Privacy Policy

1. What we collect

• Account data — your name, email address and authentication details, managed through our auth provider (Clerk).
• Profile & resume data — the resumes you upload and the structured profile we parse from them (experience, education, skills, projects, links), plus any edits you make.
• Job preferences — target roles, locations, skill filters, and the writing instructions ("voice") you save for email generation.
• Application activity — jobs discovered for you, fit scores, drafted emails, sent applications, delivery/reply status, and email opens (sent emails embed a small open-tracking pixel so your dashboard can show engagement).
• Google account tokens — if you connect Gmail, we store the OAuth refresh token in encrypted form, used solely to send emails you approve and to detect replies to those emails.
• Billing data — your plan and payment status via Razorpay. We never see or store your card details.

2. How we use Google user data (Limited Use disclosure)

AutoApply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We request the Gmail send scope only to send application emails you have approved.
• We read thread metadata only to update the delivery/reply status of applications you sent through AutoApply.
• We never read your general inbox, contacts, or any email unrelated to applications sent via AutoApply.
• Google user data is never sold, never used for advertising, and never used to train AI models.
• You can revoke access at any time from your Google account settings or from AutoApply settings.

3. How we use your data

• To discover and score jobs against your profile (embeddings and language-model calls).
• To tailor your resume against a job description — reordering and surfacing only, never fabricating.
• To find hiring-contact email addresses for roles you approved.
• To draft and, after your approval, send application emails from your Gmail.
• To show you analytics about your own pipeline.
• To enforce plan quotas and operate billing.

4. What we never do

• We never sell your personal data.
• We never send an email without your approval (unless you explicitly enable autonomous mode, which you can turn off at any time).
• We never ask for your LinkedIn credentials or cookies.
• We never use your resume or email content to train models.

5. Third-party processors

We share the minimum data necessary with the services that power the product:

• Clerk — authentication.
• Convex — database and backend hosting.
• Vercel — web hosting.
• OpenAI — scoring, tailoring and drafting (content is processed, not retained for training per our API terms).
• Apify — public job-listing discovery and contact discovery.
• Google (Gmail API) — sending your approved emails.
• Razorpay — payments.

6. Data retention & deletion

Your data is retained while your account is active. You may delete resumes and variants at any time from the app. To delete your account and all associated data, email hello@autoapply.app — we complete deletion within 30 days, including encrypted Google tokens (which are revoked immediately).

7. Security

OAuth tokens are stored encrypted at rest. All traffic is encrypted in transit (TLS). Access to production data is restricted and audited. No system is perfectly secure — if a breach affects your data, we will notify you without undue delay.

8. Your rights

Depending on your region (including under India's DPDP Act and the GDPR), you may have rights to access, correct, export, or erase your personal data, and to withdraw consent. Contact us at hello@autoapply.app to exercise any of these.

9. Recipients of your applications

Emails you approve are sent to hiring contacts at the companies you chose. The contact addresses we discover come from public sources and are shown to you with a confidence score before sending. You are the sender of record; replies go directly to your inbox.

10. Changes

We'll post any changes to this policy here and update the date above. Material changes will be announced in-app or by email.