Privacy Policy
Effective date: 2025-01-01
At ApplyWave, your privacy matters. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.
Information We Collect
Account Information
- Name and email address when you register
- Password (stored securely using industry-standard hashing)
- Subscription and billing information (processed by our payment provider)
User Content
- Resumes and resume versions you upload or create
- Job descriptions you save from external sites
- Messages and cover letters you generate
- Contacts and notes you add
Usage Data
- Features you use and actions you take within the app
- AI credit consumption
- Browser type, device information, and IP address
How We Use Your Information
- To provide the Service: Display your jobs, generate AI analysis, tailor resumes, and create outreach messages
- To improve the Service: Understand usage patterns and fix issues
- To communicate: Send account-related emails (verification, password reset, billing)
- To comply with law: Respond to legal requests when required
AI Data Processing
When you use AI features (resume analysis, tailoring, message generation, translation), your content is sent to third-party AI providers:
- OpenAI: For text analysis and generation. Data is processed via their API and is not used to train their models (per OpenAI's API data usage policy).
- DeepL: For translation services. DeepL Pro API does not store translated texts beyond the time needed to deliver the translation.
We do not use your data to train any AI models. Your content is processed only to provide you with the requested features.
Browser Extension
The ApplyWave browser extension reads job posting content only when you explicitly click "Save to ApplyWave". The extension does not:
- Run background data collection
- Track your browsing history
- Modify web pages you visit
- Access data on sites other than the active tab when triggered
Data Sharing
We do not sell your personal information. We share data only in these cases:
- Service providers: AI providers (OpenAI, DeepL), payment processors, and hosting infrastructure
- Legal requirements: When required by law or to protect our rights
- Business transfers: In case of merger or acquisition (with notice to users)
Data Security
- All data is transmitted over HTTPS (TLS encryption)
- Passwords are hashed using bcrypt
- Database access is restricted and logged
- We use industry-standard cloud infrastructure with security certifications
Data Retention
- Active accounts: Data is retained while your account is active
- Deleted accounts: Personal data is deleted within 30 days of account deletion
- Backups: May be retained for up to 90 days for disaster recovery
Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Delete your account and associated data
- Export: Download your data in a portable format
- Object: Opt out of certain data processing
To exercise these rights, email us at mail@applywave.app.
Cookies
We use essential cookies for:
- Authentication (keeping you logged in)
- Security (CSRF protection)
- User preferences
We do not use advertising or tracking cookies.
International Transfers
Your data may be processed in Canada and the United States (where our infrastructure and AI providers are located). We ensure appropriate safeguards are in place for international transfers.
Children's Privacy
ApplyWave is not intended for users under 16 years old. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. The effective date at the top indicates when the policy was last revised.
Contact Us
Questions about this Privacy Policy? Email us at mail@applywave.app or use our contact form.