Privacy Policy

1. Summary & Scope

This Policy applies to the Service, including websites, web and mobile apps, and related customer support. It covers personal information about users, prospective users, and website visitors. It does not cover third‑party websites or services that we do not control.

2. What We Collect

We collect the following categories of personal information (examples, not exhaustive):

• Identifiers (name, email, account ID, device/advertising IDs).
• Contact (email, phone, location city/region, mailing address if provided).
• Account & Profile (passwords, settings, preferences, saved searches).
• Job Data (resume/CV, cover letters, employment history, skills, education, portfolio links, job targets, automation preferences).
• Usage (pages viewed, actions taken, timestamps, referral URLs, diagnostic logs, crash data).
• Transactional (subscription plan, purchase history; last 4 of card via processor; we do not store full PANs).
• Communications (support tickets, in‑product messages, email content you send us).
• Inferences (segments or preference scores we derive from other data).
• Sensitive data (only if you choose to include it in your materials, e.g., resumes revealing demographics or union membership). We do not require such information and ask that you share only what is necessary for your applications.

3. Sources of Data

• Directly from you when you create an account, upload content, or communicate with us.
• Automatically through cookies, SDKs, and similar technologies when you use the Service.
• Third‑party sources such as public job boards, partner job feeds, professional networks you connect, or services you authorize (e.g., cloud drives).

4. How We Use Data

• Provide, personalize, and operate the Service (including job matching and application workflows).
• Process payments, billing, and account management.
• Improve features, quality, and security; debug, monitor, and prevent abuse.
• Train and evaluate models or heuristics that power recommendations, automation, and anti‑abuse systems (using technical safeguards and access controls).
• Communicate with you about updates, offers, surveys, and support (you can opt out of non‑essential communications).
• Comply with law, enforce terms, and protect rights, safety, and property.

EEA/UK legal bases. Where GDPR/UK GDPR applies, we rely on: (a) contract necessity; (b) legitimate interests (e.g., product improvement, security); (c) consent (e.g., certain marketing/cookies); and (d) legal obligations.

5. AI, Automation & Profiling

• Automation. If you enable automated applying, you authorize the Service to prepare and submit applications on your behalf using your preferences and materials.
• AI‑generated content. Drafts and suggestions may contain errors; you should review and edit before sending.
• Profiling. We may create preference or relevance scores to help rank or recommend roles. We do not make decisions that produce legal effects solely via automated processing without human involvement.
• Model training. We may use de‑identified or aggregated data to improve models. We do not sell your personal information.

6. How We Share Data

• Processors/Service Providers. We share data with vendors who process data for us (e.g., cloud hosting, storage, analytics, payment processing, customer support). They are bound by contracts to use data only as instructed.
• Partners & Integrations. If you connect third‑party accounts or submit to external job sites, we share the data needed to perform those actions.
• Legal & Safety. We may disclose information to comply with law, respond to lawful requests, or protect rights and safety.
• Business Transfers. In a merger, acquisition, or asset sale, your information may be transferred as permitted by law.

Sale/Share for cross‑context behavioral ads. We do not sell personal information. We do not share personal information for cross‑context behavioral advertising.

7. Advertising, Analytics & Cookies

We use cookies and similar technologies for core functionality (e.g., authentication), performance (e.g., analytics), and optional features. You can manage non‑essential cookies via in‑product controls where available, your browser settings, or device settings.

• Analytics. Used to understand product usage and improve the Service.
• Advertising. We do not sell or share personal information for targeted ads. If this changes, we will update this Policy and provide appropriate opt‑outs.
• Do Not Track. We currently do not respond to browser DNT signals.

8. Retention

We retain personal information only as long as necessary for the purposes described above and as required by law. Typical periods: while your account is active plus a reasonable period (e.g., up to 3 years) for records, dispute resolution, and security. Transaction records may be kept up to 7 years for tax, audit, and compliance.

9. Security

We implement technical and organizational safeguards designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Transfers

If you are located outside the United States, your information may be transferred to and processed in countries that may have different data protection laws. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

11. Your Rights & Choices

11.1 Access, Correction, Deletion

You can access, correct, or delete certain information in your account settings or by contacting us atteam@applyblast.co.

11.2 Marketing Preferences

You can opt out of non‑essential marketing emails using the unsubscribe link in those emails.

11.3 California, Virginia, Colorado, Connecticut, Utah

Residents of certain US states may have rights to know/access, correct, delete, and obtain a portable copy of personal information, and to opt out of sale or sharing for targeted advertising. As noted, we do not sell or share personal information for targeted advertising. You may still submit a request via our privacy request form or by emailing team@applyblast.co.

11.4 EEA/UK

Where GDPR/UK GDPR applies, you may have rights to access, correct, delete, restrict or object to processing, and data portability. You may also withdraw consent where processing is based on consent. You can lodge a complaint with your local supervisory authority.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate action.

13. Changes

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date. Material changes may be communicated via the Service or email.

14. Contact

Appendix A: CPRA Notice at Collection

The following summarizes the categories of personal information we collect, the purposes, whether we sell/share it, and typical retention periods. We do not sell or share personal information for cross‑context behavioral advertising.

Rights requests. Submit requests via our privacy request form (if available in‑product) or by emailingteam@applyblast.co.