Keep the lens clear.

Gemini & budgets

Free route (default): use a free Google AI Studio key. Resumes are converted to text and the server removes name, email, phone, address, links and references before anything goes to Gemini; they are put back locally in the result. Best-effort only: employers, schools, dates, skills and names of other people can still be sent. Google's free tier may use submitted content to improve its products. Scans and images are not accepted in this route. Billing route: full PDF/image files, only for a billing-enabled project with paid-service data terms.

No automatic model fallback. Global/IP budgets count attempted calls, including failed calls, because a failed answer may still cost money. These are request limits, not exact dollar caps. Use conservative budgets and Google billing alerts.

Owner credentials

Controls, not content.

You can see usage metadata, not visitors' resumes or AI answers. Resume data isn't stored in D1.

Unlimited licences have no per-browser daily cap. Global and shared-IP service safeguards still apply. Set a licence limit to 0 for unlimited. Suspension immediately blocks further checks. Release a licence when its buyer changes browsers.