Privacy · 15 September 2026
What we collect, and what we never see.
The check runs in your browser. Your resume is sent to us only when you ask for a rewrite or ask a question about it, and it isn't stored.
Who we are
Referred is operated by Abdullah Taimoor, an individual based in the United Arab Emirates, who is responsible for the personal data described here. Contact: msaifullah.abdullah@gmail.com. Referred is independent and not affiliated with the U.S. Office of Personnel Management, USAJOBS, or any federal agency.
The check
When you drop or paste a resume, it is read and checked by code running in your browser. The file and its text are not uploaded, and we cannot see the result. The announcement you paste is treated the same way. So that you can sign in and come back to the same report, the text is kept for up to 24 hours in your browser's own storage on your device, then removed. Choosing “Check another resume” removes it at once.
Your account
Signing in with Google or an email link gives us your name, your email address and the provider's identifier for your account, and nothing else. We do not see your Gmail, Drive, contacts or anything else in your Google account. Against your account we keep: whether and when you used the one free rewrite, what you have bought, and a count of the questions you asked the “ask” box each day (a number, not the questions). Accounts are hosted with Supabase in the United States. Signing in sets one cookie that holds your session; it is strictly necessary and is not used for tracking.
Your match profile
If you save a match profile, we keep against your account the search it describes: occupational series codes, a grade range, places and a radius, keywords, the hiring paths you ticked, whether you want the daily email, and when we last checked USAJOBS for you. It never includes your resume. The announcements themselves come from the public USAJOBS API through our server; the comparison with your resume runs in your browser. If the daily email is on, we keep a list of the announcement numbers we have sent you, for 90 days, so no announcement is sent twice; the email is delivered by Resend, which sees your address and the message. “Remove my profile” on the matches page deletes all of it, and every email has a link that stops the emails.
The rewrite and the ask box
When you ask for a rewrite, or ask a question about one, the resume text, the announcement, your answers and your question are sent to our server and on to our AI provider, OpenRouter, which passes them to the maker of the model that does the work. We do not store any of it; the result is shown to you and is not kept by us. Our provider does not keep your text unless we turn logging on, and we have not. The model's maker processes it under its own terms, keeps it only briefly for abuse monitoring, and does not use it to train models.
Payments
Payments are taken by Whop on its own checkout page. Whop receives your card or wallet details; we never do. Whop then tells us that a purchase happened, which plan, the email address on it, and the dates it runs, so we can turn on what you bought. We keep those notifications as our record of the sale. Whop's privacy policy applies to the payment itself.
Hosting, logs and analytics
The site runs on Cloudflare, which keeps ordinary request logs (such as IP addresses, request paths and times) for its own operation. Our own error logs record the request path and the error text for a limited time, never a resume. Since 15 September 2026 we use Cloudflare Web Analytics to count visits and page views. It sets no cookies, does not follow you across sites, and records the page, the referring site, the country and the browser type. We also load Whop's pixel on every page. It records the pages you view and, if you buy, links the purchase to the visit that led to it, so that Whop can attribute sales, including to the people who refer buyers to us. It may keep an identifier in your browser for that purpose.
Where your data goes
Referred is operated from the United Arab Emirates. Our providers (Cloudflare, Supabase, Whop and our AI provider) process data in the United States. By using Referred you accept that your data is processed there.
Keeping, seeing and deleting
Account records are kept while your account exists. Purchase records are kept for as long as we are required to keep records of sales. Email msaifullah.abdullah@gmail.com from the address on your account to see what we hold about you, to correct it, or to delete your account; we reply within two working days. Deleting your account removes it and its ledger; records of sales that we must keep are kept.
Age
Referred is for adults applying for work. It is not directed at anyone under 18, and we do not knowingly keep an account for anyone under 18.
Changes
This page is dated at the top. When it changes, the date changes with it.