resumeBuddy per Luis Alcaraz Leal

A local-first browser extension that tailors your resume, cover letter, and outreach messages to a specific job posting — using an AI provider of your choice, with your own API key, entirely inside your browser.

There is no backend. resumeBuddy has no server of its own: your resume, your API key, and everything you generate stay in your browser's local storage and are only ever sent directly from your browser to the AI provider you pick. The developer never sees your resume, your job search, or your API traffic.

WHAT IT DOES

Capture a job posting — select text on any job listing page, right-click, choose "Tailor with resumeBuddy." No page scraping, no persistent content script, no broad site permissions — capture is entirely user-triggered.

Generate, from your own master resume:

Tailored resume bullet points
A complete tailored resume
A cover letter
A short outreach message to a hiring manager (with an optional suggested subject line)
Review and edit every output in place, then copy it or download it — as Markdown, or as a print-ready PDF (via the browser's own print-to-PDF, formatted and stripped of any browser/tool branding before it hits the page).
Every generated bullet, sentence, and claim is instructed to come only from what's actually in your master resume — the tool is explicitly told never to invent skills, employers, titles, or accomplishments.

SUPPORTED AI PROVIDERS

Pick one in Settings, save a key for it, and switch anytime — resumeBuddy stores a key per provider, so switching never makes you re-enter one you've already saved.

Gemini — free tier, no card required. Default provider, using Google's gemini-2.5-flash out of the box.
Groq — free tier, no card required. OpenAI-compatible, the fastest inference of the four.
OpenRouter — free tier, no card required. One key, 300+ models — only free-tagged models are listed, to avoid a surprise bill.
Anthropic (Claude) — paid, billed separately from a Claude subscription. For users who already have a key.
Each provider's model list is fetched live from that provider's own API (not hardcoded), so the model dropdown never goes stale as providers rename or retire models.

PRIVACY AND PERMISSIONS

No backend, no middleware, no analytics. Nothing about your usage is ever sent anywhere except directly to the AI provider you choose.
Minimal permissions: storage, activeTab, contextMenus, and the side-panel API. No host permissions, no access to all sites, no persistent content script.
Your resume, keys, and settings live in your browser's local storage and never sync to any account.
Standard caveat: local storage isn't encrypted at rest — the actual boundary protecting your keys is your device staying unlocked and uncompromised, not encryption.