Privacy Policy - Top the Stack

Last updated: July 24, 2026

TOPTHESTACK LLC, an Arizona limited liability company ("Top the Stack," "we," "us," or "our"), operates the website at topthestack.com and the related web application (together, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the Service, you agree to the practices described here.

1. Information we collect

Information you provide

Account information. When you create an account, we collect your email address and an authentication credential (a hashed password managed by our authentication provider).
Content you submit. To provide the Service, you provide content such as your résumé, tailoring preferences, job descriptions (including postings you import by URL), application questions and the answers we draft, achievement/"STAR" stories, notes, interview-prep inputs, and application-tracking details (company, role, status, dates).
Voice recordings (mock interview). If you use voice mode in the mock interview, your spoken answers are captured by your browser and sent for transcription. We store the resulting text transcript; we do not retain the underlying audio recording.
Billing information. When you purchase a paid plan or add-on, our payment processor (Stripe) collects your payment details, such as your card information, directly from you. We do not receive or store full payment-card numbers; we receive limited billing information and your subscription or payment status needed to manage your account.
Support communications. If you contact us, we collect the information you include (such as your name, email, and message).

A note on sensitive information. The content you submit (such as your résumé) may contain personal information. Please provide only what you are comfortable sharing, and avoid including unnecessary sensitive personal information - for example, government identification numbers, financial account numbers, or health information - that is not needed to tailor your application.

Information collected automatically

Usage and cost telemetry. We record which features you use and technical measures of each AI action (for example, model used, token counts, and an estimated processing cost) to operate, secure, meter, and improve the Service.
Device and log data. Our hosting and infrastructure providers process technical data such as IP address, browser type, and request logs for security and reliability.
Local storage. We use your browser's local storage for essential functions such as keeping you signed in and remembering onboarding progress. We do not use third-party advertising or cross-site tracking cookies.

2. How we use your information

To provide the Service - for example, to research a role, tailor a résumé and cover letter, draft answers, prepare interviews, run mock interviews, and generate follow-up emails, all based on the content you provide.
To operate, secure, debug, and improve the Service, and to enforce usage limits and prevent abuse.
To understand aggregate usage and costs so we can price and improve the Service.
To respond to your support requests and communicate with you about your account.
To comply with legal obligations and enforce our Terms of Service.

3. AI providers and other subprocessors

The Service relies on trusted third parties ("subprocessors") to function. When you use features that require them, the relevant content you submit is transmitted to these providers to perform the requested task:

Anthropic (Claude). We send your résumé, job descriptions, preferences, and related inputs to Anthropic's API to research roles and generate tailored résumés, cover letters, answers, interview prep, and feedback. As part of research, a job posting may cause web-search queries to be performed through Anthropic's tools.
OpenAI. For the mock interview's voice mode, audio is sent to OpenAI to transcribe your spoken answers, and text is sent to OpenAI to synthesize the interviewer's spoken voice.
Supabase. Provides our database and authentication. Your account and content are stored here, isolated per user by row-level security.
Vercel. Hosts and serves the application.
Stripe. Processes payments for our paid plans and add-ons. When you subscribe or buy an add-on, your payment information is provided directly to Stripe and handled under Stripe's terms and privacy policy. We receive limited billing and subscription details from Stripe (not full payment-card numbers).

We use these providers under their business/commercial terms. Anthropic and OpenAI state that data submitted through their APIs is not used to train their models under those terms. We do not sell your personal information, and we do not share it for advertising.

4. How your information is stored and secured

Your content is stored in our database (Supabase) with row-level security so that your data is accessible only to your account. Data is encrypted in transit. The Service is intended for users in the United States, and your information is processed and stored in the United States. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

5. Data retention

We retain your account and content for as long as your account is active. If your account becomes inactive, we will delete your associated content within 30 days after it becomes inactive. When you delete your account, your account record and associated content are deleted from our database promptly. Backups, logs, and information held by our providers may persist for a limited period consistent with their practices and our legal obligations.

6. Your rights and choices

Access and export. You can download a copy of your data at any time from the Account page.
Deletion. You can permanently delete your account and associated data from the Account page.
Correction. You can edit your saved content directly in the app.
State privacy rights. Depending on your U.S. state of residence, you may have additional rights regarding your personal information, such as to access, correct, or delete it. See "California privacy rights" below, and contact us to make a request.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you specific rights regarding your personal information:

Right to know / access the categories and specific pieces of personal information we have collected about you.
Right to delete personal information we have collected, subject to certain exceptions.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA.
Right to non-discrimination for exercising your privacy rights.

The categories of personal information we collect are described in Section 1 (identifiers such as your email; the content you submit; commercial and billing information; internet and usage activity; and audio you provide for the mock interview, which we transcribe and do not retain as audio). We collect it for the purposes in Section 2 and disclose it only to the subprocessors in Section 3. To exercise these rights, contact us at privacy@topthestack.com. We may need to verify your identity before fulfilling a request, and you may use an authorized agent as permitted by law.

7. Data breach notification

We maintain reasonable safeguards to protect your information. In the event of a data breach that compromises your personal information, we will notify affected users and, where required, the appropriate authorities without undue delay and in accordance with applicable law.

8. Children

The Service is not directed to children and is intended for users who are at least 16 years old (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

10. Contact us

Questions about this policy or your data? Reach us through our Contact page or at privacy@topthestack.com.