Privacy Policy

What we collect

Each account’s data is kept separate from every other account’s. For your account we store:

• Your account email (and name, if you provide one).
• The résumé profiles you create and the applications we help you tailor.
• The jobs you save or apply to, and your application history.
• Recruiter messages routed to your inbox, and any mail from a Gmail you connect.
• Saved answers to common application questions.
• Job-site login credentials you add, and a connected-mailbox token if you link Gmail — both stored encrypted (see below).
• Your settings, including notification and Autopilot preferences, and your assistant (AI) conversation history.
• API tokens you create for programmatic access.

How we use it

To match you to roles, tailor your applications, and track replies. We do not sell your data, and we never share one account’s data with another. Hands-off Autopilot is off unless you turn it on; when on, it acts as you with your own session and never tries to defeat a site's bot detection — blocked submissions are handed back to you.

Credentials and connected mailboxes

Job-site passwords and any connected-mailbox token are encrypted at rest (AES-256-GCM) and are only ever used to act on your behalf for your own applications — never shared with other users or third parties. A connected Gmail is read-only by default: it reads your recruiter replies to show them in your inbox and does not send or change mail unless you explicitly enable sending. You can disconnect it at any time from Account → Email, and deleting your account also revokes that access at Google.

Sign-in

You sign in with a one-time code emailed to you, a magic link, or Google sign-in (which shares only your email and basic profile). Short-lived sign-in codes and link tokens are stored only as a hash and expire quickly. Your data is held in our own self-hosted database, not a third-party database provider.

AI processing

• Anthropic (Claude) — résumé and application tailoring, if a server API key is configured. The content you ask us to tailor is sent to Anthropic to generate a draft.
• Puter — optional in-browser AI tailoring; runs in your browser under your own Puter account, so your draft goes to Puter and its model provider only when you click “Improve with AI”.

Other processors

• Google (Gmail API, read-only) — reads recruiter replies for mailboxes you connect.
• An email provider — to send you sign-in codes and notifications you opt into.

We take no payments in this release, so there is no payment processor and we never see or store card details. Your plan simply sets how many assisted applications you get each cycle, which we count to enforce that limit.

Cookies

We use a single essential, HTTP-only cookie to keep you signed in. See our Cookie notice.

Export and deletion

You can download a complete JSON copy of your account, or permanently delete your account and all its data, from Account → Privacy & data. Deleting your account erases your profiles, applications, inbox, saved answers, settings, assistant history and credentials, and revokes any connected Gmail access. Email privacy@applyvex.com with questions.