Data Deletion Instructions

1. Overview

You have the right to request deletion of your Guul account and all associated personal data at any time. We are committed to processing deletion requests promptly and transparently. This page explains what data we delete, how to submit a request, and what to expect during the process.

2. Guest Results and Local Drafts

A guest checker result has a 15-minute return shortcut in the current browser tab. Choose Clear this result on your report to remove the checker copy from that tab. This is available without an account or an email request.

A resume opened in Builder is a separate local draft. Local drafts do not have that 15-minute expiry. Use the controls below to remove a saved guest draft and its retained upload source. To remove all local Guul data, close other Guul tabs and clear guul.io site data in your browser settings. This also signs you out and removes local preferences and unsaved work.

Clearing local data does not delete saved account documents, server processing records or public score links. Revoke public score links in the Share your ATS score dialog before clearing the tab that manages them. Otherwise they expire after 14 days.

For account data or information processed by service providers, use the deletion request below. Browser expiry is not a promise that every server or provider copy is deleted on the same schedule.

Guul can store a processed copy of an imported resume to avoid processing it again. That copy expires for reuse after seven days. Scheduled cleanup removes expired copies; expiry is not confirmation that cleanup has already run. Saved account documents, processing logs and AI providers have separate retention rules.

3. What We Delete

When you request full account deletion, we remove the following data from our systems:

• Account profile: Name, email address, profile picture, and authentication credentials.
• Resumes & documents: All saved resumes, resume versions, and associated metadata.
• Cover letters: All generated cover letters, drafts, and related inputs (job descriptions, tone preferences).
• AI headshots: All generated headshot images and any source photos still in our system.
• Job search data: Saved job searches, bookmarks, application tracking data, and preferences.
• Subscription data: Active subscriptions will be cancelled. Billing relationship with our payment processor will be terminated.
• User preferences: Theme settings, feature preferences, and personalization data.
• Analytics identifiers: Your identifiable analytics profile is disassociated and anonymized.

You may also request partial deletion of specific data categories (e.g., only resumes, only cover letters) without deleting your entire account.

4. How to Request Deletion

You can request data deletion in the following ways:

Option 1: Email Request

Send an email to support@guul.io with the subject line “Data Deletion Request”.

Guest results

Clear a guest checker result directly from the report. See the guest storage instructions above for local drafts. Full account deletion currently requires a verified support request; clearing a browser result does not delete your account.

5. What to Include

To help us process your request quickly, please include:

• The email address associated with your Guul account.
• Your full name (for identity verification).
• Whether you want full account deletion or partial data removal (specify which data categories).
• If you signed in via an OAuth provider (Google, LinkedIn, GitHub, Facebook), please mention which one.

6. Processing Timeline

• Acknowledgment: We will confirm receipt of your request within 2 business days.
• Verification: We may contact you to verify your identity before proceeding. This typically takes 1–3 business days.
• Deletion: Once verified, your data will be deleted within 30 calendar days.
• Confirmation: You will receive a confirmation email once deletion is complete.
• Backup propagation: Data may persist in encrypted backups for up to 90 days after deletion from live systems. Backup data is not accessible or used and is automatically purged.

7. OAuth Sign-In Providers

If you signed in using Google, LinkedIn, GitHub, or Facebook:

• The same deletion process applies. Submit your request by email and specify which OAuth provider you used.
• We will delete all Guul account data associated with your OAuth identity.
• Deleting your Guul account does not affect your account with the OAuth provider (Google, LinkedIn, etc.). To revoke Guul’s access to your OAuth account, visit the OAuth provider’s app permissions settings.
• Facebook users: You can also initiate deletion through Facebook’s “Apps and Websites” settings, which will send us a deletion callback.

8. Third-Party Data Propagation

When you delete your account, we also take steps to remove your data from third-party services:

• Supabase: Account records, stored files, and database entries are deleted.
• Stripe: Your Stripe customer profile is marked for deletion. Transaction records may be retained by Stripe for their legal/regulatory obligations.
• Analytics (PostHog): Your identifiable analytics data is disassociated from your profile. Anonymized aggregate data may persist.
• Error monitoring (Sentry): Identifiable error reports are purged within their standard retention period (90 days).
• AI processing: Clearing a browser result does not remove server-side caches or provider records. Processing and retention depend on the service and its configuration. Include AI processing in your deletion request so support can confirm which records can be removed and any retention that still applies.
• Email (Resend): Transactional email records associated with your account are deleted.

9. Data We May Retain

In limited circumstances, we may retain certain data after deletion:

• Legal obligations: Transaction records, tax documents, or data required by law may be retained for up to 7 years.
• Fraud prevention: Minimal data necessary to prevent repeat abuse or fraud may be retained in hashed/anonymized form.
• Aggregated analytics: Fully anonymized, non-identifiable usage statistics that cannot be traced back to you.

We will inform you if any data must be retained and explain the specific legal basis.

10. Verification Process

To protect your account from unauthorized deletion requests, we verify your identity before processing:

• We may send a verification email to the address on file and require you to confirm.
• For OAuth accounts, we may ask you to confirm ownership through the connected provider.
• If we cannot verify your identity, we will contact you with alternative verification options.

11. Contact & Support

For data deletion requests or questions about the deletion process:

• Email: support@guul.io
• Subject line: Data Deletion Request
• Service: Guul

For questions about what data we collect and how we use it, see our Privacy Policy. For general terms of use, see our Terms of Service.