ApplyAI Pro Privacy Policy
Comprehensive disclosure of user data collection, handling, storage, security, and third-party sharing in strict compliance with the Google Chrome Web Store Developer Program Policies.
Last Updated & Reviewed: October 31, 2026 • Effective Globally
1. Single Purpose Statement
ApplyAI Pro is an assistive job application copilot browser extension designed to help job seekers automate form filling, maintain profile freshness, and answer recruiter screening questionnaires on four supported job platforms: LinkedIn, Naukri, Indeed, and Wellfound. All data collected or processed by ApplyAI Pro exists strictly to facilitate this single core purpose.
2. User Data Collection
We believe in radical transparency and strict data minimization. Below is an exhaustive breakdown of the categories of data ApplyAI Pro collects, the sources of collection, and categories of data we strictly do not collect:
A. Personally Identifiable Information (PII) Provided by the User
Types of data collected: Candidate Full Name, email address, phone number, current location/residence, work history (company names, job titles, employment durations), educational qualifications, technical skills, current and expected compensation/CTC, notice period, and professional portfolio links (e.g., GitHub, personal website).
Method of collection: Directly provided by the user when configuring their "Candidate Resume Context / Bio" in the extension popup or settings dashboard.
B. Job Application & Screening Questionnaire Data
Types of data collected: Job posting metadata (job title, employer name, location, and job ID) and employer screening questionnaire text extracted from active application forms.
Method of collection: Extracted directly from the Document Object Model (DOM) of active job application pages exclusively on the 4 supported portals (LinkedIn, Naukri, Indeed, and Wellfound) while a user-initiated automation session is running.
C. Software Licensing & Technical Identifiers
Types of data collected: Software subscription license key entered by the user, an anonymous one-way cryptographic installation hash (BOT_INSTALL_ID) to enforce single-device active licensing, extension version, and local daily application counters.
Method of collection: Generated client-side upon first extension launch and verified against our secure edge licensing API over HTTPS.
🚫 Data Categories We STRICTLY DO NOT Collect
- Authentication Passwords & Session Tokens: We NEVER collect, read, store, or transmit your passwords or session credentials for LinkedIn, Naukri, Indeed, or Wellfound. All automation runs within your already-authenticated browser session.
- General Web Browsing History: We do NOT monitor, record, collect, or transmit your browsing history outside active job application tabs on the 4 declared job portals.
- Financial & Payment Card Information: All subscription payments are processed securely by our third-party payment gateway (Razorpay). ApplyAI Pro never receives, processes, or stores credit/debit card numbers or bank credentials.
- Biometric, Health, or Sensitive Data: We do NOT collect health data, biometric data, religious beliefs, political affiliations, or trade union memberships.
3. User Data Handling & Usage
ApplyAI Pro processes user data solely to deliver the assistive job application features requested by the user. Specifically, collected data is handled for the following operational purposes:
- Assisted Form Population: Your user-provided profile and resume context are used to auto-populate matching input fields (name, contact info, experience, compensation expectations) across multi-step application forms on the supported job portals.
- AI Screening Question Answering: When an employer questionnaire requires custom responses, the question text and relevant candidate resume context snippets are sent to enterprise AI language models to generate tailored, context-aware answers.
- Subscription & Seat Management: License keys and anonymous hardware hashes are checked against our secure edge backend to validate subscription tier access and prevent unauthorized license resale or key duplication.
- Local History & Telemetry: Application counters and submission timestamps are logged locally to give the user visibility into their application velocity and prevent accidental duplicate submissions.
Chrome Web Store Limited Use Compliance
ApplyAI Pro complies fully with the Chrome Web Store User Data Policy, including the Limited Use requirements:
"ApplyAI Pro's use and transfer of information received from Google APIs to any other app will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements."
We do not use or transfer user data for serving advertisements, personalized advertising, retargeting, interest-based profiling, or creditworthiness assessments.
4. User Data Storage, Retention & Security
We employ an on-device-first architecture designed to minimize server-side data retention:
Client-Side Local Storage (In Your Browser)
Your candidate resume bio, personal contact details, notice period, salary preferences, application history logs, and optional custom AI API keys are stored exclusively inside your browser's local extension storage (chrome.storage.local). This data resides entirely on your device and is never stored in any remote database.
Retention: Persists locally until you click "Reset Profile" in settings, clear extension data, or uninstall ApplyAI Pro from Chrome.
Server-Side Secure Edge Storage
Our edge infrastructure stores only minimal licensing records: license keys, one-way hashed installation IDs, subscription tier, expiration timestamp, and total application counts. We do NOT store candidate resumes, phone numbers, or passwords on our servers.
Retention: Retained for the active duration of the subscription plus 1 year to comply with accounting, tax, and fraud-prevention legal obligations, after which it is permanently purged.
Ephemeral AI Processing (Zero Server Retention)
When an employer question is processed via enterprise AI models, prompt payloads containing question text and resume context snippets are processed ephemerally in-memory. They are immediately discarded once the response is synthesized and are NOT stored permanently or used to train public machine learning models.
Data Security Safeguards
- All data transmitted between the extension and backend endpoints is encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
- Hardware fingerprints are cryptographically hashed using SHA-256 and cannot be reverse-engineered to identify physical devices.
- Local browser storage is protected by Google Chrome's sandboxed extension process model.
5. User Data Sharing & Third-Party Disclosures
In accordance with Chrome Web Store policy requirements, the table below provides a comprehensive list of all parties with whom user data may be shared, the specific data shared, and the purpose of the sharing:
| Third-Party Entity | Data Category Shared | Purpose & Processing Nature |
|---|---|---|
| Secure Edge Infrastructure Global Edge Network & Licensing | License key, hashed installation ID (BOT_INSTALL_ID), extension version, and ephemeral screening question prompts. | Edge routing, DDoS mitigation, license entitlement verification, and secure API proxying. |
| Enterprise AI Inference Services Secure LLM Inference Gateways | Ephemeral employer question text and relevant candidate resume context snippets. | Synthesizing contextual responses to job screening questions. Processed ephemerally in-memory; zero training on user data under enterprise API agreements. |
| Job Portals & Prospective Employers LinkedIn, Naukri, Indeed, Wellfound | User-provided candidate contact details, resume attachments, CTC, work history, and questionnaire responses. | Submitting job applications directly to employer job postings strictly upon explicit user command and initiation. |
| Razorpay Software Private Limited Payment Processor (Web Checkout) | Billing contact details and payment transaction metadata (handled exclusively on autoapplyjobs.in web checkout). | Processing payments for software subscription passes. The Chrome extension receives only a cryptographic validation token. |
| Operational Diagnostics Encrypted System Health & Error Monitoring | Anonymized license validation heartbeats, error codes, and aggregate application count metrics. | Operational uptime monitoring and error alerting. Passwords, phone numbers, and full resume texts are never transmitted to diagnostic channels. |
Mandatory Zero-Sale & Non-Transfer Certification
- We DO NOT sell personal data: ApplyAI Pro has never sold, rented, leased, or monetized user personal information or resume data to third parties, data brokers, or advertising networks.
- We DO NOT transfer data for unrelated purposes: User data is never transferred to any party for purposes outside the extension's declared single purpose.
- We DO NOT use data for creditworthiness or lending: We never assess credit, employment eligibility scoring, or lending risk.
6. User Rights & Data Deletion Procedures
You retain complete custody and control over your personal data. You may exercise any of the following rights at any time:
- Immediate Local Deletion: You can purge all locally stored resume context, application counters, and settings by clicking "Reset Profile" in the extension settings or by removing ApplyAI Pro from Google Chrome (
chrome://extensions→ Remove). - Right to Access & Export: You can review all data stored about you locally directly within the extension dashboard.
- Server-Side Erasure Request: To delete your license activation record from our server database, send an email to support@autoapplyjobs.in with your license key. We will purge your record within 24–48 business hours.
- Local AI Safe Haven (Ollama): Users seeking complete offline privacy can select the Ollama Local AI integration in settings. When active, 100% of question solving is processed on localhost with zero data sent to external AI providers.
7. Global & Regional Regulatory Compliance
India — Digital Personal Data Protection Act (DPDP 2023)
For users in India, ApplyAI Pro processes candidate information strictly based on unambiguous, revocable consent. We operate as a Data Fiduciary adhering to lawful processing principles, providing transparent grievance redressal at support@autoapplyjobs.in.
European Union & United Kingdom (EU GDPR & UK GDPR)
Our legal basis for processing licensing data is the performance of a contract (Art. 6(1)(b) GDPR). You have the right to access, rectify, restrict, or erase your data, and to lodge a complaint with a supervisory authority. We do not engage in automated decision-making that produces legal effects.
United States (California CCPA / CPRA & State Laws)
Under the CCPA/CPRA, California residents have the right to know what personal information is collected, request deletion, and opt-out of data sale or sharing. We certify that we do not sell or share personal information as defined under California law.
Canada (PIPEDA & CASL)
In compliance with Canada's PIPEDA, personal data is collected solely for reasonable business purposes related to software functionality. We never transmit commercial electronic messages without express opt-in consent.