Security & Privacy FAQ

Your data is stored on Amazon Web Services (AWS) infrastructure in the United States (us-east-1, Northern Virginia).

All traffic between your browser and GovRes is encrypted in transit (HTTPS/TLS). Encryption of our underlying database at rest is not yet enabled — it's on our near-term infrastructure roadmap, and we're flagging that honestly here rather than overstating our current posture.

Access is restricted to a small number of founders/admins, only as needed to provide support or debug an issue you've reported. We don't review user content for any other purpose.

You can download your generated résumés today. A full structured export of your profile and STAR story library is something we're planning to add — let us know if you need it sooner.

We use leading third-party AI model providers to power résumé tailoring and the voice interview assistant. They process the information you submit (like your employment and education history) on our behalf, under agreements that govern how that data can be used.

No. Under our agreements with our AI providers, they may not use your information to train their models. We may review de-identified, aggregated data to improve the quality of GovRes itself, but never to train a third party's model.

Each provider's own data-handling policy governs retention at the infrastructure layer — typically short-term, for abuse monitoring only, not for training. None of them use your data to train models, per our agreements above.

The AI drafts suggestions based only on what you provide — it's a writing assistant, not a source of new facts. Because federal applications require you to self-certify accuracy, you should always review generated content before submitting, and you're responsible for what you ultimately submit.

Sign-in runs through our identity provider rather than a GovRes-managed password. Dedicated two-factor/passkey support for GovRes accounts specifically is on our roadmap and not yet available.

Through Stripe. GovRes never sees or stores your full card number — Stripe handles that directly.

If we ever experience a data breach affecting your personal data, we will notify affected users as required by applicable law, using the contact information on your account.

Email info@govres.ai with details — we read every message and will follow up directly.

We use Mixpanel for product analytics and session cookies to keep you signed in, via cookies and similar technologies. You can manage cookie preferences through the banner CookieYes shows on your first visit.

No. We don't sell your personal data, use it for targeted advertising, or permit third parties to collect information through GovRes for their own advertising purposes.