Privacy Policy

1. Who we are

ApplyPath is operated as an independent product. When this policy says "we", "us", or "our", it refers to the ApplyPath team. If you have any questions about this policy, contact us at privacy@applypath.app.

2. What we collect from your Google Account

When you sign in with Google, we request access to a limited set of information from your Google Account. Specifically, we collect and store:

• Full name — used to personalise your dashboard and any exports.
• Email address — used as your account identifier and to send product-related emails (such as trial reminders or important account notices).
• Profile picture URL — displayed in the dashboard UI. We do not download or host your profile image ourselves.
• Google Account ID — an opaque identifier used solely to link your Google sign-in to your ApplyPath account. We do not access your Google contacts, Drive, Gmail, or any other Google service.

We do not request access to your Google Calendar, Gmail, Drive, contacts, or any other Google service beyond basic profile information.

3. What we collect when you use ApplyPath

In addition to your Google Account information, we collect data you explicitly provide while using the product:

• Resume files you upload and their parsed content.
• Job descriptions you paste or save via the Chrome extension.
• Application records, notes, interview dates, and stage history you create in the tracker.
• Scores and analysis results generated when you run a fit check or ATS scan.

We also automatically collect limited technical data to operate the service:

• Log data such as request timestamps, IP addresses, and browser user-agent strings — retained for up to 90 days for security and debugging purposes.
• Anonymous usage events (e.g. "fit scan run", "application added") to understand how features are used. These events contain no resume or job description content.

4. How we use your data

We use the data we collect solely to:

• Provide, maintain, and improve the ApplyPath service.
• Authenticate your account and keep it secure.
• Send transactional emails related to your account (e.g. trial expiry, payment confirmation, security alerts).
• Respond to support requests you initiate.

We do not use your resume content, job descriptions, or application data to train AI models — ours or anyone else's.

5. Data sharing

We do not sell, rent, or trade your personal data. We share data only with a small set of sub-processors required to operate the service (such as our cloud hosting provider and payment processor). Each sub-processor is contractually bound to handle data only as instructed and in accordance with applicable privacy law.

6. Your right to access your data

You have the right to request a complete export of all personal data we hold about you. This includes your account profile, all resume files, all saved job descriptions, and all application records.

To submit a data access request, email privacy@applypath.app from the address associated with your account. We will acknowledge your request within 5 business days and fulfil it — delivering a machine-readable export of your data — within 30 days of receipt.

7. Account deletion is permanent

You may delete your ApplyPath account at any time from your account settings. When you delete your account:

• All personal data we hold about you — including your profile, resume files, job descriptions, and application history — is permanently and irreversibly deleted from our systems and backups within 30 days.
• This action cannot be undone. There is no grace period and no way to recover your data after deletion is initiated.
• If you have an active lifetime licence, deletion forfeits that licence with no refund.

If you would prefer to have your data deleted without self-service, you may also request deletion by emailing privacy@applypath.app. We will complete the deletion within 30 days.

8. Data retention

We retain your data for as long as your account is active. If your account has been inactive for 3 or more years and you are on the free tier, we may delete it after giving 30 days' notice via email.

9. Security

We use industry-standard practices to protect your data, including encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel only. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

If we make material changes to this policy, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of ApplyPath after the effective date of a change constitutes acceptance of the updated policy.