Overview

This policy explains what information ApplyOS (operated by Open World Industries LLC) collects, how we use it, and the choices you have. ApplyOS is built for students and early-career job seekers, and we only collect what's needed to run the service.

Information we collect

Account information: your email address, and your name if you provide one.
Content you provide: resume text and files, job descriptions, LinkedIn profile text, cover letters, and job-tracker entries you enter to use the product.
Usage data: which features you use and how often (for example, number of scans), used to enforce plan limits and improve the product.
Payment information: handled entirely by Stripe. We never receive or store your full card number. Stripe shares with us only what's needed to manage your subscription (such as plan status and renewal date).

How we use your information

We use your information to: create and secure your account; generate your scans, rewrites, cover letters, and exports; enforce free-plan usage limits; process payments and manage subscriptions; send account-related email (confirmation, password reset, receipts); and respond to support requests. We do not sell your personal information or your resume content to anyone.

Third-party service providers

We share information with the following providers, solely to operate ApplyOS on our behalf:

• Supabase: hosts our database and handles account authentication. Your account data and saved content (resumes, scans, cover letters, LinkedIn reports, job-tracker entries) are stored here.
• Stripe: processes payments. Stripe's own privacy policy governs the payment details you enter at checkout.
• Resend: sends transactional email (sign-up confirmation, password reset). Your email address is shared with Resend for this purpose only.
• Upstash: provides rate-limiting infrastructure using your IP address and request pattern; it does not receive your resume or account content.
• OpenAI: where AI-assisted generation is enabled, the resume text and job description you submit for that specific scan, rewrite, or cover letter are sent to OpenAI's API to generate the suggestion. OpenAI processes this text to return a response and does not use API-submitted content to train its models under OpenAI's API terms.

Data storage & security

Your account data and content are stored in our Supabase-hosted database with row-level security, meaning our infrastructure is configured so your data is only readable by your own account (or by our systems for functions like billing, which run with restricted service-level access). Data is encrypted in transit. No online service can guarantee absolute security, but we take reasonable technical measures to protect your information.

Data retention & deletion

We retain your account and content for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings, or by contacting us at the email below. We may retain minimal records where required for legal, tax, or fraud-prevention purposes even after account deletion.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we hold and to request its deletion. To exercise any of these rights, contact us at the email below. We'll respond within a reasonable time and verify your identity before making changes.

Cookies & analytics

We currently use only the essential cookies required for you to stay signed in (set by Supabase authentication). We do not currently use third-party analytics or advertising trackers. If that changes, we will update this policy to name the providers and what they collect before rollout.

Children's privacy

ApplyOS is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

International users

ApplyOS is operated from the United States, and our service providers (Supabase, Stripe, Resend, Upstash, OpenAI) process data in the United States and other countries where they operate. By using ApplyOS, you consent to your information being processed in these locations.

Changes to this policy

We may update this policy as ApplyOS evolves. Material changes will be reflected in the "Last updated" date above.

Contact

Privacy questions or data requests: support@applyos.co.