Legal
Privacy Policy
Last updated: 2 October 2026
This Privacy Policy explains how AI Apply Agent (“we”, “us”, “our”) handles personal information when you use our website, web app, Chrome extension, and related services (the “Service”). By creating an account or using the Service, you agree to this Policy. For how you may use the Service, see our Terms of Service.
This document is written to match how the product works today. It is not legal advice. If you need jurisdiction-specific counsel, consult a lawyer in your country.
1. Who we are
AI Apply Agent is an AI-assisted job search and career workspace. It helps you discover roles, score fit against your profile, tailor resumes and cover letters, practice interviews, track applications, watch dream companies, and (where available) prepare or assist with applications to public employer career boards.
2. Data we collect
Account data. Email address, password (stored as a secure hash), name if you provide it, plan/subscription status, and admin flags if applicable.
Profile & career content. Resume files and parsed resume text; work history, education, skills, projects, preferred locations/seniority/salary; cover letters; tailored resume versions; interview prep notes and feedback; application tracker status; saved and dismissed jobs; dream-company watches.
Job & usage data. Jobs you view, search queries, fit-score and other AI feature requests, auto-apply packets or assisted-apply attempts (including answers we generate for public forms), and related timestamps.
Payments. Billing is processed by Stripe. We store subscription / entitlement state needed to unlock paid features. We do not store full card numbers on our servers; Stripe handles payment instrument data under its own terms.
Communications. Email verification and password-reset messages; optional newsletter subscriptions (and unsubscribe tokens); WhatsApp linking status if you connect that channel.
Product analytics. Lightweight events such as page views and job searches (session id, path, device/browser hints, optional country if provided) so we can operate and improve the Service. Signed-in events may be associated with your user id.
Technical data. IP address (e.g. for rate limiting), user agent, cookies/session tokens required to keep you signed in, and server logs for security and debugging.
3. How we use data
- Provide and secure accounts, sessions, and billing entitlements.
- Parse resumes, build profiles, rank jobs, generate fit explanations, tailored documents, interview content, newsletters, and auto-apply assistance using AI models.
- Operate application tracking, dream-company alerts, and admin CRM tools.
- Send transactional email (verify, reset, receipts) and optional marketing if you opt in.
- Monitor abuse, debug outages, and understand product usage at an aggregate level.
- Comply with law and enforce our Terms.
4. AI processing
Features such as fit scoring, resume tailoring, cover letters, interview prep, newsletters, and auto-apply answer mapping send relevant profile and job text to third-party AI providers (for example large-language-model APIs) so the feature can run. We instruct models not to invent unsupported claims about you where the product is designed that way, but AI output can still be imperfect — you remain responsible for reviewing content before you send it to employers.
Do not upload data you are not allowed to share. Avoid putting government IDs, financial account numbers, or other highly sensitive personal data into free-text fields unless a feature specifically requires it and you understand the risk.
5. Auto Apply & employer forms
Where Auto Apply (or assisted apply) is available, we may generate answers from your profile, prepare tailored resume/cover PDFs, and — as features roll out — help fill public employer application forms on boards such as Greenhouse, Lever, or Ashby. Voluntary EEO / self-identification questions (for example race, disability, veteran status, gender) are treated as user-controlled and are not intended to be silently invented or forced from inferred data.
Submitting an application to an employer shares whatever you authorize with that employer under their privacy practices. We do not control third-party career sites.
5A. Chrome extension (AutoApply)
If you install our optional AutoApply Chrome extension, it runs in your browser to help fill LinkedIn Easy Apply and Indeed Apply forms using the profile you already keep in your AI Apply Agent account. The extension:
- Reads job-application page content in your active LinkedIn/Indeed tab only when you start Auto Apply (or related assist actions).
- Uses your signed-in AI Apply Agent session (cookies / tokens for
aiapplyagent.com) so it can load your profile and application preferences — it does not sell that data. - May send form-field text and relevant profile snippets to AI providers we use for the Service (see section 4) so answers can be suggested; captcha-solving vendors may be used only when a challenge blocks apply and you have enabled that path.
- Stores limited local extension state (for example run status) in Chrome storage on your device.
You can remove the extension at any time from chrome://extensions. Uninstalling stops further on-page assist; your website account data remains governed by the rest of this Policy until you delete the account.
6. Sharing
We share data only as needed to run the Service, including:
- Processors: hosting, databases, email delivery, Stripe, AI model providers, and similar infrastructure vendors under contractual obligations.
- Employers / ATS sites: only when you (or an authorized assisted apply flow you start) submit an application or open their forms.
- Legal / safety: if required by law, or to protect users, the Service, or rights against fraud and abuse.
We do not sell your personal information.
7. Cookies & similar tech
We use essential cookies / tokens for authentication and session security. We may store a local analytics session id in your browser for product metrics. We do not use that mechanism to sell ads.
8. Retention
We keep account and profile data while your account is active and for a reasonable period afterward for backups, disputes, and legal compliance. You may request deletion of your account data (see below). Server logs and analytics events may be retained for shorter operational windows.
9. Security
We use industry-standard measures such as encrypted transport (HTTPS), hashed passwords, access controls for admin tools, and least-privilege practices. No method of transmission or storage is 100% secure.
10. Your choices & rights
- Access and update profile and resume content in the app.
- Unsubscribe from marketing emails via the link in those emails.
- Disconnect optional channels (for example WhatsApp) where offered.
- Request account deletion or a copy of your data by contacting us from the email on your account. We may need to verify identity before fulfilling requests.
Depending on where you live (for example GDPR/UK GDPR or similar laws), you may have additional rights such as restriction, objection, or portability. We will respond within applicable timelines.
11. Children
The Service is aimed at adults seeking employment. It is not directed at children under 16 (or the higher age required in your region). Do not create an account if you are under that age.
12. International transfers
We may process data in countries other than your own (including where our hosting or AI vendors operate). Where required, we rely on appropriate safeguards for such transfers.
13. Changes
We may update this Policy as the product evolves (for example new AI features or apply automation). We will change the “Last updated” date and, for material changes, provide additional notice in the Service when appropriate.
14. Contact
Privacy questions or data requests: email us from the address on your account, or use any support contact published in the Service / billing receipts, with the subject line “Privacy request”.