Privacy Policy
Last updated: October 13, 2026
This Privacy Policy describes how MDO3D ("we", "us", "our") handles information across mdo3d.com and the family of platforms we operate (the "Services"). We aim to collect as little personal information as possible and to be clear about what we do collect.
Information we process
- Information you provide. When you use a platform that requires input (for example, birth details for a chart or a question for a reading), we process that input to generate your result.
- Account and billing data. If you create an account or purchase a paid feature, we process your email and authentication identifiers, and payment is handled by our processor, Stripe. We do not store full card details.
- Usage data. Where you consent, we may use Google Analytics to understand how our Services are used and to improve them (see Cookies and analytics).
How we use information
We use information to provide and improve the Services, deliver results you request, process payments, respond to support requests, and keep the Services secure. We do not sell your personal information.
Third-party processors
We rely on providers such as Firebase (authentication and database), Stripe (payments), Vercel (hosting), Anthropic (the AI model that generates results on some platforms, including the Rigor career tools) and, if you accept analytics cookies, Google Analytics to run the Services. These providers process data on our behalf under their own terms.
Resume and career tools (Rigor)
The Rigor career tools at rigor.design (resume analyzer, cover letter, interview practice, LinkedIn profile, networking email, portfolio review and salary negotiation) work as follows:
- Sign-in and plan. The tools require an account (email and password through Firebase Authentication) and an active Rigor Pro subscription. We keep a subscription record for your account (plan, status, renewal date and your Stripe customer and subscription IDs) and a monthly usage counter (the number of AI generations per tool). The counter holds counts only, not the text you entered.
- What is sent. When you run a tool, the text you typed or pasted (for example your resume, a job description, a LinkedIn section, interview answers, or salary details) is sent over HTTPS to our API at api.rigor.design. The API trims it to a set length and forwards it to Anthropic, which generates the result. A resume file you choose to upload must be plain text (.txt); it is read in your browser and placed in the text box, and the file itself is never uploaded.
- What we store. Our API does not write your resume or other tool input to our database or to our logs; it returns the result to your browser. Nothing is saved to your account unless you press Save. Saving stores a history item in our Firebase database, linked to your account and shown back to you in the tool: for the resume analyzer, the score plus the first 100 characters of your resume and of the job description; for the other tools, the generated result (for example the cover letter, email, or review) and the role or recipient details shown with it.
- How long. Saved history items and usage counters are kept while your account exists. The subscription record is kept for as long as needed for billing and legal obligations. There is no in-app delete button yet: email [email protected] from the address on your account and we will delete your saved history, or your whole account and its data, and confirm by email.
- No sale, no profiling. We do not sell resume content, share it with employers or recruiters, or use it to build advertising profiles.
Cookies and analytics
Our sites can use Google Analytics 4, a Google service that counts visits and shows which pages are used. Where it is turned on, a banner asks first. Google Analytics loads only after you click Accept; it then sets its cookies (_ga and _ga_*, kept for up to two years) and sends usage data such as the pages you view, your device and browser type and your approximate location to Google. If you click Reject or don't answer, it does not load and no analytics cookie is set. We remember your choice in our own cookie (mdo_consent, 180 days); change it at any time with “Cookie settings” at the bottom of the page. We don't use advertising cookies. A site where analytics is not turned on shows no banner and loads none of this.
Data retention
We keep account and billing records for as long as your account is active and as needed to meet legal obligations. Input used only to generate a one-time result is not retained beyond that purpose where feasible.
Your choices
Some of our tools work without an account. If you hold an account, you may request a copy or deletion of your data by contacting us. See also our Refund Policy, Cancellation Policy and Acceptable Use Policy.
Changes
We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above.
Contact
Privacy questions can be sent to [email protected].