Applyy

Privacy and data choices

Applyy privacy policy. Career data and AI.

What Applyy collects, why it is needed, where processors help, and how to exercise your choices.

Information Applyy collects

You may provide account and contact details, career history, job preferences, compensation expectations, application defaults, resumes, cover letters, evidence-library material, support requests, and optional provider credentials. Applyy also stores jobs and application activity associated with your account so the product can discover, evaluate, prepare, and track opportunities.

If you request private beta access, Applyy collects your name and email address. You may optionally provide how you heard about Applyy, a LinkedIn profile URL, and context about your search. Applyy uses that information to evaluate the request, communicate next steps, and support beta participation. Founder correspondence may be prepared in an authorized founder email account, but Applyy does not use that connection to read the founder's inbox or send messages without founder review.

Applyy collects limited operational and first-party product analytics, including page and feature activity, referral and campaign fields, coarse device or runtime information, extension connection and autofill outcomes, and approximate geography derived at the network edge. The product analytics table does not store raw IP addresses, email addresses, document content, application answers, full application URLs, or raw search text.

  • No sale or rental of personal information
  • No cross-site behavioral advertising
  • No public profile created from uploaded career documents
  • Passwords are handled by Applyy's authentication processor, not stored by Applyy

How information is used

Applyy uses information to provide account access; discover and rank jobs; prepare user-reviewed documents and answers; support browser-assisted form completion; maintain Search and Tracker; respond to support requests; prevent abuse; secure and debug the service; and measure product reliability and improvement.

Where data-protection law requires a legal basis, Applyy relies on performance of the service requested by the user, legitimate interests in operating and securing the product, consent for optional activities, and legal obligations where applicable. Applyy does not use career documents or application answers for advertising profiles.

AI and service providers

Relevant resume, profile, and job-description content may be sent through Applyy's server-side AI gateway when you request scoring, parsing, tailoring, or generation. Applyy does not use your career content to train its own general-purpose model or authorize providers to use that content for advertising.

Applyy uses service providers for authentication and database storage, hosting, transactional email, founder-reviewed beta correspondence, application monitoring, error reporting, and selected AI processing. These providers include Supabase, Railway, Netlify, Resend, Google, Sentry, and the AI provider active for a requested feature. They process information under their service terms and only for the functions Applyy uses them to perform.

Optional autofill correction sharing

Correction sharing is off by default. You can enable Share autofill corrections in the extension popup to help Applyy improve form filling. For an opted-in autofill run, the extension compares field values in memory to detect when you correct an answer, complete a blank field, or clear a field. It excludes sensitive and sign-in fields. Observation lasts up to 30 minutes per run and stops when you change accounts, move to a different application, or turn sharing off.

Correction reports contain an opaque field identifier, control type, question category, required-field flag, change type, and counts. They are linked to your account and the existing autofill run. These reports do not contain answers, typed text, option labels, file names, or page URLs. Authorized Applyy staff review the metadata to identify recurring problems and test improvements. A correction does not change your profile or become a saved answer for another user.

Unsent correction metadata may remain in extension storage for up to 24 hours while delivery is retried. Turning sharing off or changing accounts clears unsent reports. Accepted reports remain with the server's autofill run records under the account and reliability retention practices below; turning sharing off does not delete reports already received. You can request deletion at privacy@applyy.io.

Autofill and its usual run and error logging continue when correction sharing is off. Reports you explicitly send through Report autofill issue are separate. Older extension versions may have saved answers in this browser; those records are no longer used for autofill, and Clear previously remembered answers in the popup removes them without changing your profile.

Email and notification choices

Essential account, authentication, security, access-request, and support-response messages are sent when needed to provide or protect the service. This includes direct, one-to-one follow-up about a private beta request. These messages are not promotional and cannot be disabled while the related account or request remains active; recipients can reply or contact privacy@applyy.io to close the request.

The Applyy Daily Digest and immediate hot-match alerts are optional. Signed links in either email let you change digest size and cadence, hot-match score and daily limits, quiet hours, delivery time zone, or turn each category off without signing in. Applyy also supports category-specific one-click unsubscribe headers. Preference changes are applied immediately in the product, and a privacy-safe event record is retained to demonstrate that the choice was honored.

  • Manage notifications in Settings → Account
  • Use Email preferences in an Applyy email footer
  • Unsubscribe without deleting your account
  • Fresh matches remain in Search and Tracker when email is off

Storage, security, and retention

Account data is stored in the United States using access controls that include HTTPS, authenticated sessions, service-role separation, and row-level security. Account information is not end-to-end encrypted, so authorized Applyy administrators and infrastructure providers may access it when necessary to operate, secure, or support the service.

Active account data is retained while the account is open and as needed to provide the service. First-party product analytics events are scheduled for deletion after 13 months. Security, reliability, transaction, consent, and suppression records may be retained longer where reasonably necessary to prevent abuse, prove that a request was honored, resolve disputes, or meet legal obligations.

Browser storage and privacy signals

Applyy uses essential browser storage for authentication, preferences, and product operation, plus privacy-limited first-party analytics to understand reliability and feature use. Applyy does not use third-party advertising cookies or authorize third parties to track users across unrelated websites through Applyy for behavioral advertising.

Because Applyy does not sell personal information or share it for cross-context behavioral advertising, legacy browser Do Not Track signals do not change how the service operates. Applyy will treat a legally recognized opt-out preference signal as a request to opt out of any sale or sharing if those practices are introduced in the future.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; withdraw consent; restrict or object to certain processing; and lodge a complaint with a privacy regulator. Applyy will not discriminate against you for exercising an applicable privacy right.

To request access, correction, deletion, portability, or another privacy action, email privacy@applyy.io. Applyy may need to verify that the requester controls the relevant account before disclosing or deleting account information.

Other important information

Applyy is not directed to people under 18 and does not knowingly collect personal information from children. Information may be processed in the United States, which may have different data-protection laws from your jurisdiction.

Applyy may update this policy as the product, providers, or legal requirements change. Material changes will be dated here and communicated through an appropriate account or service notice. Questions and privacy requests can be sent to privacy@applyy.io.

Privacy question or request?

Email privacy@applyy.io to request access, correction, deletion, portability, or another applicable privacy action.

Continue exploring Applyy