the company website from your device and send its page content to the configured Tailor service for color extraction. Turning the logo choice off cancels active work and rejects results from that permission session; it cannot recall sent requests or erase provider logs. Existing cached images, colors and local initials remain available. Phone-number formatting in these prepared builds uses the profile address and device locale without an IP lookup.
These changes do not update older installed copies. Earlier versions, including distributed macOS 1.1, may automatically request logos from Clearbit, optionally Logo.dev, and Google's favicon service, and fetch company websites with their existing feature settings. Build 11 removes new Clearbit and Google favicon requests. Earlier provider responses may remain in the local cache. Each destination receives connection information under its own practices.
Other online features
Importing selected web pages or blog content contacts those websites. Web extraction can load JavaScript, cookies and page resources through a web view or server browser. Optional Adzuna search receives search criteria derived from your experience and location and the API credentials you configure; the default job-search route uses Tailor and OpenAI web search. If no location is supplied, the hosted service can use an approximate city or region provided by its hosting platform from the connection IP to select job recommendations. Links you open in the system browser use that browser's privacy controls. User-directed exports and sharing go to the destination you choose. Apple handles optional consumable tips; tips unlock no features or credits and are not subscriptions.
Deletion and copies
Delete Local Library removes stored profile, career, CV, application, saved-content, API-history and usage database records in one local transaction. It retains API settings and Keychain keys, backup/export files, retained imported-file copies, iCloud signature handoff and provider records. Backups are restored only when you choose to restore them. Uninstall behavior varies by platform and storage location. Deleting a local record or library does not erase server caches, provider files or logs, Keychain items, exports or copies on another device. Manage separate copies through their storage controls and contact the developer about developer-held service records.