Privacy

Privacy Policy

Last updated: August 7, 2026

Who we are

Bounce (careerbounce.io) helps job seekers see what applicant tracking systems read from their resume and fix it honestly. This policy explains what we collect, why, and your choices. Questions: use the contact page.

The free scan: your resume stays on your device

The "Beat the Bots" scan runs completely in your browser. Your resume file is parsed on your device and is never transmitted to our servers. To unlock your results, you provide your first and last name and email address (phone is optional). We use those details, along with your score and the findings this scan produced (never the resume file itself), to email you the one report you asked for. Career tips and product updates are separate and entirely optional: you get them only if you tick the optional checkbox, and you can decline it and still receive your report. Every email includes a one-click unsubscribe, and you can ask us to delete your information at any time through the contact page. We do not sell your personal information.

A few of those findings quote a short line back from your resume so you can see which line we mean, for example the bullet we want you to rewrite. That means a fragment of your own text is sent with them. Our server strips the quoted fragments out the moment the scan arrives, before anything is stored or emailed, so the fragment is transmitted and not kept.

Bounce Studio and Blaise: what paid tools process

• Studio sends the resume content you type or upload, and any job posting you provide, to our AI provider (Anthropic) to tailor your documents. We do not use your content to train AI models. Your working drafts live in your own browser storage.
• Profile Check is free and needs no account, and its scoring runs entirely in your browser. Pressing Rewrite my headline and opening is the one part that does not: that button sends the headline, the first 1200 characters of your About section, job titles, skills and target role you entered to the same AI provider (Anthropic). The request is rate limited by a counter keyed to your IP address, kept for the hour it covers. Nothing you typed is stored against you, and nothing is used to train AI models.
• Blaise uses your browser's own speech recognition to turn your spoken answers into text, and that browser may send the audio to its own speech service. Bounce never receives the audio. We send the text to generate questions, keep the session professional, and write your feedback report. Interview sessions are stored temporarily (about 2 hours) and then expire automatically.
• Blaise's spoken voice is generated on your own device. The first spoken session downloads a voice model and the engine that runs it, about 89 MB in total. Your browser keeps the model itself, so later sessions do not download it again; the smaller engine files are re-fetched after a Bounce update, like the rest of the site. After that first download, nothing you hear is sent anywhere to be made: not the interview questions, not the Your Story prompts, and not the support answers. This used to be done by a third-party voice provider, which meant the exact text being spoken left your device. It no longer does. If your device cannot run the model, your browser's own built-in voice reads the text locally instead.
• Where the voice model is kept is your browser's own storage, and nothing on our side ever takes it back. Each voice is a separate model, so picking the other one downloads and keeps a second. Both stay on your device until you clear this site's data in your browser.

Payments

Payments are processed by Stripe. We never see or store your card number. We keep your email, plan, and subscription status so your purchase unlocks the product. Financing options (Affirm, Klarna, Afterpay) are provided by those companies under their own terms and privacy policies.

What we keep, and for how long

• Lead and report emails: until you unsubscribe or ask us to delete them, and in any case a lead that stays inactive (no new scan or email activity) for about 13 months is removed automatically. If you unsubscribe, we keep only a minimal suppression record so we never email you again.
• Account entitlement (email, plan, status): while your plan is active and as required for tax and accounting.
• Contact messages: up to 180 days, so we can resolve your issue.
• Interview sessions: about 2 hours, then they expire.
• Your Story: the employers, achievements and numbers you dictate or type into the story interview. Kept while your account exists, because the point of it is that Studio can only write from what you actually said. Deleted when you ask.
• Your Journey: the companies and roles you apply to, the stage each reaches, and the outcome. Kept while your account exists.
• Interview debriefs and 30/60/90 plans: what you write about a specific interview at a named company, and the plan naming a new employer. Kept while your account exists.
• Scout and Career Watch: your target titles, location, the roles already shown to you, and the monthly career snapshot. Kept while your account exists.
• Contact messages also record the IP address the message came from, for the same 180 days, so we can tell a real person from a flood of automated ones.
• How you used the product: a record kept under your email address, written the first time you use a signed-in tool (Studio or Your Story). It holds the day you first used one, the last day you used one, how many separate days you have used them, and the date you first did certain things: your first tailored resume, your first cover letter, your first polish, starting Your Story, the day you came back for a second separate day, and the day you were first active a week or more after your first one. Those last two are dates as well, and an earlier version of this list left them out. We keep it to see whether the people who sign up actually get use out of what they signed up for. It carries no resume text and no scan content, but it is keyed to your address, so it is not one of the anonymous counters below. Unlike the lead record above, this one has no expiry timer on it: it stays until you ask us to delete it, and a deletion request removes it.
• Anonymous counters (like which headline converts better): contain no personal information.

The four career records above are the most personal thing here, and an earlier version of this page did not list them. They persist rather than expiring because a resume built from a story you told six months ago has to still be able to point at that story. If you would rather they did not, email privacy@careerbounce.io and we will delete them and tell you what was removed.

Accessibility

Bounce should be usable with a keyboard and a screen reader, and we would rather tell you exactly where we are than claim a standard we have not audited against.

What we have done. Every page has a skip-to-content link. The free scan result announces itself when it appears, so it is not silently rendered past you. The free scanner works without a mouse. Buttons and inputs carry real labels rather than icon-only controls.

What we have not done. There has been no full WCAG 2.1 AA audit and no testing with real assistive technology by people who depend on it. We are not going to put a conformance badge on this page on the strength of an automated check, because that is a claim about your experience that we have not earned.

Known gaps. Bounce Studio is a dense two-column editor and its drag-to-reorder controls have no keyboard equivalent yet. Blaise, the spoken interviewer, needs a microphone and offers a typed fallback, but the voice practice itself is not usable without speech.

If something blocks you, email support@careerbounce.io and say what you were trying to do. That goes to a person, and an access problem jumps the queue ahead of the 72-business-hour reply we promise for everything else. We will fix it and tell you when it is done, and that is a real commitment rather than a form letter.

What we never do

• We never sell or rent your personal information.
• We never post anything anywhere on your behalf.
• We never use your resume content to train AI models.
• We do not load third-party tracking or advertising scripts on this site. Nothing here calls out to an analytics or ad network from your browser. We do keep our own record of which ad click brought you here, and the cookie section below says exactly what that is.

Cookies and local storage

We use your browser's local storage for practical things only: your drafts, your sign-in token, and remembering which version of our copy you saw so tests stay consistent.

We set up to three cookies. Two hold no more than a name; the third holds an advertising click identifier. All three are first-party, all three last about 180 days, and we use them to tell which marketing is worth continuing.

• bsrc records which channel first brought you here (for example a TikTok link), plus the campaign name if the link carried one. A channel and campaign name, nothing about you.
• blp records which landing page you arrived on. A page name, nothing about you.
• bclk is set when the link you arrive on carries an advertising click identifier, and it holds that identifier (Google's gclid, or the TikTok, Meta, Microsoft or LinkedIn equivalent). That is usually an ad, but not always: Facebook and Instagram append one to ordinary post links too, so following a friend's post can set it. Unlike the other two it is not anonymous: the identifier is unique to your click, and the platform that issued it can match it back to the click it came from. If you buy something, we pass that identifier to Stripe with the checkout, so it is stored on the payment record next to your email and the plan you bought. That is what lets a sale be credited to the ad that earned it. We do not sell it. Your resume content is not part of that record.

You can clear these cookies in your browser at any time, and nothing on the site stops working without them. An earlier version of this page counted only the first two and told you that neither of them identified you. That was wrong on the count and wrong about bclk, and this section is the one place that error mattered most.

Your IP address, briefly. The free tools have no account to meter, so we meter them by address instead. Running the ghost-job check writes a counter keyed to your IP address, and so does the anonymous usage beacon every page sends. Those counters hold a number and nothing else, and they expire about an hour after they are written. The usage we keep past that hour is aggregate and carries no address and no identifier: page views, seconds on a page, how far down people scrolled, and which controls were pressed. The same omission that made the cookies paragraph above wrong made this one missing, which is why it is here now.

Your choices and rights

• Unsubscribe from emails with one click, any time.
• Delete: ask via the contact page and we will delete your personal data, subject to records we must keep by law (like payment records).
• Access: ask and we will tell you what we hold about you.
• Depending on where you live (for example California or the EU), you may have additional rights; we honor reasonable requests from everyone regardless of location.

Children

Bounce is for job seekers and is not directed to children under 16. We do not knowingly collect data from them.

Changes

If we change this policy in a meaningful way, we will update the date above and, for significant changes, note it on the site. Continued use after changes means you accept the updated policy.