Privacy Policy

AI Applyd (we, our, the Service) is an AI-powered job application platform operated from the United States by AI Applyd Inc., a Delaware corporation. AI Applyd Inc. is the business responsible for the personal information described in this policy. This policy explains what we collect, what we do with it, who we share it with, how long we keep it, and what you can make us do about it.

Privacy contact: privacy@aiapplyd.com. Privacy requests go to that address and are handled by us directly.

This policy does not run on your consent alone. Most of what we do with your data we do because it is necessary to provide the service you asked for, or because it is necessary to run that service safely and lawfully. Section 04 sets out each purpose and the choice you have over it, because the choice is the part that matters.

We use your information to:

• Provide and operate the AI-powered job application platform.
• Process your career data for resume scoring, job matching, AI applications, and resume building.
• Process payments and manage subscriptions.
• Send transactional emails (account verification, password resets, payment receipts).
• Send onboarding and product update emails (unsubscribe anytime).
• Improve AI accuracy and Service quality from aggregated usage patterns.
• Ensure security and prevent abuse.

We do not sell, rent, or trade your personal information. We do not use your resumes, jobs, or application content to train AI Applyd's own models. AI processing uses OpenRouter and the model providers described in Section 07, and Cloudflare Workers AI for job-preference matching. Their policies explain how they handle the information they receive.

These are the purposes we process personal information for, and what you can do about each one.

• Providing the Service - running your account, managing saved work, operating your relay inbox, creating candidate accounts where a job site requires one, and taking payment. The separate AI data-sharing control asks whether you allow AI processing. Your choice belongs to your account across the web and mobile apps. Open AI data sharing in mobile Profile or web account settings to change it. You can decline or withdraw permission and still view, manually edit and export saved work. Withdrawal stops new AI requests; it cannot recall information already sent.
• Security and fraud prevention - keeping accounts safe, detecting abuse, rate-limiting, blocking automated attacks, and protecting the platform and the people on it. This runs for everyone and is not something we will switch off on request.
• Product analytics - understanding which features are used, where people get stuck, and how to reproduce a bug you report. You can refuse analytics technologies with the controls in Section 10, at no cost to your access or your price.
• Service, onboarding and product email - telling you about a product you already use. Transactional mail is part of the Service; everything else carries an unsubscribe link in every message.
• Advertising and conversion measurement - where we run paid campaigns, establishing that a sign-up came from an ad we paid for. This is the purpose you can opt out of most directly; see Section 10 and Section 12.
• Legal compliance and defending claims - keeping invoices and payment records for the periods tax and commercial law require of us, responding to lawful requests, and establishing or defending legal claims. That includes answering a payment dispute with the records described in Section 12 of our Terms of Service.

We do not ask for and do not want sensitive information - health, ethnicity, religion, sexual orientation, trade-union membership, immigration status, precise geolocation, biometric or genetic data. Some employer forms ask for diversity information. We do not answer those questions from inferred data, and we do not store answers to them beyond what your profile explicitly contains. Please do not put sensitive information into your profile or resume unless you want it sent to employers.

When auto-apply is on, we rank job matches and complete and submit application forms automatically, on your instruction and using rules and models you configure in your AI settings. That is automation of a task you would otherwise do yourself. We make no decision about you - employers do, and we neither influence nor receive the basis of their decision.

You remain in control of it: you can turn auto-apply off, change your matching preferences and scoring weights, review every submission in your dashboard, and ask us to correct anything we generated. If you would rather nothing were sent without you looking at it first, keep auto-apply off and submit from the review queue.

When you use auto-apply, AI Applyd takes a few actions for you so applications can be submitted and tracked. Here is exactly what happens to your data.

We use the following third-party services. Each has its own privacy policy:

• Stripe - payment processing and subscription management.
• Amazon Web Services (SES) - transactional email delivery, and delivery and receipt of mail to your relay address (United States).
• PostHog - product analytics, usage tracking and session recording of our own pages (pseudonymous, EU-hosted).
• OpenRouter and AI model providers - OpenRouter routes AI requests to OpenAI, Google, Z.AI, Moonshot AI, DeepInfra, DeepSeek, Baidu or NVIDIA for document processing, job matching, interview preparation and application assistance. The AI data-sharing disclosure names the companies covered by your choice and links their policies.
• Google OAuth - optional authentication provider.
• Cloudflare - hosting, CDN and security infrastructure, and Workers AI processing of job preferences to support matching.
• Cloudflare Turnstile - bot protection on our own site (replaces CAPTCHA).
• Steel.dev - cloud browser automation used to fill and submit job applications on your behalf.
• CapSolver - automated solving of CAPTCHA challenges encountered on third-party job sites during auto-apply.
• Geonode - residential proxy network used to route auto-apply traffic to job sites.
• Meta, Google and TikTok advertising platforms - where we run paid campaigns, to measure that a sign-up came from an ad. They receive event and hashed-identifier data, never your resume, job or application content, and not where you have opted out of advertising technologies (see Section 10).

How each company handles information depends on its service, its policies and any applicable agreements. Employers and advertising platforms make their own decisions about information they receive. We do not sell or rent your personal information to anyone.

With your permission, AI actions can send profile and contact details, resumes and other uploaded documents, career history, job preferences, application information, answers, messages and application-page screenshots to the AI companies named above. The disclosure explains these uses and asks you to allow or decline them. Signing in, using the Service, choosing analytics or closing the disclosure does not grant AI permission. Permission does not give every recipient the same retention or model-training policy; read the linked company policies before choosing.

Data is stored on Cloudflare's infrastructure. It is encrypted in transit via TLS/HTTPS and at rest using Cloudflare D1's at-rest encryption. We apply access controls, regular reviews, and minimal collection. Only AI Applyd Inc. has administrative access to the production database.

We keep data only as long as the purpose it was collected for lasts, and then delete it. In practice:

• Account and career profile - for as long as your account exists. Delete your account in dashboard settings and it goes, along with your profiles and usage history.
• Applications and their timelines - for the life of the account, because they are your record of what was sent in your name and you may need it long after the fact.
• Relay inbox and mail received there - while we operate the address for you, so that a recruiter reply months later still reaches you. Ask us and we will retire the address.
• Credentials for accounts we created on your behalf - encrypted, for the life of the account, so you can keep signing in to those job sites yourself.
• Security and abuse logs - up to 24 months, then deleted.
• Records of your acceptance of these documents - for as long as a claim arising from your contract could still be brought, because their whole purpose is to answer one.
• Invoices and payment records - for the periods tax and commercial law requires of us. This is a legal obligation and survives account deletion; we cannot delete these on request.
• Backups - deleted on their normal rotation after the primary record goes.

After deletion we may keep aggregated or anonymised figures that cannot be linked back to you.

AI Applyd uses the following cookies and similar technologies:

• Essential - authentication, session management, security and bot protection. These cannot be switched off without breaking sign-in.
• Product analytics - PostHog, to understand which features are used and where people get stuck, and to record sessions so we can reproduce a bug you report. It sets cookies and uses local storage to recognise a returning browser.
• Advertising and conversion measurement - where we are running paid campaigns, our pages may load the Meta pixel, Google Ads or Google Tag Manager tags, and the TikTok pixel, so that an advertising platform can tell us that a sign-up came from an ad we paid for. These set third-party cookies and share a hashed identifier with that platform.

⚠️ Correction, 17 August 2026: earlier versions of this page said we used no advertising cookies or third-party tracking pixels. That was true when it was written and stopped being true when we started running paid acquisition. The sentence above replaces it. We would rather publish the correction than quietly leave a comfortable line in place - and if you want to know what changed and when, ask us.

We send the following email types:

• Transactional emails - login links, password resets, payment receipts. Required for the Service.
• Onboarding emails - getting-started guides during your first week. Unsubscribe anytime.
• Product updates - milestone notifications, feature announcements, re-engagement. Unsubscribe anytime.

Every marketing and onboarding email includes an unsubscribe link. You can also contact us anytime to opt out of non-essential communications.

US state privacy laws give residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia the rights below. We extend them to everyone who uses AI Applyd, wherever you live, because operating two standards is how mistakes get made.

• Know - what personal information we collect, why we process it, and who we disclose it to. This policy is that disclosure; ask us if anything in it is unclear.
• Access - confirm whether we are processing your personal information, and get a copy of what we hold.
• Correct - fix anything inaccurate. Most of your profile you can edit yourself in your dashboard.
• Delete - delete your personal information, from dashboard settings or by contacting us, other than the records we are required to keep (see Section 09).
• Obtain a copy, and take it with you - receive your data in a portable, structured, machine-readable format you can move elsewhere.
• Opt out of targeted advertising, sale and sharing - we do not sell your personal information for money, and we do share hashed identifiers with advertising platforms for conversion measurement. You can switch that off with the controls in Section 10, or by writing to us.
• Opt out of profiling - auto-apply ranks and submits on your instruction and you can turn it off at any time; see Section 05.
• No discrimination for asking - exercising any of these is free, and never costs you access to the product, a feature, a different level of service, or a different price.

To exercise these rights, contact privacy@aiapplyd.com. We respond within 45 days, as US state privacy laws require, and will tell you if we need a further 45 days and why. We may need to verify that the request is really yours before we act on it, usually by asking you to send it from the email address on the account.

Where the mandatory law of the country in which you live gives you rights that cannot be waived, those rights apply and nothing here limits them.

AI Applyd is for adults aged 18 and older. We do not permit anyone under 18 to create an account or use the Service, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it promptly. We also do not knowingly sell or share the personal information of anyone under 16 for targeted advertising, and we would not do so without the opt-in that US state law requires.

We may update this policy to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or through the Service. The Last updated date at the top of this page indicates the most recent revision.

For privacy-related questions, data requests, or concerns, contact privacy@aiapplyd.com.