Steel Man Resumes
cat privacy.txt

Privacy policy

Last updated: October 2026. Here's what you need to know. Plain language, no 50-page document required.

privacy.txt

THE SHORT VERSION

  • 1.

    What we collect

    Your name, contact info, and work history. Only what you give us to create your documents. Contact form submissions include your name, contact method, situation category, and any details you choose to share. If you chat with t.ROY on this website, the chat is saved for 30 days, then deleted automatically.

  • 2.

    How we use it

    To generate your resume and job search documents, to answer you in the t.ROY chat, and to respond to your contact form submissions. We don't sell your data. We never volunteer your information to law enforcement, and that includes chats with t.ROY. If the law makes us hand something over, we have to. We don't spam you. We don't use your data for research, training, or marketing without your explicit consent.

  • 3.

    How to delete it

    Use the "Destroy Data" button in the app, or contact us. Deletion removes your account, profile, resumes, and generated content within 30 days. A minimal set of security, consent, and legal-compliance records is kept only as long as needed and then deleted. Contact form data is retained for up to 90 days for business purposes, then deleted. A t.ROY chat on this website is deleted automatically after 30 days. If you asked t.ROY to pass your details to Troy, those are not deleted automatically. Contact us and we will delete them.

privacy.txt (cont.)

SENSITIVE DATA

We understand that some of the information you share with us is sensitive, including criminal record history, employment gaps related to incarceration, and recovery status. We treat this data with the highest level of care.

Important: Information you share with Steel Man Resumes is not legally privileged. It is not protected by attorney-client privilege, therapist-patient confidentiality, or any other legal shield. While we will never voluntarily share your information with law enforcement, and that includes chats with t.ROY, we may be compelled to disclose it if served with a valid legal process (subpoena, court order, or warrant). If the law makes us hand something over, we have to. We will notify you if this happens, to the extent legally permitted and if we have a way to reach you.

Do not share information through our contact form or tools that you would not include in a document accessible to others. For legally privileged advice about your criminal record, consult a licensed attorney.

t.ROY ON THIS WEBSITE

The Ask t.ROY chat on this website is an AI assistant, not a person. It can look up employers in our directory, read you a state's rules from our state pages, answer from our guides and open a page for you. It runs on t.ROY's desk, a separate service from the t.ROY inside the Forge and the Refinery. Those tools have their own rules, set out on their own pages. Troy Richard Carr runs the desk through The Midnight Garden LLC.

Here is everything the chat keeps, and for how long.

  • Your chat. Each message you type and each reply is saved on the desk's database and deleted automatically after 30 days. Troy can read a saved chat, to follow up or to fix a problem.
  • On a shared computer. On this website the chat lives only in the browser tab you used. It starts fresh after 30 minutes away, and the New chat button clears it from the tab.
  • Counts, with no words. That a chat started, the page it started on, what t.ROY looked up (for example, employers in Ohio), which AI provider answered, and what the reply cost to run. These counts are kept.
  • Corrections. If you tell t.ROY it got something wrong, we record that a correction happened and on which page. Not your words.
  • Your internet address. The chat does not save it. It keeps a one-way fingerprint of it to limit abuse. The fingerprint stays on the chat's record for up to 45 days, and for as long as a note you asked t.ROY to pass to Troy is kept. The daily counts tied to it are cleared after 3 days.
  • Reaching Troy. Only if you tap yes on the card. Then your name, how to reach you and what you need are emailed to Troy and saved so he can follow up. They are not deleted automatically. Contact us and we will delete them.
  • Troy's phone alert. The first time you talk to t.ROY on a given day, Troy's phone gets a notice with the time, the page and what t.ROY looked up. Never your words.
  • Talking out loud. If you use the microphone, your voice goes from your browser straight to OpenAI, which understands it and answers. The audio and your spoken words never reach the desk. It only counts that a voice chat happened. OpenAI keeps voice under its own retention policy, which we do not control.
  • AI providers. What you type goes to Anthropic (Claude) to write the reply, with OpenAI as a backup. Under their API terms it is not used to train their models by default, and they may keep it for up to 30 days for abuse and safety monitoring before deleting it.

The chat cannot see your Forge or Refinery account, apply to a job, contact an employer or delete anything. It sends nothing on your behalf unless you say yes on a card.

COOKIES & ANALYTICS

We use Google Analytics (GA4) to understand how people use the site (pages visited, time on site, which links get clicked). GA4 sets cookies in your browser and collects usage data that includes a client identifier and an approximate location derived from your IP address. Google processes this data on our behalf; you can review Google's practices at policies.google.com/privacy.

We also use Vercel Analytics, which measures aggregate site usage without cookies. We do not sell your data, and we do not build advertising profiles. When you open the t.ROY chat or send it a message, Google Analytics counts that it happened, and on which page. Never what you typed. If you prefer not to be measured by GA4, you can block analytics cookies in your browser or use a tracking-blocker extension.

THIRD-PARTY SERVICES

We use the following third-party services to operate this site:

  • Anthropic (Claude) and OpenAI (GPT) for AI-powered career analysis, document generation and the t.ROY chat on this website. Data is sent via API for processing. Under their API terms it is not used to train their models by default, and they may keep it for up to 30 days for abuse and safety monitoring before deleting it. See their privacy policies at anthropic.com/privacy and openai.com/enterprise-privacy.
  • OpenAI Realtime for talking out loud to t.ROY on this website. Your voice goes from your browser straight to OpenAI and is kept under OpenAI's own retention policy, which we do not control. See openai.com/enterprise-privacy.
  • The Midnight Garden LLC, Troy's other company, runs t.ROY's desk, the service behind the chat on this website. What it keeps is listed under t.ROY on this website above.
  • Resend for contact form email delivery, and for emailing Troy the details you approve in the t.ROY chat. Both are transmitted via Resend's API. See resend.com/legal/privacy-policy.
  • Vercel for website hosting, the t.ROY chat service and product analytics. See vercel.com/legal/privacy-policy.
  • Google Analytics (GA4) for website usage analytics. Sets cookies and collects usage data as described above. See policies.google.com/privacy.
  • Cloudflare Turnstile for bot protection on forms and account actions. See cloudflare.com/privacypolicy.
  • Neon for our Postgres database hosting (where your account and profile data are stored, and where t.ROY chats on this website are kept for 30 days). See neon.tech/privacy-policy.
  • Cloudflare R2 for encrypted file storage of uploaded and generated documents. See cloudflare.com/privacypolicy.
  • RapidAPI / JSearch for job listing search. See rapidapi.com/privacy.
  • CareerOneStop / U.S. Department of Labor for job-market and occupational data. See careeronestop.org privacy statement.
  • Airtable for partner and employer data management. See airtable.com/company/privacy.
  • ntfy for Troy's phone alerts from the t.ROY chat. An alert carries the time, the page and what t.ROY looked up, never your words. See docs.ntfy.sh/privacy.

DATA RETENTION, DELETION & EXPORT

Contact form submissions: retained for up to 90 days, then deleted. t.ROY chats on this website: deleted automatically after 30 days. Details you ask t.ROY to pass to Troy: kept until you ask us to delete them. Forge/Refinery user data: retained until you delete it via the "Destroy Data" button or request deletion. AI processing: data is sent to our AI providers (Anthropic and OpenAI) to generate your results. We do not let them train on it. Under their API terms they may keep it for up to 30 days for abuse and safety monitoring, then delete it. Email records: retained in our business email for up to 1 year for customer service purposes.

Deletion. When you delete your data, we remove your account, profile, resumes, and generated content. We retain a minimal set of records, such as security logs, consent history, and records we are legally required to keep, only for as long as they are needed for those purposes, then delete them. We do not claim to erase every trace instantly; we remove the personal data we control and hold the rest no longer than necessary.

Export. You can request a copy of your data. An export includes your profile, resumes, generated documents, job applications, coaching transcripts, and consent history.

PAYMENT INFORMATION

Human resume services are handled directly by Troy. Payment details are discussed privately and never stored on this site.

YOUR RIGHTS

Regardless of where you live, you have the right to:

  • Know what personal information we collect and how it's used
  • Access your personal information
  • Delete your personal information
  • Opt out of data sales (we don't sell data, but this right is yours regardless)
  • Non-discrimination for exercising these rights

These rights apply under CCPA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and other applicable state and federal privacy laws. To exercise any of these rights, contact us using the information below.

DATA BREACH NOTIFICATION

In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery via the contact method you provided. We will also notify applicable state attorneys general as required by law.

AGE REQUIREMENT

This site and its services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

QUESTIONS?

For privacy requests, questions, or concerns:

Troy Richard Carr, Steel Man Resumes
Email: troy@steelmanresumes.com
Text: (262) 391-8137
Libby, Montana