ApplyBot

Privacy Policy

Last updated June 12, 2026

This Privacy Policy explains how ApplyBot ("we", "us") collects, uses, shares, and protects your information when you use our website and job-application service (the "Service"). By using the Service you agree to this policy.

Information we collect

  • Account & profile data you provide: your name, email address, WhatsApp number or Telegram chat ID (whichever channel you choose for notifications), desired roles, preferred locations, work type, experience level, and salary expectations.
  • CV / résumé contentyou upload or paste, including the extracted text we use to match you to jobs. CV files are stored on Vercel's file storage at unlisted (non-guessable) URLs so they can be attached to the applications you approve; anyone with the exact link can access the file, so we never publish these links and share them only with the employers you apply to.
  • Payment data: subscriptions are processed by Paystack. We do not store your card details — Paystack does. We retain your Paystack customer and subscription identifiers and your subscription status.
  • Usage data: records of jobs matched to you and applications drafted or sent on your behalf.
  • Google account data: every plan sends applications from your own Gmail address, so before your first application goes out you connect your Gmail via Google's official OAuth consent screen. We store only an OAuth refresh token (encrypted at rest with AES-256-GCM) and your Google email address — see the Limited Use disclosure below for exactly what this permission can and cannot do.

How we use your information

  • To match you with relevant job listings and draft applications.
  • To send job applications from your own Gmail account, one at a time, each after your explicit approval (the tap on a match we send you). Employer replies arrive in your own inbox — we never see them.
  • To notify you (via WhatsApp or Telegram, and email) about matches and activity.
  • To process your subscription and provide customer support.
  • To operate, secure, and improve the Service.

How we share information

We use the following third-party processors to run the Service:

  • Paystack — payment processing.
  • Resend — sending sign-in links and account emails from our domain.
  • Airtable — storing your profile and application records.
  • Google (Gemini AI) — drafting cover letters from your CV and profile. Your Gmail data is never sent to any AI model.
  • WhatsApp / Telegram — notifications and approvals on the channel you choose.
  • Vercel & Cloudflare — hosting and content delivery.

We do not sell your personal information. We share data with employers only in the form of the job applications you approve.

Google API Limited Use disclosure

ApplyBot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In detail:

  • We request a single Gmail permission: gmail.send("Send email on your behalf"). This scope cannot read, search, or delete your email, contacts, or any other Google data — it can only send.
  • We use it for exactly one purpose: sending the job application emails you individually approve. Every send is triggered by your explicit action; nothing sends automatically.
  • We never use Google user data for advertising, never sell it, never transfer it to data brokers, and never use it to train AI or machine learning models. Cover letters are drafted from your CV and profile before sending — your Gmail data is not sent to any AI model.
  • No human at ApplyBot reads Google user data except with your explicit consent (e.g. a support request), for security investigation, or where required by law.
  • The OAuth refresh token is stored encrypted at rest (AES-256-GCM) and is never exposed to our automation infrastructure — short-lived access tokens are minted server-side per send.
  • You can disconnect at any time with the Disconnect button on your dashboard — we delete the stored token immediately — or revoke ApplyBot's access from Google Account permissions.

Data retention

We keep your data while your account is active. If you cancel and request deletion, we delete your personal data and CV content within 30 days, except records we must keep for legal, tax, or fraud-prevention purposes.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent (for example by disconnecting Gmail or cancelling your subscription) at any time. To exercise these rights, contact us at support@applybot.cc.

Security

We use industry-standard measures to protect your data, including encrypted credential storage and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.

Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy? Email support@applybot.cc.