Last updated: July 21, 2026
This Privacy Policy explains how ApplyFast ("ApplyFast," "we," "us," or "our") handles personal information when you use our website, web application, Chrome extension, mobile application, email notifications, API, and MCP server (collectively, the "Service").
When you create an account, we collect information such as your name and email address. If you use email and password sign-in, our authentication provider processes your password credential. If you sign in with Google, we receive basic account information that you authorize Google to share, such as your name, email address, and profile picture. We do not receive your Google password.
We collect the information you provide during onboarding and in your profile, including your LinkedIn profile URL, skills, work experience, education, job preferences, preferred locations and work arrangements, compensation preferences, career goals, requirements, dealbreakers, interview answers, scoring weights, and notes. With your direction, we use Apify to retrieve information available from your LinkedIn profile, which may include your headline, work history, education, skills, certifications, profile image, and other profile fields returned by the provider.
We process your job alerts, search subscriptions, matched jobs, AI scores and explanations, requirement checks, token usage, and thumbs-up or thumbs-down feedback. We also keep information needed to operate API keys and MCP connections, such as key names and prefixes, OAuth grants, usage counters, rate-limit records, and recent access activity. API key secrets are stored in hashed form after they are shown to you.
Stripe processes purchases, subscriptions, and the billing portal. We receive billing-related records such as your Stripe customer identifier, product or price, payment status, subscription status and renewal period, token grant, amount, currency, and transaction identifiers. We do not store full payment-card details on our servers.
We process your email address and delivery information when we send account verification, password reset, billing, service, and job-match messages. When you use the Service, we and our service providers may collect technical information such as IP address, browser or device type, operating system, session information, referring pages, page views, timestamps, and diagnostic or security events. We use Vercel Analytics to understand aggregate website usage.
We receive information:
We use information to:
ApplyFast uses automated systems to generate onboarding questions, compile your scoring dossier, create embeddings, and score job postings against your profile. Relevant profile, interview, preference, feedback, and job-posting content may be sent through Vercel AI Gateway to the AI model providers used by the Service. AI scores and explanations are recommendations for your job search; they do not make employment decisions, submit applications, or guarantee any result.
We do not sell or rent your personal information. We may disclose information in the following circumstances:
Job postings are maintained in a shared, deduplicated pool used to provide matches to multiple users. We do not place your private profile or interview answers in that shared job pool.
The extension uses Chrome storage to maintain limited local state, such as whether the side panel is open, and the browser and our authentication libraries maintain information needed for your session. Its permissions allow it to provide the side panel, maintain storage, offer a sign-out context menu, use Google identity, and inspect active tab URLs. When you view a LinkedIn job URL, the extension may recognize its job identifier so it can open an existing ApplyFast match. The current extension does not request general host access to LinkedIn pages.
The mobile app stores authentication session information using secure device storage and communicates with the same ApplyFast backend used by the web app and extension. Your operating-system provider and app-distribution platform may separately process information under their own policies.
The web application uses cookies and similar storage technologies for authentication, session continuity, security, OAuth flows, preferences, and analytics. Blocking required cookies may prevent sign-in or other parts of the Service from working.
We retain personal information while your account is active and as needed to provide, secure, and improve the Service. Retention periods vary by data type and may also reflect fraud-prevention, accounting, tax, dispute-resolution, backup, and legal requirements. Public job-posting data in the shared job pool may remain after an individual account is deleted because it is not unique to that account. When information is no longer needed, we delete or de-identify it where reasonably practicable.
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, hashed API key secrets, and secure connections. No internet transmission or storage system can be guaranteed to be completely secure. Keep your account credentials and API keys confidential, and revoke credentials you believe are exposed.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. You can update profile details and job alerts, revoke API keys, revoke access through a connected client where that client supports it, and manage a paid subscription through the Stripe billing portal. Account deletion is available in the mobile app, and you may also contact us to request deletion or exercise another privacy right.
You may ask us to stop optional job-match emails by contacting us. We may still send messages needed for authentication, security, billing, or administration of the Service. We may need to verify your identity before completing a request, and some rights are subject to legal exceptions.
ApplyFast and its service providers may process information in countries other than the country where you live. Where required, we rely on appropriate safeguards for international transfers of personal information.
The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us.
We may update this Privacy Policy as the Service or applicable requirements change. We will post the updated policy on this page and revise the "Last updated" date. If a change is material, we may provide additional notice through the Service or by email.
For privacy questions or requests, contact us at applyfastapp [at] gmail.com.