Privacy Policy

Last updated: July 30, 2026

Information We Collect

Account Information

When you sign in via Google, we receive your name, email address, and profile picture from Google.

Profile & CV Data

You may upload your CV (resume) and fill in personal details such as name, phone number, location, work history, education, and skills. This data is used to autofill job applications on your behalf.

Job Application Data

We store the jobs you apply to, including job titles, company names, URLs, application status, and any notes you add.

Extension Usage Data

The Chrome extension stores your authentication token, an anonymous identifier, and your profile data locally in your browser using chrome.storage.local. We do not collect browsing history or track the web pages you visit.

Anonymous Usage

You may use the service once without creating an account. In this case, we generate a random anonymous identifier to enforce usage limits. No personal data is associated with this identifier until you sign in.

How We Use Your Information

AI Processing

We send your CV data and job application form fields to OpenAI's API to extract structured information and generate autofill suggestions. OpenAI processes this data under their own privacy policy and does not use it to train their models.

Service Operation

We use your information to:

• Autofill job application forms
• Track your application status
• Enforce usage limits based on your account tier
• Improve the service based on aggregate, anonymized data

Third-Party Services

We work with the following service providers to operate Aplyin:

• OpenAI — AI-powered form filling and job extraction. Privacy Policy
• Google — Authentication via OAuth. Privacy Policy
• Vercel — Hosting and database (Vercel Postgres). Privacy Policy

We do not sell, rent, or trade your personal data to any other third parties.

Cookies & Local Storage

Our web application uses session cookies for authentication (via NextAuth.js). The Chrome extension uses the browser's local storage (chrome.storage.local) to store your authentication token and profile preferences. We do not use tracking cookies or analytics cookies.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated data (profile, CV, application history, skills) is permanently removed within 30 days. Anonymous usage data is retained for up to 90 days.

Your Rights

You have the right to:

• Access your data — view and export your profile from the dashboard
• Correct your data — update your profile and CV at any time
• Delete your data — delete your account from the profile page, or contact us
• Portability — export your data via /profile/export

To exercise any of these rights, visit your dashboard or contact us. We will respond within 30 days.

Children's Privacy

Aplyin is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the website. Continued use of the service after changes constitutes acceptance.

Contact

If you have questions about this policy or wish to exercise your rights, please contact us or email us at hello@aplyin.com.