Privacy Policy
Last updated: 14 August 2026
AutoApply exists to apply to jobs for you. That requires holding your career information and sharing it with the employers you apply to. This page says exactly what we collect, why, who it reaches, how long we keep it, and how to take it out.
1. What we collect
- Account: email address, password (stored only as a cryptographic hash), or your Google account email if you sign in with Google.
- Career profile: your resume file and its extracted text, name, phone, location, links (LinkedIn/GitHub), and the career facts and screening answers you save (for example notice period, expected salary, work authorization).
- Applications: which jobs you applied to, when, with what status and outcome.
- Payments: your plan and payment records. Card/UPI details are handled by Razorpay and never touch our servers.
- Technical: server logs (IP, timestamp, endpoint) kept for security and debugging. We do not run third-party advertising or cross-site tracking, and we do not set non-essential cookies — the only cookie is your login session.
2. Why we collect it (and the legal basis)
- To match you with jobs and fill application forms — with your explicit consent, given at signup and revocable by deleting your account.
- To operate your account, take payments, and send service email (verification, password reset, alerts you asked for, and notices when an application needs you).
- To secure the Service (rate limiting, abuse prevention).
- We do not sell your data. We do not share your resume with anyone except as listed below.
3. Who your data reaches
| Recipient | What | Why |
|---|---|---|
| Employers you apply to | Your application: contact details, resume, answers | That is the application, sent at your instruction |
| AI providers (OpenRouter, OpenAI) | Resume text, job description, your saved facts, for the specific job being processed | Drafting tailored resumes, cover letters and answers; scoring matches |
| Razorpay | Payment and order information | Payment processing (they are the payment processor of record) |
| Resend | Your email address and the message content | Sending service email |
| Our hosting provider (EU-located server) | All service data at rest | Running the Service; disks and backups live there |
Each provider processes data only to provide its service to us. No other third parties receive personal data.
4. Where and how long
- Data is stored on our server in the European Union, encrypted in transit (HTTPS). Passwords are hashed; stored provider credentials are encrypted at rest.
- We keep your data while your account exists. Deleting your account removes your profile, resume, saved facts, applications, and alerts from the live database; routine encrypted backups age out within 7 days.
- Note: applications already submitted to an employer live in that employer's systems and are governed by their policies — we cannot recall them.
5. Your rights
- Export: download a copy of your data from Settings → Privacy at any time.
- Delete: delete your account and data from Settings → Privacy, effective immediately in the live database.
- Correct: every fact we hold about you is editable in Settings.
- Withdraw consent: stop applying, turn off auto-submit, or delete the account — consent is exactly as revocable as it was grantable.
6. Grievances (India DPDP Act)
For any data-protection concern or grievance, contact the grievance officer at support@ansarflowtech.com. We aim to acknowledge within 72 hours and resolve within 30 days. If we ever suffer a data breach affecting your personal data, we will notify you and the relevant authorities as the law requires.
7. Children
The Service is for people legally old enough to work and is not directed at children.
8. Changes
Changes to this policy update the date above; material changes are announced in the product or by email.