Security and your data at Dreamwork
Dreamwork stores your resume, email, and application history so the product works. It uses TLS for all traffic, encrypts resume files at rest, and keeps API keys hashed. Your resume goes to an employer only when an application is sent, by you or by Autopilot. You can delete your account in the product, and personal data is removed within 30 days.
Security and data: FAQ
What does Dreamwork store about me?
Your email and the account details you choose to add (name, LinkedIn URL, phone number, mailing address, current location); your uploaded resume, its parsed text, an AI-generated analysis of your experience, and the embeddings that power matching; your jobs and application pipeline; application answers you choose to save; how you use the product; and a limited set of identifiers for measuring advertising. For paid plans, Dreamwork stores Stripe customer and subscription identifiers, not card details.
How does Dreamwork protect my data?
Dreamwork uses TLS for all traffic, encrypts resume files at rest, and keeps API keys hashed. Access to production data is limited to a small number of engineers. No system is perfectly secure, and if a breach affects you, Dreamwork will notify you promptly.
What does Dreamwork do with my resume?
It matches your resume to job listings, writes a tailored resume, cover letter, and answers for the roles you apply to, and fills in and submits applications when you ask it to. Your resume only goes to an employer when an application is sent, by you or by Autopilot. Dreamwork does not use your personal resume content to train public, third-party, or its own general-purpose AI models.
Can I check an application before it is sent?
Yes. Nothing is sent until you tap Apply on a role, unless you turn on Autopilot. Set your Apply button to Review first and each application waits for you to read, edit, and send it. Autopilot applies to matches above your minimum match score without a review of each one, and you can pause it anytime.
Who else processes my data?
Google (Gemini), Anthropic (Claude), and OpenAI compute embeddings, write application materials, and run the application agents; they process API inputs under their commercial terms and do not use API content to train public models by default. Resend sends email, Cloudflare runs DNS and inbound email routing, Railway hosts the service, Neon stores the database, and Stripe processes payments. Advertising measurement providers get limited attribution data, never resume content or application materials. When you ask Dreamwork to apply, the employer, its applicant tracking system, and the providers that fulfill the application receive the answers that application needs.
Do recruiters see my profile?
Recruiters and hiring managers may see an anonymized summary of a matching profile: a fit score, a short reason, your skills, and your work history without employer names. It leaves out your name, email, phone number, links, and school and employer names. Dreamwork may introduce you to a recruiter for a relevant role and share your profile and resume with them when it does; introductions may be commercial. You can ask Dreamwork to stop matching your profile for recruiters at any time by contacting us; that does not recall what was already shared.
Does Dreamwork sell my data?
Dreamwork does not sell, rent, or trade your personal information as a standalone data product. Under some laws, limited advertising measurement or a recruiter introduction may count as a sale or sharing, so you can opt out by emailing [email protected] with "Do Not Sell or Share" in the subject. Resume content and application materials are never sent for advertising measurement.
What can an AI assistant connected to Dreamwork do?
What you allow. You connect it by signing in to Dreamwork (OAuth) or creating an API key, and choose whether it may read your account, make changes, submit applications, or reply to recruiters. Submitting and replying start switched off, and through a connector or the current MCP package Dreamwork shows a summary and acts only after the assistant confirms that exact request. Payment details are entered only on the checkout page. You can revoke access under Profile, then MCP, and in the assistant's own settings.
How do employers reach me?
Through a private Dreamwork relay address, so employers do not see your personal inbox. Messages arrive through Cloudflare Email Routing, are stored so your pipeline stays in sync, and a copy is forwarded to your inbox. Stored messages are deleted when you delete your account.
How do I delete my account and data?
In Profile, choose Delete account and type DELETE to confirm. Your profile, resumes, applications, messages, and account data are deleted, any active subscription is canceled immediately, and personal data is removed within 30 days. Dreamwork may keep de-identified, aggregated statistics that can't be linked back to you, and limited data where the law requires it.
How do I see, correct, or export my data?
Email [email protected] with "Privacy" in the subject. Dreamwork responds within 30 days and may need to verify your identity first. You can also edit saved application answers and remove voluntary self-identification answers in your profile.
The full policy
These answers restate the Privacy Policy, last updated October 23, 2026, and the Terms of Service, last updated October 23, 2026. The policy is the full text, and it governs where this page is shorter. Privacy requests go to [email protected], and account questions to [email protected]. How applications are sent is on Is AI auto-apply safe?
More from Dreamwork
Last reviewed November 4, 2026. Dreamwork home · Research · How-to guides