How Quiver handles your data

Last updated 2026-05-23.

Quiver is a sole proprietorship based in Illinois, USA. This page explains what data Quiver collects, what it does with that data, and the choices you have. It is written in plain English; where a term has a specific legal meaning, we try to define it in the same sentence.

What we collect

When you create an account, we collect your email address and a hashed version of your password (we never store the password itself). If you set a display name, we store that too.

When you use the product, we collect the material you bring with you: the resumes you upload or paste, the job posts you paste, and any edits, notes, or approvals you make inside the app. This is real personal information (employment history, education, contact details, and similar). We store it so you can come back to it across sessions.

We also collect operational data needed to run the service: server logs (timestamps, request paths, error traces, IP addresses for abuse prevention), and a basic record of when you last signed in. We do not currently use third-party web analytics, advertising trackers, or session-replay tools. That may change in the future, and if it does we will update this page.

How we use it

We use your account information to let you sign in, send you transactional email (verification, password reset, receipts, important service notices), and contact you if something needs your attention.

We use your resume and job-post content to do the thing you came here for: generate tailored resume drafts, cover letters, and review signals. Your material is scoped to your account; other Quiver users cannot see it.

We use operational logs to keep the service running, investigate errors, and prevent abuse. We do not sell your data, and we do not use your resume content to train any machine learning models.

Third parties we share data with

Quiver depends on a small number of external services to function. Each one only receives what it needs to do its job:

  • Anthropic (Claude API). When you generate a draft, the relevant portion of your resume and the job post is sent to Anthropic's Claude API to produce the tailored output. Under Anthropic's commercial API terms, content you send through the API is not used to train Anthropic's models. Anthropic has its own privacy and data-handling policies, which govern what they do on their side.
  • Stripe. If you buy credits, Stripe processes the payment. Stripe handles card data directly; Quiver never sees your full card number. We store the Stripe customer ID Stripe gives us and a record of what you purchased.
  • Fly.io. Quiver's backend runs on Fly.io, and your data sits in a Postgres database (currently hosted on Neon) that Quiver controls. Fly.io is the infrastructure host; they don't process your data on Quiver's behalf beyond running the servers.
  • Email provider. Transactional email (verification, receipts, password reset) is sent through a third-party email service so messages reach your inbox.

Beyond those, we don't share your data with anyone unless we are legally required to (e.g. a valid subpoena) or you ask us to.

How long we keep data

We keep your account and content for as long as your account is open. You can remove individual drafts and job-post entries from inside the app at any time. If you delete your account, your resume content, job posts, drafts, and account record are removed from the live database. Records we are legally required to keep, such as payment history for tax purposes, are retained in a minimal form (e.g. a record that a charge was made, separated from personal content).

Your rights

You can sign in and review or edit your resume and job content at any time. You can delete your account from the settings screen. If you want a copy of your data in a portable form, or want us to correct or remove something specific, email support@quiver.work and we will help. We follow applicable privacy laws, including those that apply to US residents.

Children

Quiver is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will remove the account.

Changes to this policy

We may update this page as the product changes. The "Last updated" date at the top will move when we do. Material changes will be communicated by email or an in-app notice before they take effect.

How to contact us

Questions or requests about privacy go to support@quiver.work.