Privacy policy

1. Information we collect

• Account information such as email address, name and authentication details.
• Profile and job-search preferences such as target roles, salary/rate preference, location, work mode, right-to-work notes and notice period.
• Uploaded or pasted CV/profile text and job descriptions used to generate application packs.
• Generated outputs such as match insights, tailored CV drafts, cover letters, recruiter messages, Q&A drafts and tracker entries.
• Billing and subscription identifiers handled through Stripe. We do not store full card numbers.
• Operational logs required for security, debugging, error handling and abuse prevention.

2. How we use information

We use your information to provide the service, generate and save application packs, manage subscriptions, enforce usage limits, provide support, handle refund requests, improve product quality and maintain security.

3. AI processing

When AI generation is enabled, your CV/profile text, job description and relevant saved preferences may be sent to an AI provider to generate application materials. Do not upload highly sensitive information unless it is necessary and you are comfortable with that processing.

4. Service providers

ApplyPilot may use third-party providers for hosting, authentication, database storage, payments, email delivery, AI generation and error monitoring. These providers process information only as needed to provide the service.

5. Data retention

Saved packs and tracker data remain available to your account unless you delete them or request account deletion. We may retain limited records where needed for billing, dispute handling, security, legal compliance or abuse prevention.

6. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data. You may also object to certain processing or request restriction. These rights may be subject to legal or operational limits.

7. Security

We use account authentication, database access controls, row-level security and provider security controls to protect user data. No system is completely secure, so users should avoid uploading unnecessary sensitive information.

8. Cookies and analytics

Essential cookies may be used for authentication and security. If analytics or marketing cookies are added, this policy, the cookie notice and preference controls will be updated as required.