Last updated: March 22, 2026
When you use ApplyAgent, we collect: your email address, full name, resume (stored encrypted in Supabase Storage), job preferences (target roles, locations, salary range), and optionally your job portal credentials (LinkedIn, Indeed, etc.).
Portal credentials (LinkedIn, Indeed, etc.) are encrypted using AES-256-GCM before being stored. The encryption key is stored separately from the application database. Our team cannot read your passwords. Credentials are only decrypted by the AI agent at the moment of use, then discarded from memory.
Your data is used exclusively to find matching jobs, tailor your resume, submit applications, and send outreach on your behalf. We do not sell, rent, or share your personal data with third parties. We use PostHog for product analytics (pageviews, feature usage) — no PII is sent to analytics.
Your data is retained as long as your account is active. When you delete your account, all personal data including credentials, resumes, and application history is permanently deleted within 30 days. You can delete individual portal credentials at any time from Settings.
You can request a full export or deletion of your data by emailing [email protected]. If you are in the EU, you have additional rights under GDPR including the right to access, rectification, and erasure.
Questions about privacy? Email [email protected].