Privacy policy

ApplyKit is built to keep your information in your browser. This policy explains what ApplyKit stores, what it sends and to whom, and the choices you have. "ApplyKit", "we" and "us" mean the people who run the ApplyKit Chrome extension, this website and the tailoring service behind them.

1. What stays in your browser

ApplyKit stores these in Chrome's storage for the extension, on your computer:

• Your profile: your name, email address, phone number, location, links, work history, education, work authorization answers and how you usually hear about jobs.
• Your resume text, if you add it.
• Your sign-in session, if you sign in.
• On Lever, the descriptions of up to 5 job pages you've recently opened, so ApplyKit can tailor on the application page. These are kept only until you close Chrome or sign out.

None of this is sent to us or anyone else, except as described in section 3. You can change or clear your profile in ApplyKit's popup at any time, and removing ApplyKit from Chrome deletes everything it stored.

2. Autofill

When you click Fill with ApplyKit, the extension reads the application form on the page and fills it from your profile, entirely inside your browser. Nothing is sent over the internet.

ApplyKit runs only on Greenhouse and Lever pages (boards.greenhouse.io, job-boards.greenhouse.io and jobs.lever.co). It doesn't read other websites or your browsing history.

3. Tailoring

Tailoring is optional and needs an account.

Signing in

You sign in with your email address, and we email you a 6-digit code. Our sign-in system stores your email address, an account ID and when you signed in, and keeps a security log of sign-ins that includes your IP address.

What's sent when you click Tailor for this job

• The job's title, company and description from the page.
• Your resume text, after ApplyKit removes the email addresses, phone numbers, web links and street address it finds in it.
• From your profile: your name, city, state and country, current job title and company, other companies you've worked for, school, degree and graduation year. Never your email address, phone number or links.

Our server checks your account and limits, sends the request to the AI model, and returns the cover letter and bullets to your browser. It keeps none of the request or the result. It records only your account ID, the time and whether tailoring succeeded, which is how we count your free tailorings and your pass, and apply the daily limit.

The request goes to the AI model through OpenRouter, and we set every request to use only AI providers with zero-data-retention terms. Those providers don't routinely store requests or replies after answering, and neither they nor OpenRouter use them to train AI models.

4. Payments

When you buy a Job Hunt Pass, you pay on Stripe's checkout page. Stripe receives your card and billing details directly, and we never see your card number. We send Stripe your account ID, your sign-in email address (to fill in the checkout form) and the pass you chose.

For each pass we keep which pass it is, when it starts and ends, how many tailorings it has left, the amount and currency you paid, and Stripe's references for the checkout and the payment. If a pass is refunded or disputed, we note that it ended and why.

Passes are sold only to cards issued in the United States. If a payment with another card is refunded, we keep a record of it: Stripe's reference for the checkout, the card's country, the amount, and when we emailed you about it.

To stop one account from opening checkout over and over, we keep the times your account opened it, for one day.

5. Server logs

Our server runs on Supabase in the United States. Like most hosting, it keeps short-lived technical logs of requests, including IP addresses and approximate location, to run and secure the service. These logs don't include your resume, the job description or the results.

6. This website

This website uses no cookies, no analytics and no tracking scripts. Netlify, which hosts it, keeps standard server logs, such as IP addresses, to run and protect its service.

7. Support email

Emails you send to support@tryapplykit.com are forwarded by Porkbun to our Gmail inbox, where we keep them while we help you.

8. Services that receive information

We use these companies to run ApplyKit. Each receives only what it needs, and each has its own privacy policy.

Supabase

Sign-in, our database and our server, in the United States. Receives your email address, your account records and your tailoring requests as they pass through (not stored). Privacy policy

Stripe

Payments. Receives the card and billing details you enter, your email address and your account ID. Privacy policy

OpenRouter

Sends each tailoring request to an AI provider. Receives the request and the reply as they pass through. Privacy policy

The AI model provider

Runs Anthropic's Claude model, which writes the letter and bullets. OpenRouter picks the provider among those with zero-data-retention terms, such as Google Cloud Vertex AI or Amazon Bedrock. Receives the tailoring request. Privacy policies: Anthropic, Google Cloud, Amazon Web Services

Resend

Sends the emails with your sign-in code, and the email saying a payment was refunded if your card was issued outside the US. Receives your email address and the email's text. Privacy policy

Netlify

Hosts this website. Receives standard web request data, such as your IP address. Privacy policy

Porkbun

Our domain registrar; forwards email sent to support@tryapplykit.com. Receives the emails you send to support. Privacy policy

Google (Gmail)

Our support inbox. Receives the emails you send to support. Privacy policy

We don't sell your information or share it with anyone else, unless the law requires us to.

9. Why we use your information

• To provide the service you ask for: signing you in, tailoring applications and keeping track of your passes.
• To keep the service secure and prevent abuse, which is what the daily limit and server logs are for.
• To keep payment records that the law requires.

10. How long we keep it

• Your account, passes, tailoring log and any refunded checkouts: until you ask us to delete your account.
• The times you opened checkout: one day.
• Server logs: up to 7 days.
• Support emails: while we help you, and no longer than we need them afterwards.
• Stripe keeps its own payment records for as long as financial laws require.

11. Your choices and rights

• You can use autofill without an account. Nothing then leaves your browser.
• You can delete everything ApplyKit stored in your browser by removing it from Chrome.
• You can ask for a copy of your account data, ask us to correct it, or ask us to delete your account, by emailing support@tryapplykit.com from the address you sign in with. Deleting your account removes your account record, passes, tailoring log and any refunded checkouts.
• Depending on where you live, such as the EU, the UK or California, you may have further rights over your information. Email us and we'll help. You can also complain to your local data protection authority.

12. Chrome Web Store

ApplyKit's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

13. Children

ApplyKit isn't meant for anyone under 16, and we don't knowingly collect information from them.

14. Changes

If we change this policy, we'll update this page and its date. If a change affects how we use information we already have, we'll email signed-in users before it takes effect.

15. Contact

Questions about privacy: support@tryapplykit.com.