How we handle your files

A plain-language summary of what happens to the resumes and other files you upload. The full details are in our Privacy Policy, and our security measures are on How we protect your resumes.

1. Checked when you upload

Only PDF, Word (.doc/.docx), TXT and RTF files up to 10 MB each are accepted. Our upload server checks each file’s real contents, not just its name. Files with macros, embedded objects, scripts or other active content, oversized compressed contents, or contents that don’t match the file type are refused before they’re stored.

2. Stored privately

Accepted files are saved under random file names in a private folder outside the public website, so they can’t be opened from the web.

3. Who sees them

To prepare your report, your files and worksheet are sent as email attachments to the Expolious team mailbox (ingrid@expolious.com). Our service providers handle them only on our behalf: our web host (Namecheap), our email provider (Microsoft 365) and the AI processing providers that help score resumes. We don’t sell or rent resumes and we don’t use them for advertising.

4. How AI is used

Resumes are analyzed with the help of AI processing providers to produce scores, ranked reports and interview questions. We score job-related information from the resume only, against the variables you choose. The text you type (such as the job description and custom variables) is passed along as data, not as instructions. We do not use resumes uploaded by customers to train AI models for third parties. Rankings are decision support; the hiring decision is always yours.

5. Deleted after 30 days

We keep uploaded resumes and job descriptions, including job seekers’ LinkedIn profile PDFs, for up to 30 days, long enough to prepare and deliver your report, and then delete them. Unfinished uploads are removed after about 1 day. Returning-customer access links expire after 30 days.

6. Email copies

Report emails stay in the sender’s and recipient’s mailboxes. You can ask us to delete the copies in our mailbox by emailing ingrid@expolious.com.

7. Resume Builder and Designed Resume PDF

Resume Builder interviews and drafts are deleted 7 days after you start, or right away when you click “Delete my data now”. Before your answers go to the AI, we remove email addresses, phone numbers, web links and street addresses; your contact details are never sent to the AI. A Designed Resume PDF is emailed to you and deleted from our server right away. Copies may remain in our hosting provider’s routine backups for a limited time before they are overwritten.

8. Early deletion and questions

To ask for early deletion, email ingrid@expolious.com with your reference number, or write to Expolious LLC, PO Box 224, HVNP, HI 96718. To report a security problem, see security.txt.