Privacy Policy

Effective date: October 28, 2026. Last updated: October 28, 2026.

This policy explains what Applyinator stores about you, why, who else sees it, and how to get a copy or delete it. The short version: we keep what we need to apply to jobs for you, we only send it where it is needed to do that, and we do not sell your data or use it for advertising.

1. What we store

Account: your email address, a password hash (never the password itself), and sign-in sessions.
Profile and answers: contact details, education, work history, job preferences, the questionnaire and eligibility answers you give us, and answers you give to held questions so they can be reused.
Resumes: the files you upload and the text read from them.
Application history: the jobs we matched, applied to or held, what was submitted, statuses, and screenshots and page copies taken when an application fails or needs your attention.
Failure diagnostics: when an application does not go through (a portal error, a captcha, a question we could not answer, a time-out), we log what happened: the employer, the job, the kind of problem, the questions involved, and the screenshot and page copy. Our operators review these diagnostics to fix the cause and improve the Service; they are not shown in your account. Dates of birth, Social Security numbers and email addresses are masked before anything is logged, and the log is deleted after 180 days (or with your account).
Employer portal accounts: where an employer's site requires an account, the email, the password the Service generated and the site's sign-in cookies, all stored encrypted. You can view an account's email and password (Settings > Portal accounts, or the application's tracker page) after re-entering your password; each view is logged and we email you a notice.
Assistant chat: your conversations with the in-app assistant, if you use it.
Mailbox connection (optional): see section 3.
Usage and security records: counts and costs of AI calls, and an audit log of important account actions (with secrets removed).
Site and product analytics (first-party only): which pages are viewed, the referring site (its name only), campaign tags, device and browser type, clicks on key buttons (for example “Get started” or a plan), which setup steps are reached, and key actions such as signing up, uploading a resume or changing settings, plus the outcome, timing and cost of the calls the Service makes to outside providers on your behalf (AI models, the captcha service, email). This stays on our own servers; we use no third-party analytics, ad trackers or extra cookies. We never store your IP address: a visitor is counted with a one-way code that changes every day. To learn which sites and campaigns bring people who sign up, your browser keeps a small note of where you first arrived from (the referring site's name, campaign tags and the first page) in local storage for 30 days, and sends it once when you create an account. If your browser sends Do Not Track or Global Privacy Control, none of this is recorded or kept. These records are deleted after 180 days.

2. Date of birth and Social Security number

These are optional and you enter them yourself in Settings. If you do:

They are stored only encrypted (AES-256-GCM), separately from your profile.
They are used only on required fields that ask for them on an employer's application system (for example Workday, Oracle, iCIMS, SuccessFactors, Taleo, Greenhouse, Lever, Ashby, SmartRecruiters) or the employer's own careers site. A field that asks for the last 4 digits gets only the last 4. They are never typed into optional fields, free-text boxes or dropdowns.
They are masked in screenshots, saved pages and your application history (for example "***-**-1234").
They are never sent to any AI model, local or hosted.
If one is not on file, an application that requires it waits for you instead.

3. Your mailbox (optional, read-only)

You can connect a mailbox (Google or Microsoft sign-in with read-only permission, an app password, or a browser sign-in kept on our server). We use it only to:

read verification codes and account-activation links that job portals send while we apply for you; and
if the application tracker is on, read employer emails about your applications (receipts, assessments, interviews, rejections, offers) to update their status on your tracker.

We never send, reply to, delete or move your email. Access tokens and app passwords are stored encrypted. You can disconnect at any time in Settings > Email, which deletes the connection.

4. AI models

Hosted open model (DeepInfra). An open-weight model (gpt-oss) run for us by DeepInfra screens and classifies job postings, matches dropdown options, fills some simple required form blanks from your profile, and labels employer emails for the tracker. The text needed for each task is sent to DeepInfra to produce the answer.
Claude (Anthropic), where enabled. If our deployment has it turned on, Claude powers the in-app chat assistant, reads your resume to suggest profile fields, and (only if that option is on) fills simple required form blanks. The text needed for that task is sent to Anthropic.
AI models never answer work authorization, sponsorship, visa, citizenship, export-control, security-clearance, criminal-history or demographic (EEO) questions for you, and never see your date of birth or SSN. If you turn on best-guess answers (off by default), a required basic question you have not answered (for example a willingness, consent or acknowledgement question, or “have you worked here before?”) may be answered with the most sensible choice for your profile, partly using the hosted AI model; every such answer is labelled as a guess in your history. If you turn on typed signatures (off by default), your typed name is entered in signature fields and electronic-signature boxes are ticked for you.
If you connect an outside assistant (for example Claude or ChatGPT) in Settings, that app can read and act on your account through the permissions you grant, and its provider's own privacy policy applies.

5. Who else receives data

Employers you apply to receive the application we submit for you (profile details, resume, answers). After that, their own privacy policies apply.
2captcha (a paid CAPTCHA-solving service), only for CAPTCHAs on job-application, sign-in and sign-up pages of job portals: the page address and CAPTCHA challenge (sometimes an image of the puzzle). You can turn this off in Settings.
DeepInfra and Anthropic, the AI providers described in section 4.
Google or Microsoft, if you connect a mailbox through them.
Email delivery for account emails such as sign-up verification and password resets: Resend.
Hosting: DigitalOcean, on servers in New York, USA.
Stripe, our payment processor, once paid plans are on: your account email and account id, and the payment details you enter on Stripe's own checkout page. We never see or store your full card number.
Discord, for our own internal notifications (for example a new sign-up, a plan purchase or a support message): your account email, plan and, for support messages, what you wrote. Only our team sees these.
Authorities, if the law requires it.

We do not sell or rent your personal information, and we do not use it for advertising.

6. Security

Passwords are hashed (scrypt). Portal passwords, mailbox tokens, browser cookies, date of birth and SSN are encrypted with AES-256-GCM. Session identifiers are stored hashed, and the site is served over HTTPS. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

7. Export and deletion

Export: Settings > Account > Download export gives you a JSON file with your account, profile, preferences, resume details, applications, holds, saved answers and chat history. Passwords, tokens, date of birth and SSN are never included.
Delete: Settings > Account > Delete account stops all applying and permanently deletes your account, profile, answers, resumes, application history, screenshots, chat, portal accounts, mailbox connection, date of birth, SSN and API tokens. Usage-cost records and audit-log entries are kept without your account id. Database backups are kept for up to 14 days and then overwritten.
We cannot delete data that employers already received, or accounts on employer sites; contact those employers directly.

8. How long we keep data

Until you delete it or your account, except as described in section 7. Failure diagnostics (section 1) are kept for at most 180 days.

9. Your rights

Depending on where you live you may have rights to access, correct, export or delete your data, or to object to some uses. Most of this you can do yourself in Settings; for anything else contact support@applyinator.com. We honour these requests wherever you live and answer within 30 days.

10. Children

The Service is not for anyone under 18.

11. Changes

We will tell you by email or in the app before a material change takes effect. See also our Terms.

12. Contact

Privacy questions or requests: support@applyinator.com.