The short version
Almost every tool on Karloo runs entirely inside your browser: the text, numbers and files you put into it are processed on your own device and never reach our servers. There are two deliberate exceptions, and you choose both of them — the AI actions in the Resume Builder, and pressing Save on a resume while signed in. Everything else, including every calculator, every converter, the resume editor itself, the PDF download and the ATS score, needs no account and sends nothing anywhere.
What never leaves your device
- Anything you type into a tool, unless it is one of the two exceptions below
- Files you open with a tool — PDFs and DOCX files are parsed in your browser
- Results a tool produces for you
- Payment details — there is nothing to buy
If you sign in
An account is optional and only unlocks saving resumes to the cloud and the AI actions. If you create one we hold:
- Your email address, because signing in works by emailing you a link.
- A display name, if you choose to set one.
- Resumes you explicitly save, which contain whatever you put in them — typically your name, phone number, email address, location, links, employment history and education. Nothing is saved to your account until you press Save; the draft in the editor stays in your browser.
Saved resumes are kept until you delete them, which you can do from your account page at any time. To delete your account and everything attached to it, email us and we will remove it.
The AI actions
The Resume Builder can generate a summary, rewrite bullet points, tailor a resume to a job description, and read an imported resume into the editor. Each of these sends the relevant text — the resume content you are working on, and the job description if you pasted one — to OpenAI, which processes it and returns the result. This is the only part of Karloo that sends what you typed to a third party, it happens only when you press one of those buttons, and it requires you to be signed in. If you would rather nothing was sent, the editor, every template, the PDF download and the ATS score all work without it.
Analytics
We use privacy-friendly, aggregate analytics to understand which pages are visited and how quickly they load. This covers page URLs, referrer, rough country-level location, and device and browser type. It is not tied to an identity, and we do not build advertising profiles or sell data to anyone.
We also record a small, fixed set of events — a tool being opened or used, a result being copied, and what was typed into the site-wide tool search, so we can tell which tools people look for and cannot find. Tool search terms are the only text we record anywhere; nothing you enter into a tool itself is included.
Local storage
Some things are saved in your browser’s local storage so the site behaves the same on your next visit: your light or dark theme preference, and your resume draft and chosen template. These stay on your device and are never transmitted. Clearing your browser data removes them.
Third parties
- Vercel hosts the site and processes standard request data such as IP address in order to serve pages and protect against abuse. An IP address is also used, in memory only, to rate-limit the AI actions.
- Supabase provides accounts and the database, so it holds your email address and any resumes you save.
- OpenAI processes the text sent by the AI actions described above, and only when you use them.
Fonts are served from our own domain rather than a third-party font CDN.
Children
Karloo is a general-purpose utility site and is not directed at children under 13. We do not knowingly collect personal information from them.
Changes
If a feature starts handling your data differently, this policy is updated and the date above changes with it. Payments do not exist yet; when they do, this page will say so before they go live.
Contact
Questions about privacy can go to manuj.services@gmail.com.