What leaves your browser, when, and what is kept

Uploading a document to a website you have not used before is a reasonable thing to be careful about. Here is the full list of what goes where.

ConxfolioPublished 2026-09-13

— the honest answer includes the parts that do get sent.

The privacy claim most tools make is a mood. This one is a list, because a list can be checked. Here is what leaves your browser, at which moment, and what happens to it.

The canonical sentence

Your work is kept in this browser. A file you import is read here first, and only the text it contains is sent to be sorted into fields. If this browser cannot read the file, the file itself is sent instead. The text of a résumé or a letter is sent to our server when you run the ATS check, ask for a draft, or export a PDF.

The three moments the text travels

The ATS check sends the text of the résumé, because the score is computed on the server. A letter draft sends the text along with the posting, the company and the role, because the engine selects sentences out of your own evidence. A PDF export sends the document data so it can be rendered. Nothing else in ordinary use goes anywhere.

What the PDF route does with it

Renders it and returns the file. That route writes nothing to disk and nothing to the database, which is worth stating plainly because it is the one moment your whole document crosses the wire.

What is kept on your side

One local key in your browser, holding the state of your work, plus a draft token. On a measured import those came to 7 882 bytes with the candidate's name inside. That is a privacy feature and a housekeeping problem at the same time, which is why applying on a shared computer exists.

The one account-shaped thing

Claiming a portfolio address verifies an email with a one-time code, because an address has to belong to somebody. That is the only place in the product that asks for an email at all. The mechanism is in publishing a portfolio or keeping it private, and the absence of everything else in why there is no account.

Why the local-first arrangement exists

Partly privacy and partly cost. A product that keeps your work in your browser has no database of résumés to run, which is one of the reasons everything here is free. The reading itself is deterministic code with no model anywhere, described in how the résumé reader works without a model.

The parts we cannot speak for

Two of them, and both sit outside this product. What an employer does with the file you send them is invisible from here, governed by their policies rather than ours, and no résumé tool can tell you otherwise. And your own browser keeps your work on your machine, which means the security of that machine is the security of your document. Neither is a dodge: they are the honest boundary of what a claim about this product can cover. Everything inside that boundary is listed above, with the moment each thing travels and what the receiving route does with it.

What this page does not claim

That nothing is ever sent. It is, three times, and this page names each occasion rather than burying it. It also does not claim anything about what an employer does with the file you send them, which is outside our view entirely and outside every other tool's view as well.

If you want the strictest version of the arrangement, there is one available and it costs nothing. Paste the text of your résumé rather than uploading the file, which means the file never moves at all; build the document here; and export the DOCX, which is assembled in the page and made zero server calls in a measured export. That path uses the network for the check alone, and if you skip the check it uses the network only for the first page load, which is measured in low-bandwidth applications.

One detail about the import worth understanding, because it decides whether your file moves at all. The reading happens in your browser first, using code running in the page, and only the text it produces is sent. The file itself travels only when that local reading fails, which is typically an unusual PDF or a format the browser cannot open. Pasting the text yourself avoids the question entirely and is the strictest available path.