Privacy Policy

1. Information we collect

We collect the information needed to create your account and run Applify for you. This includes account information such as your email address and name, profile information you enter such as work history, education history, contact details, demographic or EEO answers you choose to provide, resumes you upload, job preferences, and operational data such as applications submitted, run logs, status updates, and timestamps.

2. How we use your information

We use your information to operate the automated application service on your behalf. That includes materializing your profile into application answers, submitting applications to employers and applicant-tracking systems, showing you submitted jobs and results, providing customer support, maintaining billing records, and keeping the service reliable and secure.

3. Legal bases for processing (GDPR Art. 6)

For users in the European Economic Area, United Kingdom, or Switzerland, we process account, profile, resume, job preference, application, and billing data as necessary to perform our contract with you: running the service you signed up for. We process operational logs, security events, abuse-prevention signals, and support records based on our legitimate interests in protecting and improving Applify. Where consent is required, such as for any future non-essential cookies, we rely on consent and allow you to withdraw it as required by law.

4. How we share your information / sub-processors

We share personal information only with providers needed to deliver Applify and with the employers or job boards you ask us to apply to. Our sub-processors include Supabase for database, auth, and storage; Paddle as Merchant of Record for billing, payment processing, tax, and subscription administration; and the user-configured LLM providers you select for resume tailoring and application question-and-answer generation.

We may also disclose information when required by law or when necessary to protect Applify, our users, or the public. We do not sell your personal information.

5. Data retention

We keep your account, profile, resume, preference, application, and run data while your account is active. When you delete your account through your profile or request deletion by email, we delete or anonymize personal data unless we must keep limited records for legal, tax, security, or dispute purposes. Paddle retains its own billing records as needed to meet its legal obligations.

The app_password_enc value is stored encrypted and is never returned in exports.

6. Your GDPR rights

Depending on where you live, you may have the right to access, rectify, erase, or receive a portable copy of your personal data, and to restrict or object to certain processing. Export and delete are available self-service in your profile. You can also make a request by emailing privacy@tryapplify.com.

7. Your California privacy rights (CCPA)

California residents may have the right to know what personal information we collect, use, disclose, and share; to request deletion of personal information; and to be free from discrimination for exercising those rights.

We do not sell your personal information.

8. Cookies

We use essential/session cookies only; details are in our Cookie Policy.

9. Security

We use encryption in transit, store credentials encrypted at rest, and rely on row-level security to isolate each user's data. No system can be guaranteed perfectly secure, but we design Applify to limit access to the data needed for the service to function.

10. Changes to this policy

We may update this policy as Applify changes or legal requirements evolve. When we do, we will post the updated policy here and update the effective date above.

11. Contact

Questions about this policy or your data can be sent to privacy@tryapplify.com. Export and delete controls are also available self-service in your profile page.