Privacy policy

Version 2026-10-20 · Intended market: United States

Who operates Applyne

Applyne is a job discovery and application management service in development. Our public privacy/support contact is dasu.srivanth@gmail.com. The legal operator and mailing address are awaiting confirmation; see business details.

Information we use and why

• Account name, email, verification records, and authentication credentials let you sign in and secure your account. Local passwords are hashed; we do not store readable passwords.
• If you choose Google sign-in, Google and Supabase verify your identity using basic name, email, and profile information. Applyne does not request Gmail or calendar access for login. Google verifies that basic identity first. New users must then confirm adult age and review account terms on Applyne before uploading a resume or using account features.
• We use our hosting provider’s approximate city/region estimate from your IP to suggest a job search location. It may be inaccurate, especially with a VPN. You can edit or clear it. This feature does not request GPS coordinates, send your IP to a separate lookup service, or save the estimate to your applicant profile or Auto-Apply preferences.
• Resumes, reviewed career facts, job preferences, and application answers support the functions you request. You choose what to upload and can correct or delete it. Do not upload government IDs, bank details, medical information, birth dates, or other information unrelated to an application.
• Saved jobs, application history, confirmations, and notes support your tracker. An employer receives applicant information only through a submission you authorize.
• Billing identifiers, subscription status, and invoice references support optional billing. Applyne does not collect full card numbers. Only Stripe test mode is implemented.
• Security and consent records support access control, abuse prevention, and your choices. We do not add birth dates, device fingerprints, or IP addresses to consent receipts.

Optional analytics and communications

Analytics is off by default and is currently unconfigured. If connected, minimal product events may be sent to PostHog only after a signed-in account opts in. Events use a pseudonymous account identifier and allowlisted plan/source/status values. Resumes, answers, message contents, personal email addresses, session replay, and advertising profiles are excluded. You can withdraw through Cookie preferences. Marketing email delivery is not enabled; creating an account does not opt you in.

AI and external providers

Resume text extraction currently runs on the backend without an AI provider call. Optional career AI requires a separate sharing confirmation for each request. Only selected career fields and task context are sent, with automatic contact fields excluded and email/phone patterns redacted. Do not place confidential information in free-text requests. Provider response storage is disabled in the API request; that does not establish a zero-retention agreement with the provider.

The current local workspace uses local authentication, a local database, and encrypted resume files. A Supabase project exists, but this runtime is not connected to its production authentication/storage. Stripe, optional AI, and PostHog are not live connections. Email/calendar access is not connected. Job providers receive discovery requests without applicant profiles.

Storage, retention, and deletion

Account data, resumes, AI drafts, audit records, and consent receipts are retained until account deletion or an applicable operational/legal retention requirement. Resume files are encrypted. Local account email outbox files contain verification/recovery tokens; they are restricted to the local development environment. Scheduled retention cleanup, production backups, legal holds, and vendor deletion procedures still require launch configuration. We do not promise a deletion deadline or backup purge that has not been implemented.

You can export data and delete your account in Settings, or record a deletion request. Deletion removes local account records and resume objects. An active subscription must be canceled first to avoid continued billing. Copies already lawfully received by employers or other providers require separate requests to those organizations.

Your choices and requests

You may review/correct profile data, request access/export, request deletion, withdraw optional analytics, or contact dasu.srivanth@gmail.com about privacy, accessibility, or applicable state privacy rights. We may verify identity proportionately before fulfilling a request. Applyne does not sell applicant data, run targeted advertising, or collect optional marketing consent as a condition of service. We honor browser Global Privacy Control by keeping optional analytics off for that browser.

Adults only and changes

This version is restricted to users aged 18 or over. The signup age screen does not request a birth date. We do not offer child accounts or a parental-consent flow. If you believe a child provided data, contact dasu.srivanth@gmail.com for investigation and deletion. Material policy changes receive a new version and may require renewed choices before affected processing.