Last updated: 07/14/2026
Version 2.0
This Privacy Policy describes how ApplyJob (hereinafter "we", "our" or "ApplyJob") collects, uses, stores and protects the personal data of users of its job search assistance service, accessible via the website applyjob.app and the associated Chrome browser extension (hereinafter collectively the "Service").
We attach great importance to the protection of your privacy and are committed to processing your personal data in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertes).
By using the Service, you accept the practices described in this policy. We invite you to read it carefully.
The data controller for personal data is:
For any questions regarding the protection of your personal data or to exercise your rights, you may contact:
We collect different categories of personal data depending on your use of the Service:
When you register using your Google account, we automatically collect:
When you create and complete one or more profiles, you may provide:
Identity information:
Contact details:
Professional links:
Professional information:
Job search preferences:
Salary information:
Additional information:
With your explicit consent, we may collect:
Important: You are never required to provide this information. It is collected on a voluntary basis to facilitate your applications with employers who ask this question.
When you use the Service to apply for jobs:
Note: Credit card information is collected and processed exclusively by our payment provider Stripe. We never have access to full card numbers.
The Chrome extension collects:
The extension does not collect:
We process your personal data for the following purposes:
| Purpose | Legal Basis | Data Concerned |
|---|---|---|
| Creation and management of your user account | Performance of contract (ToS) | Google registration data |
| Providing the auto-fill service and application tracking | Performance of contract | Profile data, application data |
| Content generation by artificial intelligence | Performance of contract | Profile data, application context |
| Subscription management and billing | Performance of contract | Payment data, email |
| Service analysis and improvement | Legitimate interest | Usage data, technical data |
| Customer service communication | Performance of contract / Legitimate interest | Email, name |
| Sending Service information (notifications, updates) | Legitimate interest | |
| Fraud prevention and security | Legitimate interest | Technical data, logs |
| Compliance with legal obligations | Legal obligation | Billing data, logs |
| Collection of disability status | Explicit consent | Disability status (optional) |
Your personal data may be shared with the following categories of recipients:
We use subprocessors to provide the Service. These subprocessors act only on our instructions and are contractually bound to protect your data:
| Subprocessor | Purpose | Location | Safeguards |
|---|---|---|---|
| Google (OAuth) | Authentication | USA | EU-US Data Privacy Framework |
| Stripe | Payments and billing | USA / Ireland | EU-US Data Privacy Framework |
| OpenAI | AI content generation | USA | EU-US Data Privacy Framework + DPA |
| Hetzner | Data hosting | Germany / EU | Data hosted in EU, ISO 27001 certified |
Some of our subprocessors are located in the United States. These transfers are governed by:
Important regarding OpenAI:
When you use the AI generation features, some of your data is transmitted to OpenAI for processing:
We use the OpenAI API configured not to use your data for training their models. The transmitted data is processed in accordance with OpenAI's privacy policy and our data processing agreement with them.
Your data may also be disclosed to:
We never sell your personal data to third parties.
Your personal data is retained for the following periods:
| Type of Data | Retention Period |
|---|---|
| Account and profile data | For the duration of your registration, then 3 years after the last activity or account deletion |
| Resumes and uploaded documents | Until deleted by the user or account closure |
| Application history | 3 years after the application |
| Generated and saved responses | Until deleted by the user or account closure |
| Billing data | 10 years (legal accounting obligation) |
| Technical and security logs | 1 year |
| Cookies | 13 months maximum |
Upon expiration of these periods, your data is deleted or irreversibly anonymized.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure or destruction:
In the event of a personal data breach likely to pose a risk to your rights and freedoms, we will inform you as soon as possible, in accordance with applicable regulations.
In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data:
You have the right to obtain confirmation that your data is being processed and to receive a copy of it.
You may request the correction of inaccurate or incomplete data concerning you. You can also update your information directly from your user dashboard.
You may request the deletion of your personal data in the cases provided for by regulation (data no longer necessary, withdrawal of consent, etc.).
You may request the restriction of the processing of your data in certain cases (disputing accuracy, unlawful processing, etc.).
You have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to another data controller.
You may object at any time to the processing of your data for direct marketing purposes. You may also object, on grounds relating to your particular situation, to processing based on our legitimate interest.
Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
You have the right to define directives regarding the retention, deletion and communication of your data after your death.
To exercise your rights, you may:
We will respond to your request within one month. This period may be extended by two additional months in the case of complex requests or a high number of requests, in which case we will inform you.
If you believe your rights are not being respected, you may file a complaint with the French Data Protection Authority (CNIL):
A cookie is a small text file stored on your device when you visit a website. It enables the storage of information related to your browsing.
We use the following categories of cookies:
| Type | Purpose | Duration | Consent |
|---|---|---|---|
| Strictly necessary cookies | User session, security, essential preferences | Session or 13 months | Not required |
| Functional cookies | Remembering your preferences (language, display) | 13 months | Not required |
| Analytical cookies | Audience measurement, usage statistics | 13 months | Required |
Note: To date, ApplyJob primarily uses strictly necessary cookies for the operation of the Service (user session). We do not use advertising cookies or marketing trackers.
You may manage your cookie preferences at any time:
Refusing strictly necessary cookies may prevent the proper functioning of the Service.
The Chrome extension uses the browser's local storage (chrome.storage) to:
This data remains on your device and is not transmitted to our servers, except for operations requiring synchronization (such as saving an application).
The Service is intended for adults. We do not knowingly collect personal data from minors under 18 years of age.
If we learn that we have collected data from a minor without the required parental consent, we will take the necessary steps to delete this data as soon as possible.
The Service may contain links to third-party websites (notably recruitment platforms). We are not responsible for the privacy practices of these sites. We encourage you to read their respective privacy policies.
We may modify this Privacy Policy at any time to adapt it to changes in the Service, regulations or our practices.
In the event of a substantial modification, we will inform you by email and/or by notification on the Service at least 15 days before the changes take effect.
The date of the last update is indicated at the top of this document. We invite you to consult this policy regularly.
For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us:
| Right | Description |
|---|---|
| Access | Obtain a copy of your data |
| Rectification | Correct inaccurate data |
| Erasure | Delete your data |
| Restriction | Restrict processing |
| Portability | Retrieve your data in a standard format |
| Objection | Refuse certain processing |
| Withdrawal of consent | Withdraw your agreement at any time |
Contact: contact@applyjob.app | Supervisory authority: CNIL