Privacy Policy

The short version

• We collect what you give us — applications you track, resumes you upload, and the data the Chrome extension captures from job pages you tell it to capture.
• We send your resume and job descriptions to AI providers (Anthropic, OpenAI, Google) only when you ask for an AI feature.
• We don't sell your data and we don't use it for ads.
• You can delete your account (and all data) at any time from Settings → Privacy & data. Data export is available on request via email.

What we collect

From you, when you sign up

• Email address — for login, password reset, and notification emails. Stored by Supabase Auth.
• Password — handled by Supabase; we never see it.

From you, when you use the app

• Applications you track — company name, role, status, dates, location, salary notes, the job URL, your private notes.
• Resumes you upload — the file (PDF / DOCX), the extracted text, and an AI-parsed structured version.
• Reminders — what you want to follow up on and when.
• Email preferences — which notifications you want to receive.

From the Chrome extension

Only when you click the toolbar icon and then click Save to ApplyIQ, the extension reads the job page's DOM (title, headings, company name, location) and the page URL. This data is encoded into a query parameter on a new tab opened to ApplyIQ. The extension itself does not transmit or store anything else; it has no analytics and no telemetry.

From Stripe, when you buy credits or subscribe

• Billing metadata — Stripe customer ID, payment intent IDs, subscription status. We never store credit-card numbers; Stripe handles that.

Automatically, as you use the app

• Activity log — what you changed and when (status changes, edits, deletions). Used to power the activity feed and audit trail.
• Standard server logs — IP address, user agent, request path. Held by our hosting provider for typical operational windows.

How we use it

• To run the product — show you your applications, send reminder emails, generate AI suggestions when you ask, charge you for credits if you bought any.
• To improve the product — debug errors, fix bugs. We do not train AI models on your data.
• To enforce limits — daily job-fetch counts, rate limits on signups per IP.

We do not sell your data, and we do not share it for advertising.

Where it goes — third parties

ApplyIQ uses these services. They each have their own privacy policies. We send them only what they need.

• Supabase — primary database and authentication. Stores your account and all application/resume/reminder data.
• Anthropic, OpenAI, Google (Gemini) — AI providers. We send them your resume text, job descriptions, and prompts when you trigger an AI feature (resume tailoring, cover letters, follow-up emails, interview prep, weekly digest, role classification). We never send them your billing details or password.
• Stripe — payment processing. Handles all card data; we never see it.
• Resend — transactional email. Receives your email address and the message content of reminders, weekly digests, and follow-up nudges.
• Inngest — runs background jobs (cron emails, async resume parsing). Receives job payloads (e.g. the user ID + reminder ID being processed).
• Adzuna — job listing source for the Job Match feature. We send them search keywords and your country/location preference. We do not send them your resume or any personal data.
• Google Cloud Run — hosting. Sees standard server logs.

Where it's stored

Primary data is stored in Supabase's PostgreSQL (US region). Resumes are stored in Supabase Storage. Stripe stores payment data in its own systems. AI providers' data retention follows their respective policies (we don't store conversation history with them; each request is independent).

Your rights

You can:

• Export your data — email support@chason.appand we'll send a JSON file containing every row we hold under your user ID, usually within a few business days.
• Delete your account— Settings → Privacy & data → Delete. Permanently removes your applications, resumes, reminders, billing history, and your auth account. This cannot be undone.
• Update your data — directly in the app for everything you can see; for anything else, email us.
• Opt out of email — Settings has per-channel toggles for reminders, status changes, weekly digest, and follow-up nudges.

If you're in a jurisdiction with formal data-protection rights (EU, UK, California, etc.), the export and delete controls above are how you exercise them. Email support@chason.app if you need anything beyond what those controls do.

Cookies

ApplyIQ uses cookies for authentication only — to keep you logged in. We don't use tracking cookies, we don't run third-party analytics, and we don't share cookies with advertisers.

Children

ApplyIQ isn't directed at people under 16 and we don't knowingly collect their data. If you believe a child's data ended up here, email us and we'll delete it.

Changes to this policy

If something material changes, we'll update the “Last updated” date at the top and, for significant changes, notify you by email. The current version is always at /privacy.

Contact

Questions? Privacy concerns? Data-rights requests? Email support@chason.app.