Introduction
AI Applyd (we, our, the Service) is committed to protecting your privacy. This policy explains what we collect, how we use it, and your rights. The data controller under Art. 4(7) GDPR operates from Germany. Privacy contact: ava@aiapplyd.com. By using AI Applyd, you consent to the practices below.
Information We Collect
Account information
When you create an account, we collect your name, email, and authentication details. If you sign in with Google OAuth, we receive your name, email, and profile picture from Google.
Career profile data
You provide personal information such as work history, education, skills, and career preferences. We use this for resume scoring, job matching, AI-powered applications, resume building, and application tracking. Stored securely; used only for providing the Service.
Job and resume data
When you upload resumes or add job listings, AI Applyd runs them through AI models to generate ATS scores, match assessments, and improvement suggestions. Resume content is stored securely for scoring.
Usage and analytics data
We collect anonymized usage data (feature usage, session duration, interaction patterns) to improve the Service. Collected via PostHog analytics.
Payment information
Payment details (card numbers, billing addresses) are collected and processed directly by Stripe. We do not store full payment card details. We only receive transaction confirmations and subscription status from Stripe.
How We Use Your Information
We use your information to:
- Provide and operate the AI-powered job application platform.
- Process your career data for resume scoring, job matching, AI applications, and resume building.
- Process payments and manage subscriptions.
- Send transactional emails (account verification, password resets, payment receipts).
- Send onboarding and product update emails (unsubscribe anytime).
- Improve AI accuracy and Service quality from anonymized usage patterns.
- Ensure security and prevent abuse.
We do not sell, rent, or trade your personal information. We do not use your resumes, jobs, or application content to train AI Applyd's own models. AI requests route through OpenRouter to upstream model providers, each with its own data-handling policy linked from their site.
Third-Party Services
We use the following third-party services. Each has its own privacy policy:
- Stripe - payment processing and subscription management.
- Resend - transactional and marketing email delivery.
- PostHog - product analytics and usage tracking (anonymized).
- OpenRouter - AI model provider for resume scoring and job matching.
- Google OAuth - optional authentication provider.
- Cloudflare - hosting, CDN, and security infrastructure.
- Cloudflare Turnstile - bot protection (replaces CAPTCHA).
When you use AI features (resume scoring, AI-powered applications, resume building), relevant data is sent to our AI provider (OpenRouter) for processing. We send only the information needed for the specific action.
Data Storage and Security
Data is stored on Cloudflare's global infrastructure. Encrypted in transit via TLS/HTTPS. Encrypted at rest using Cloudflare D1's default at-rest encryption. We apply access controls, regular reviews, and minimal data collection. Only the creator (Ava Bagherzadeh) has administrative access to the production database.
Data Retention and Deletion
We retain account and profile data for as long as your account is active. You can delete your account from dashboard settings, which permanently removes your account data, career profiles, and usage history. After account deletion, we may retain anonymized aggregated data that cannot be linked back to you. Payment records may be retained as required by law or for legitimate business purposes (accounting, tax obligations).
Cookies and Tracking
AI Applyd uses the following cookies and tracking technologies:
- Essential cookies - required for authentication, session management, and security. Cannot be disabled.
- Analytics - we use PostHog for anonymized usage data. PostHog uses cookies to track sessions and identify returning users so we can understand interaction and improve the Service.
We do not use advertising cookies or third-party tracking pixels.
Email Communications
We send the following email types:
- Transactional emails - login links, password resets, payment receipts. Required for the Service.
- Onboarding emails - getting-started guides during your first week. Unsubscribe anytime.
- Product updates - milestone notifications, feature announcements, re-engagement. Unsubscribe anytime.
Every marketing and onboarding email includes an unsubscribe link. You can also contact us anytime to opt out of non-essential communications.
Your Rights
Depending on your location, you may have the following rights:
- Access - request a copy of the personal data we hold about you.
- Correction - update or correct inaccurate personal data.
- Deletion - request deletion of your personal data (available in settings or by contacting us).
- Portability - request your data in a structured, machine-readable format.
- Objection - object to processing for certain purposes.
- Restriction - request that we limit processing of your personal data.
To exercise these rights, contact privacy@aiapplyd.com. We respond within 30 days.
Children's Privacy
AI Applyd is not intended for use by individuals under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
Changes to This Policy
We may update this policy to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or through the Service. The Last updated date at the top of this page indicates the most recent revision.
Contact
For privacy-related questions, data requests, or concerns, contact privacy@aiapplyd.com or ava@aiapplyd.com.