The aplies website uses no advertising and no third-party tracking technologies of any kind. What you give us through it — when you create an account, sign in or write to us — is handled under this Policy, together with the personal information processed by the aplies extension and Service, where you do provide us with data. While you are signed in we keep basic records of how the Service is used, to run, secure and improve it; they are never sold, never used for advertising, and never shared with third parties for their own purposes.
We built aplies on a simple commitment: your data is yours. We do not sell your personal information, and we do not use the content of your curriculum vitae or your individual applications to train models. This Policy sets out exactly what we collect, why, the legal bases we rely on, and the rights and choices you have.
THE SHORT VERSION
- Your data is yours. We don't sell it, and we don't use your CV or applications to train AI models.
- We collect what we need to run the service: your account, your CV, your application settings, and activity logs.
- We never see your job-platform password, and we don't collect biometrics or ID documents.
- When aplies applies for you, your information goes to that platform or employer and is then governed by their privacy policy — not ours.
- You can access, correct, delete, or export your data at any time — just ask.
- If a data breach ever affects you, we tell you, as the law requires.
This summary is for convenience only and does not replace the full text below, which controls.
1. Who We Are, Scope, and Contacts
1.1 Controller. For applicable data-protection law, aplies is the controller of the personal information described here. For processing carried out on your behalf to complete applications, aplies acts as your processor, as described in Section 5.
1.2 Contacts. Privacy and data-subject requests: [email protected]. General support and account questions: [email protected]. We answer privacy correspondence sent to either address. Formal legal notice must be served by post, not by email, as set out in the Terms of Service.
1.3 Scope. This Policy applies to personal information processed through the Service. It does not apply to Third-Party Platforms, employers, recruiters, or payment processors, whose own policies govern their processing (see Section 8).
2. Information We Collect
We collect the following categories of personal information. We do not collect biometric data or government-identity verification documents.
| Category | Examples | Source | Primary purpose |
|---|---|---|---|
| Account & identity | Name, email, password credentials | You | Create and manage your Account |
| CV & profile content | Curriculum vitae, work history, education, skills, contact details, and any information you include (may contain sensitive data) | You | Learn your experience and tone; complete applications |
| Application inputs & answers | Job titles, locations, filters, screening answers, supervision settings | You / generated | Search, match, and submit applications you direct |
| Derived profile data | Phrasing, tone, and attributes extracted from your CV | Generated | Prepare responses in your style |
| Activity & attempt logs | Opportunities found, forms completed, submissions, Credits consumed, outcomes | Generated | Provide, secure, and support the Service |
| Payment data | Confirmation, token or last digits, billing metadata (no full card number) | Our third-party payment processor | Manage Plans and prevent fraud |
| Technical & usage data | Browser, OS, language, approximate region, diagnostics, crash data | Automatic | Operate, secure, and improve the Service |
2.1 Credentials. The Service operates within your own browser session on Third-Party Platforms. We do not ask for, collect, or store your Third-Party Platform passwords on our servers. The Service relies on the session you have already authenticated in your own browser.
3. How We Use Information, and Purpose Limitation
We use personal information only for the following purposes (a closed list):
- to provide and operate the Service — searching, matching, preparing responses in your tone, completing forms, and submitting applications you direct;
- to create and manage your Account, Plans, and Credit balances, and to process payments;
- to provide support and respond to your requests;
- to detect, prevent, and investigate fraud, automation abuse, Account-sharing, Credit abuse, platform-risk patterns, and security incidents — this purpose applies even where other commitments in this Policy would otherwise limit use;
- to maintain, secure, and improve the Service using de-identified, aggregated, or non-personal data; and
- to comply with legal obligations and respond to lawful requests.
3.1 No repurposing. We do not use the content of your CV or applications for advertising, and we do not use it to train models. We will not use your personal information for a materially different, incompatible purpose without notifying you and, where required, obtaining your consent.
4. Legal Bases for Processing
Where the GDPR, UK GDPR, or a similar law applies, we rely on the following legal bases:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the Service you request (running applications, billing) | Performance of a contract |
| Fraud/abuse detection, security, service improvement on de-identified data | Legitimate interests |
| Processing sensitive information contained in your CV, at your instruction | Consent (together with an applicable Art. 9 condition) |
| Tax, accounting, and legal-compliance records | Legal obligation |
Where you include sensitive information in your CV, you instruct us to process it to deliver the Service, and, where required, we rely on your explicit consent or another lawful condition. You may withdraw consent at any time without affecting prior lawful processing.
5. Automated Processing and the AI Agent
5.1 How the AI Agent processes your data. The Service uses automated processing to search, match, prepare responses in your tone, complete forms, and submit applications. This processing operates under your supervision and direction: you choose the mode (manual, automatic, or scheduled), configure the criteria, and initiate each run, and you can review submissions.
5.2 No significant automated decisions about you. aplies does not use automated processing to make decisions that produce legal or similarly significant effects on you without your direction. The Service acts as your instrument; it does not decide your eligibility, creditworthiness, or rights. It does not infer or make decisions based on protected characteristics.
5.3 Processor role. When the AI Agent processes your User Content to perform tasks on your behalf and under your instructions, aplies acts as your processor for that content.
6. Model Training and Sensitive Data
6.1 No training on your CV or applications. We do not sell your personal information, and we do not use the content of your curriculum vitae or your individual applications to train, fine-tune, or evaluate publicly available or third-party foundation models. aplies contracts with its AI-processing providers on terms that prohibit those providers from using your content to train their general models.
6.2 Sensitive data in CVs. A CV or application may reveal sensitive information (for example, health, religion, ethnicity, or disability). aplies will not use this content for advertising, for profiling on sensitive categories, to infer protected characteristics, or to train models. It is processed only to deliver the Service you request.
6.3 De-identified and aggregated data. We may create and use de-identified or aggregated data (which does not identify you) indefinitely to maintain quality, safety, and reliability and to improve the Service, and we will not attempt to re-identify it.
8. Third-Party Platforms and Data You Send Through Them
When the AI Agent acts on a Third-Party Platform at your direction, your data — including your CV, answers, and application content — is transmitted to and received directly by that platform or the relevant employer, and is then processed under that platform’s or employer’s own privacy policy, not this one. aplies is independent and not affiliated with, endorsed by, or sponsored by any Third-Party Platform, and does not control its use of your data. Review the policies of any platform or employer before applying through it.
9. International Data Transfers
aplies operates globally, and your information may be processed in countries other than your own. Where we transfer personal information out of the EEA or the UK, we rely on an adequacy decision or appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, and apply equivalent protections. You may request more information about the safeguards we use at [email protected].
10. Data Retention
We keep personal information only as long as necessary for the purposes in this Policy. The periods below are the ones we apply:
| Data | Retention |
|---|---|
| CV & profile / derived data | While your Account is active; deleted on Account closure per below |
| Application inputs & attempt logs | Retained for 90 days for dispute, abuse, and support windows |
| Account & billing records | As required by tax and legal obligations after Account closure |
| De-identified / aggregated data | May be retained indefinitely (does not identify you) |
On Account deletion we make your personal data inaccessible immediately. After a 30-day recovery window — during which you can still ask us to restore the Account — we delete your profile and CV, your saved application details, your application history and its logs, your sign-in history, your devices and their tokens, your notifications and notification settings, your page visits, your error diagnostics, your verification records, and every stored copy of your email address and phone number outside the financial records described below. Your Account record itself is not deleted, because our financial records point at it: your name, image, email address, phone number and billing contact details are removed from it and replaced with an internal reference.
A few records have to outlive the Account, and those are anonymised rather than deleted: the record of a support conversation or a meeting you asked us for, and our internal audit trail of what happened on the Account. In each case the record stays and your name, contact details and IP address are removed from it, as is anything you told us about yourself when asking for the meeting. What a support conversation was about, and what was written in it, stays — that conversation is the record. Our backups follow within a further 35 days, giving a maximum of 65 days from your request.
We keep financial records — invoices, payments and the transactions behind them — for 12 months or longer where tax and accounting law requires it. What stays is the transaction and the billing details the document itself shows: an internal account reference, and the name, billing address and billing email printed on an invoice or receipt we have already issued, which we may not alter after the fact. Your telephone number is removed from them, and your profile, CV, sign-in history and activity are not part of them.
Free credits are unlocked by verifying a phone number, and each number unlocks them for one account. So that deleting an Account and opening a new one does not unlock them again, we keep a one-way fingerprint of the number that unlocked them — derived with a secret key, from which the number itself cannot be read back — together with an internal account reference, after the Account is deleted.
11. Security and Breach Notification
We implement commercially reasonable technical and organisational measures designed to protect personal information, such as encryption in transit and (where appropriate) at rest, access controls, and monitoring. No method of transmission or storage is completely secure, we cannot guarantee absolute security, and there may be a short delay between deletion and removal from backups. You are responsible for keeping your Account credentials and devices secure and for notifying us of any suspected compromise. In the event of a personal-data breach that is likely to affect you, we will notify affected users and the relevant authorities as required by applicable law (for example, without undue delay and, where required, within 72 hours under the GDPR).
13. Your Rights and Choices
Depending on where you live, you may have some or all of these rights over your personal information:
- to access your information and obtain a copy;
- to correct inaccurate or incomplete information;
- to delete your information;
- to restrict or object to certain processing, including profiling;
- to data portability, where applicable;
- to withdraw consent at any time, without affecting prior lawful processing; and
- to lodge a complaint with your local supervisory authority or regulator.
13.1 How we handle requests. Send your request to [email protected]. We verify your identity before acting on a request; we accept requests from an authorised agent where permitted; we respond within the time required by law (generally one month, extendable); we do not retaliate against you for exercising your rights; and we may charge a reasonable fee or decline a request that is manifestly unfounded or excessive.
13.2 United States — state privacy rights. If you are a resident of California or another US state with a comprehensive privacy law, you may have rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the “sale” or “sharing” of personal information and of certain targeted advertising and profiling. aplies does not “sell” or “share” personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA, and does not use sensitive personal information beyond the purposes permitted by law. We provide a notice at or before the point of collection. To exercise your rights, contact [email protected]; you may use an authorised agent where permitted.
13.3 EEA / UK and other regions. The rights above apply as provided by your local law. Write to [email protected] (see Section 1.2) and we will handle your request directly. You always retain the right to lodge a complaint with the supervisory authority or data-protection regulator in your country of residence, place of work, or place of the alleged infringement.
14. Children’s Privacy
The Service is not directed to, and may not be used by, anyone under eighteen (18) years of age, or a higher age where required by local law. We do not knowingly collect personal information from children; if we learn we have, we will delete it. Contact [email protected] if you believe a child has provided us information.
15. Your Responsibility for Data You Submit
You control what you upload and what the Service submits on your behalf. Do not enter into a CV, answer, or application any confidential, sensitive, or third-party information that you are not authorised to share. You are responsible for the personal information of others that you include (for example, references or former employers), and you confirm you have the right to provide it (see Terms of Service, Section 5.5).
16. Changes to This Policy
We may update this Policy at any time. When we make material changes, we will update the “Last updated” date and version and take reasonable steps to notify you, such as by in-Service notice or email, before the change takes effect. We will not reduce your rights under this Policy without your explicit consent. Your continued use after the effective date constitutes acceptance, except where additional consent is required by law.
17. Contact Us
Privacy and data-subject requests: [email protected]. This is also the address for legal correspondence and intellectual-property complaints.
General support, account, and billing questions: [email protected].
Formal legal notice must be served by post, not by email. The address for service is provided on written request to [email protected], as set out in the Terms of Service.
If you are not satisfied with our response, you may complain to your local data-protection authority.
aplies is an independent product, not affiliated with or endorsed by LinkedIn. Questions about this document: [email protected]