How we protect your resumes

Resumes contain real people's personal information. Here is, in plain terms, how we handle the files you upload. The full details are in our Privacy Policy, and a step-by-step summary is on How we handle your files.

Encrypted in transit

Every page and every upload uses HTTPS. Plain-HTTP requests are redirected to HTTPS, and browsers are told to use HTTPS only for expolious.com.

Every file is checked

Our upload server checks each file's real type, not just its name. Files with macros, embedded objects, scripts or external templates, and fake Word files, are refused. Upload size and rate limits protect the service from abuse.

Stored privately

Uploaded files are stored on our server outside the public website folders, with restricted file permissions, so they can't be opened from the web. Access links for returning customers are stored only as one-way hashes.

Deleted after 30 days

We keep uploaded resumes and job descriptions for up to 30 days, long enough to prepare and deliver your report, and then delete them automatically. Results emails stay in the sender's and recipient's mailboxes; you can ask us to delete copies in our mailbox by emailing ingrid@expolious.com.

Who sees them

Rankings are generated automatically. Only authorized Expolious staff who run the service, and the service providers that help us run it, can access your files: our web host (Namecheap), our email provider (Microsoft 365) and the AI processing providers that help score resumes. They may use the files only on our behalf. We score job-related information from the resume only.

Never sold

We do not sell or rent resumes or any personal information, and we don't use them for advertising.

Questions or concerns

Email ingrid@expolious.com, or write to Expolious LLC, PO Box 224, HVNP, HI 96718. No system is perfectly secure, but if something ever goes wrong we will tell affected customers as the law requires.