Privacy Policy

Account Information

When you create or use an AutoApplyHQ account, we may collect:

• Name
• Email address
• Authentication information managed through our login provider
• Account preferences
• Subscription or billing status, if applicable
• Support or feedback messages you send to us

We use third-party authentication providers, including Clerk, to help manage secure account creation and login.

Resume and Career Information

When you upload, create, edit, or generate resumes through AutoApplyHQ, we may collect and process:

• Resume files
• Resume text and structured resume data
• Work experience
• Education history
• Skills
• Certifications
• Contact information included in your resume
• Career summary, accomplishments, and related professional information
• Tailored resume versions generated for specific job opportunities

You are responsible for ensuring that the information you upload or submit is accurate and that you have the right to provide it.

Job Listing and Opportunity Data

When you save or track job opportunities in AutoApplyHQ, we may collect:

• Job title
• Company name
• Job description
• Job listing URL
• Application URL
• Job location
• Compensation information, if available
• Source site, such as LinkedIn, Indeed, Workday, Oracle, or other job boards
• Application stage or status
• Notes, interview details, contacts, or other information you add to the opportunity

Application Profile and Autofill Data

AutoApplyHQ may help you fill repetitive application fields using profile information from your resume or account. This may include:

• Name
• Email address
• Phone number
• Location
• Education history
• Work experience
• Skills
• Other professional profile information you choose to store or use

AutoApplyHQ does not submit applications for you. You remain responsible for reviewing all information before submitting any application.

Chrome Extension Data

If you use the AutoApplyHQ Chrome extension, we may collect and process information necessary to provide extension functionality, including:

• The URL of the job page you choose to save
• Job listing information visible on supported job sites
• Application page URLs where you choose to use autofill
• Autofill activity metadata, such as whether autofill started, completed, or partially failed
• Field count metadata, such as the number of fields attempted or filled
• Submission-related activity signals, such as whether the extension detected a likely application confirmation page
• Extension connection status and token metadata

The extension is designed to act only after user action. AutoApplyHQ does not use the extension to read unrelated browsing history, monitor all browsing activity, or collect information from pages where you do not use AutoApplyHQ features.

Automatically Collected Technical Information

We may collect limited technical information when you use the Services, such as:

• IP address
• Browser type
• Device type
• Operating system
• Pages or features used
• Error logs
• Date and time of access
• General usage analytics
• Security and authentication events

We use this information to operate, secure, debug, and improve the Services.

On the job search assessment, we use the Meta Pixel to measure page and question reach and email-plan requests. Meta may receive the visited page, event name, browser and device information, IP address, referrer, and Meta cookie identifiers. We do not include assessment answers, names, or email addresses in these Pixel events. For trial checkout starts and purchases confirmed by Stripe, our server also sends Meta conversion events with the event time, assessment page URL, and a one-way hashed assessment-session ID. If available, the server includes Meta browser and ad click identifiers to help match these events and attribute conversions. We preserve an ad click identifier in a first-party cookie for up to 90 days and store available identifiers with the assessment or checkout session. The server event does not include your name, email address, assessment answers, or Stripe customer identifiers. Meta processes information under its own privacy terms.

Job Search Assessment and Plan Email

If you complete the free job search assessment and request your plan by email, we store the name and email address you provide, your assessment answers, and the result and plan created from those answers. To fulfill and track your request, we also store the intended email recipient, delivery status, send-attempt timestamps and counts, a provider message identifier when available, a failure category when needed, and Resend webhook event identifiers, event types, and processing status. We do not store the raw private-link token or the full webhook payload. Resend processes the recipient address and email content, including your name, plan summary, and private plan link, to deliver the message under its own policies.

To measure the assessment funnel, we record which assessment screens and individual questions were reached, whether you submitted an email address, started trial checkout, and whether Stripe confirmed a trial purchase. These event records use an assessment session reference, an event identifier, and a timestamp; they do not contain your answers, name, or email address. We use them to understand where people continue or leave the assessment, and delete them with the related assessment records.

If you purchase the introductory subscription, we also store the checkout email address and the scheduled/sent status of a one-time billing reminder. Resend processes that address and the reminder content, which states the upcoming $37.99 monthly renewal. We also retain the reminder's delivery status, attempt count, provider message identifier, and event timestamp. Reminder records are removed with the related assessment and checkout claim.

Uncaptured assessment sessions are configured to expire after 30 days. After you request email delivery, the assessment, saved plan, lead, and delivery record are configured to expire after 180 days. Expiration blocks access; the cleanup process removes those records when it runs, so they may remain in storage for a period after access ends. Webhook event identifiers retained for replay protection do not currently have an automatic expiry. You may request deletion sooner by contacting us.

The private link in the plan email expires 30 days after it is issued. Link expiry does not itself delete your assessment, saved plan, or delivery record. See our Retention Policy for expiration and recovery details.