Privacy Policy

1.Introduction

This Privacy Policy describes how Applyin ("Applyin", "we", "us") collects, uses, stores and protects personal data when you use the Applyin browser extension, the Applyin backend services, and this website (together, the "Service").

Applyin is a Chrome extension that analyses a job posting you have open against a resume you provide, and shows the result in a sidebar on the job page. We designed the Service around data minimisation: the most sensitive item you give us, your resume, is processed transiently and is not retained.

By creating an account or using the Service you acknowledge this policy. If you do not agree with it, please do not use the Service.

2.Definitions

• "Extension" means the Applyin Chrome extension installed in your browser.
• "Analysis" means one run of the Service comparing your resume with one job posting, producing a fit score and related reports.
• "Reports" means the AI-generated output of an Analysis: fit analysis, skills gap, improvement plan, resume improvements and interview preparation.
• "Credits" means the units used to pay for Analyses.
• "AI Provider" means the third-party large-language-model service we use to generate Reports (currently OpenAI).

3.Information we collect

3.1 Information you provide

• Account information. Your email address and authentication credentials, managed through our authentication provider. Passwords are handled by that provider and are never visible to us in plain text.
• Your resume. The PDF you upload in the Extension. See section 6 for exactly how it is handled.
• Consent records. The consent decisions you make at signup or later, with a timestamp.
• Correspondence. Anything you send us by email.

3.2 Information created when you use the Service

• Analysis results. The Reports generated for a resume and job combination, cached briefly so that repeat requests return consistent results without a second charge. Results are keyed by a one-way fingerprint and stored with your name removed. The raw resume text and job description are not stored with them.
• Credit and transaction records. Your credit balance, purchases, charges and refunds. Payment card details are collected directly by our payment provider and never reach our servers.
• Usage metadata. Technical records of each Analysis: request identifiers, job title and company, scores, document size, token counts, cost and latency. These records contain no resume text, no job description text and no name.

3.3 Information collected automatically

• Server logs. Standard operational logs limited to metadata as described above. We deliberately do not log resume content, job content or extracted names.
• Extension settings. Preferences such as sidebar state and theme are stored locally in your browser, not on our servers.

We do not collect your browsing history. The Extension reads only the job posting page you have open, and only when you use it there.

4.How we use information

We do not use your resume or Reports to train models, we do not sell personal data, and we do not use your data for advertising.

5.Consent and legal basis

Applyin processes your resume on the basis of the consent you give at signup, where you agree that your resume and the job details you choose are sent to our AI Provider to generate your Analysis, and that the Analysis result is saved briefly to give consistent results.

Account, billing and abuse-prevention processing is carried out because it is necessary to provide the Service you signed up for and to meet our legal obligations, including under Indian law.

You may withdraw your consent to resume processing at any time (section 11). Withdrawal stops future Analyses; it does not affect processing that already happened.

6.How your resume is handled

This is the part most people care about, so here it is in full:

1. When you upload your resume, the file is transmitted to our backend over an encrypted connection (TLS).
2. The PDF is held in memory only for the duration of your request. It is not written to disk, not saved in any database, and does not appear in any log.
3. The resume is first validated. If it cannot be read as a genuine resume, the request is rejected, no credit is charged and nothing is produced or kept.
4. The text extracted from your resume, together with the job description you chose, is sent to our AI Provider to generate your Reports. This transmission happens per Analysis you request.
5. Your name, extracted so the sidebar can confirm whose resume was read, is display-only. It is removed before any result is cached and never appears in logs or usage records.
6. The finished Reports are cached for 1 day, keyed by a one-way fingerprint, with identifying details removed. After that they expire and are purged.

Our agreement with the AI Provider governs its handling of submitted content. We use API access, under which the provider states that content submitted through the API is not used to train its models.

7.Data retention

Retention windows are enforced by a scheduled purge job. When your account is deleted, records that no longer have a legal reason to exist are removed with it.

8.Sharing and sub-processors

We share personal data only with the service providers needed to run Applyin, and only for the purposes below:

Beyond these providers, we disclose personal data only if required by law, to protect the rights and safety of users, or as part of a corporate transaction in which the receiving party remains bound by this policy. We never sell personal data.

9.International transfers

Our service providers may process data in countries other than the one you live in, including the United States. Where that happens, the transfer is covered by the safeguards in our agreements with those providers. By using the Service you acknowledge this processing.

10.Security

• All traffic between the Extension, our backend and our providers is encrypted in transit (TLS).
• Cached results are keyed by one-way cryptographic fingerprints, not by raw content.
• Payment card data never touches our servers; it goes directly to the payment provider.
• Logs are restricted to metadata by design, so a log leak cannot expose resume content.
• Access to production systems is limited and credential-protected.

No internet service can promise perfect security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

11.Your rights

Depending on your jurisdiction, including under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access and export. Receive a copy of the personal data we hold about you.
• Correction. Have inaccurate account data corrected.
• Erasure. Have your cached analyses and usage history erased, or your entire account deleted, including your email and billing identity, subject to records we must keep by law.
• Withdraw consent. Stop future resume processing at any time.
• Grievance redressal. Raise a complaint and receive a response (section 15).

How to exercise these rights

Write to us from your account email address (section 15) stating what you want. We verify requests against the account email to protect you. We aim to respond within 7 days and to complete verified requests within 30 days.

12.Cookies and local storage

• This website is a static page. It sets no advertising or analytics cookies.
• The Extension stores your session token and preferences in your browser's extension storage so you stay signed in. This data stays on your device and is removed when you sign out or uninstall the Extension.

13.Children

The Service is intended for people old enough to seek employment and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

14.Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected on this page with a new version number and effective date, and where appropriate we will notify you in the Extension or by email. Continued use of the Service after a change means you accept the updated policy.

15.Grievances and contact

For privacy questions, data requests or complaints, contact our grievance contact:

Email: admin@applyin.co.in

Please write from your account email address and include enough detail for us to act. We acknowledge grievances within 7 days and aim to resolve them within 30 days, in line with applicable Indian law.