Introduction
AI Applyd (we, our, the Service) is committed to protecting your privacy. This policy explains what we collect, how we use it, and your rights. The data controller under Art. 4(7) GDPR operates from Germany. Privacy contact: ava@aiapplyd.com. By using AI Applyd, you consent to the practices below.
Information We Collect
Account information
When you create an account, we collect your name, email, and authentication details. If you sign in with Google OAuth, we receive your name, email, and profile picture from Google.
Career profile data
You provide personal information such as work history, education, skills, and career preferences. We use this for resume scoring, job matching, AI-powered applications, resume building, and application tracking. Stored securely; used only for providing the Service.
Job and resume data
When you upload resumes or add job listings, AI Applyd runs them through AI models to generate ATS scores, match assessments, and improvement suggestions. Resume content is stored securely for scoring.
Usage and analytics data
We collect anonymized usage data (feature usage, session duration, interaction patterns) to improve the Service. Collected via PostHog analytics.
Relay email and on-your-behalf accounts
When you use auto-apply, we may create a private relay email address for you on a neutral domain and, for sites that require it, a candidate account on that site. We store the relay address, mail received at it (which we AI-classify into application statuses such as interview, offer, or rejection), and any account credentials we generate. Generated passwords are stored encrypted (AES-256-GCM); we never store the passwords to your existing accounts.
Payment information
Payment details (card numbers, billing addresses) are collected and processed directly by Stripe. We do not store full payment card details. We only receive transaction confirmations and subscription status from Stripe.
How We Use Your Information
We use your information to:
- Provide and operate the AI-powered job application platform.
- Process your career data for resume scoring, job matching, AI applications, and resume building.
- Process payments and manage subscriptions.
- Send transactional emails (account verification, password resets, payment receipts).
- Send onboarding and product update emails (unsubscribe anytime).
- Improve AI accuracy and Service quality from anonymized usage patterns.
- Ensure security and prevent abuse.
We do not sell, rent, or trade your personal information. We do not use your resumes, jobs, or application content to train AI Applyd's own models. AI requests route through OpenRouter to upstream model providers, each with its own data-handling policy linked from their site.
Applications We Submit on Your Behalf
When you use auto-apply, AI Applyd takes a few actions for you so applications can be submitted and tracked. Here is exactly what happens to your data.
Relay email address
We may create and operate a private relay email address on your behalf, on a neutral domain separate from aiapplyd.com. This address is used as the contact email on applications we submit for you, so replies, verification links, and recruiter messages arrive at an inbox we operate. Mail received there is processed and AI-classified to track your application status (for example, interview, offer, or rejection) and forwarded to you. The address is yours and persists for as long as we operate it, including after cancellation, so recruiter replies always have a home.
Accounts we create on your behalf
Some job sites require a candidate account before you can apply. For those, we may create an account on your behalf using your profile information, your relay email address, and a securely generated password that is stored encrypted (AES-256-GCM). These accounts exist only to complete your application and are surfaced to you in your dashboard, where you can view the credentials and sign in to that site yourself.
We do not store your job-site passwords
We never ask for, collect, or store the passwords to your existing job-site or email accounts. We apply through job sites' public career pages using only the profile information you provide, never your existing logins or session credentials.
Third-Party Services
We use the following third-party services. Each has its own privacy policy:
- Stripe - payment processing and subscription management.
- Amazon Web Services (SES) - transactional email delivery, and delivery and receipt of mail to your relay address (United States).
- PostHog - product analytics and usage tracking (anonymized).
- OpenRouter - AI gateway routing requests to upstream model providers for resume scoring, job matching, and application assistance.
- Google OAuth - optional authentication provider.
- Cloudflare - hosting, CDN, and security infrastructure.
- Cloudflare Turnstile - bot protection on our own site (replaces CAPTCHA).
- Steel.dev - cloud browser automation used to fill and submit job applications on your behalf.
- CapSolver - automated solving of CAPTCHA challenges encountered on third-party job sites during auto-apply.
- DataImpulse - residential proxy network used to route auto-apply traffic to job sites.
When you use AI features (resume scoring, AI-powered applications, resume building), relevant data is sent to our AI provider (OpenRouter) for processing. We send only the information needed for the specific action.
Data Storage and Security
Data is stored on Cloudflare's global infrastructure. Encrypted in transit via TLS/HTTPS. Encrypted at rest using Cloudflare D1's default at-rest encryption. We apply access controls, regular reviews, and minimal data collection. Only the creator (Ava Bagherzadeh) has administrative access to the production database.
Data Retention and Deletion
We retain account and profile data for as long as your account is active. You can delete your account from dashboard settings, which permanently removes your account data, career profiles, and usage history. After account deletion, we may retain anonymized aggregated data that cannot be linked back to you. Payment records may be retained as required by law or for legitimate business purposes (accounting, tax obligations).
Cookies and Tracking
AI Applyd uses the following cookies and tracking technologies:
- Essential cookies - required for authentication, session management, and security. Cannot be disabled.
- Analytics - we use PostHog for anonymized usage data. PostHog uses cookies to track sessions and identify returning users so we can understand interaction and improve the Service.
We do not use advertising cookies or third-party tracking pixels.
Email Communications
We send the following email types:
- Transactional emails - login links, password resets, payment receipts. Required for the Service.
- Onboarding emails - getting-started guides during your first week. Unsubscribe anytime.
- Product updates - milestone notifications, feature announcements, re-engagement. Unsubscribe anytime.
Every marketing and onboarding email includes an unsubscribe link. You can also contact us anytime to opt out of non-essential communications.
Your Rights
Depending on your location, you may have the following rights:
- Access - request a copy of the personal data we hold about you.
- Correction - update or correct inaccurate personal data.
- Deletion - request deletion of your personal data (available in settings or by contacting us).
- Portability - request your data in a structured, machine-readable format.
- Objection - object to processing for certain purposes.
- Restriction - request that we limit processing of your personal data.
To exercise these rights, contact privacy@aiapplyd.com. We respond within 30 days.
Children's Privacy
AI Applyd is not intended for use by individuals under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
Changes to This Policy
We may update this policy to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or through the Service. The Last updated date at the top of this page indicates the most recent revision.
Contact
For privacy-related questions, data requests, or concerns, contact privacy@aiapplyd.com or ava@aiapplyd.com.