Privacy Policy for ApplyChill

Effective Date: July 25, 2026

ApplyChill ("we", "our", or "us", accessible via https://applychill.com) is operated by Antreprenor Independent "DIMA HINEV" (IDNO: 1026023003751, IDNP: 2011089000911, registered address: Telenesti, Flutura, Republic of Moldova). We respect your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application.

Please read this Privacy Policy carefully. By using ApplyChill, you consent to the data practices described in this policy.

---

1. Information We Collect

A. Information You Provide Directly

  • Account Data: When you register or log in via Google OAuth 2.0, we collect your name, email address, and profile picture. This data is used to manage your account, authenticate your sessions, and track your single-purchase usage limits.
  • CV & Vacancy Data: When you use ApplyChill, we process the content of the base Google Doc CV you select and the text of target job descriptions you paste/import into the application.

B. Automatically Collected Information

  • Technical Data: We collect basic technical log data required for service operation, such as IP address, browser user-agent string, and device operating system.

C. Local Storage & Cookieless Analytics

  • Essential Local Storage: We use browser localStorage strictly for essential functional purposes—such as maintaining your Google OAuth authentication session, storing your user profile and interface preferences (e.g., auto-download preferences), and managing checkout redirect states. We do not use localStorage for cross-site tracking or behavioral profiling.
  • Cookieless Analytics: We use DataFast (datafa.st) for cookieless product analytics and usage metrics to understand product performance and feature adoption without placing tracking cookies or persistent identifiers on your device.

---

2. How We Use Your Information

We use the collected information strictly for providing and improving the ApplyChill service:

  1. CV Customization: We process your base CV and target job descriptions using AI models (such as Google Gemini API) solely to adapt your skills, tailor summaries, and structure your CV for specific job applications.
  2. Gmail Integration (Send Email Feature): When you use the "Send Email" feature, ApplyChill parses contact information from the job posting to pre-fill an email template (recipient email, subject line, and email body) and open it directly in your Gmail client. We do not send emails automatically on your behalf, nor do we store or read your email messages.
  3. Application Tracking: We store metadata (company name, job title, date applied, match score) to render your personal Application Funnel (Kanban board) and metrics dashboard.

> Zero AI Training Guarantee: Your CV text, job descriptions, and personal information are NEVER used to train public or proprietary AI models.

---

3. Google API User Data Policy Compliance

ApplyChill’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Drive Access: We request the restricted scope https://www.googleapis.com/auth/drive.file. This limits our access strictly to files you explicitly select via the Google Picker widget or files created directly by ApplyChill. We cannot read, modify, or delete any other files on your Google Drive.
  • Gmail / Email Helper Scope: ApplyChill accesses your email context strictly on-device to pre-fill email templates (recipient, subject, body). We do not request full background access to your inbox, nor do we store, read, or process your private emails on our servers.
  • Data Retention on Google Drive: Tailored CV copies are stored directly in your personal Google Drive account.

---

4. Third-Party Service Providers (Sub-processors)

We do not sell, trade, or rent your personal data to third parties. We share data only with trusted infrastructure providers necessary to operate our service:

  • Google Cloud Platform: For Gemini AI API processing, Google OAuth, and Google Drive file operations.
  • Supabase: For secure authentication and database storage.
  • Vercel / AWS: For application hosting and cloud infrastructure.
  • DataFast: For cookieless product analytics and usage metrics.
  • Payment Processor (Lemon Squeezy): Serves as our Merchant of Record to handle billing, taxes, and transaction security. We never store or process your credit card details on our servers.

---

5. Data Retention & Deletion

  • Account Data: Retained as long as your account remains active. You may request complete account deletion at any time by contacting support.
  • Kanban History: Saved CV history and job applications are retained in your dashboard to allow you to track your job hunt progress. You can delete individual application cards at any time.
  • Account Deletion Rights: You can revoke ApplyChill’s access to your Google account at any time via your Google Security Settings.

---

6. Security

We implement industry-standard technical and organizational measures to safeguard your data, including HTTPS (TLS 1.3) encryption in transit, strict OAuth 2.0 token isolation, and database access controls.

---

7. Legal Entity & Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us at:

  • Operating Entity: Antreprenor Independent "DIMA HINEV"
  • IDNO: 1026023003751
  • IDNP: 2011089000911
  • Address: Telenesti, Flutura, Republic of Moldova
  • Privacy & Legal Inquiries: [email protected]
  • Customer Support: [email protected]
  • Website: https://applychill.com