Skip to content
ApplyFast

Privacy Policy

Last updated: April 23, 2026

1. Introduction

ApplyFast ("we," "us," "our") operates the ApplyFast web application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account information: Name, email address, and authentication credentials (via Google OAuth or email/password).

Profile & resume data: Work history, education, skills, certifications, projects, and other information you provide to build your master profile and generate resumes.

Job descriptions: Text you paste into the Service for resume tailoring.

Payment information: Billing details are processed and stored by Stripe. We do not store credit card numbers.

Usage data: Pages visited, features used, browser type, device information, and IP address collected automatically.

GitHub data: If you connect your GitHub account, we access your public repository metadata (names, descriptions, languages, stars) to enhance your profile. We do not access private repositories or source code.

3. How We Use Your Information

  • Provide the Service: Process your profile and job descriptions through AI models to generate tailored resumes.
  • Improve the Service: Analyze aggregated, anonymous usage patterns.
  • Process payments: Manage subscriptions and billing through Stripe.
  • Communicate: Send transactional emails (account confirmation, billing receipts).
  • Legal compliance: Respond to legal requests and prevent fraud.

4. AI Processing & Third-Party Providers

To generate resumes, your profile data and job descriptions are sent to third-party AI providers (such as OpenAI) for processing. These providers process your data solely to return results to us and are contractually prohibited from using your data to train their models. We select providers with strong data protection commitments, but we cannot guarantee the security practices of third parties.

5. Data Sharing

We do not sell your personal information. We share data only with:

  • Service providers: Stripe (payments), Vercel (hosting), Neon (database), and AI providers (resume generation) — only as necessary to operate the Service.
  • Legal requirements: When required by law, court order, or to protect our rights.
  • Business transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your account and profile data for as long as your account is active. Generated resumes are retained until you delete them or your account. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Export your data in a portable format.
  • Opt out of marketing communications.
  • Restrict or object to certain processing.

To exercise any of these rights, contact us at privacy@applyfast.tech. We will respond within 30 days.

8. CCPA Disclosure (California Residents)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To make a request, email privacy@applyfast.tech.

9. GDPR Disclosure (EEA Residents)

Our lawful basis for processing is: (a) contract performance (providing the Service you signed up for); (b) legitimate interest (improving the Service, preventing fraud); and (c) consent (where explicitly given). You may withdraw consent at any time. You have the right to lodge a complaint with your local data protection authority.

10. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies. If we introduce analytics cookies in the future, we will update this policy and provide opt-out mechanisms where required.

11. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data at rest, and secure authentication. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected data from a child under 16, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance.

14. Contact

For privacy-related questions or data requests, contact us at privacy@applyfast.tech.