Privacy policy

What we store

Your email address (for sign-in), the career records you import or state (positions, accomplishments, projects, education, publications, skills), the job postings you paste, the fit analyses and documents generated for you, and your answers to intake questions. That is the product: a career record you control.

The CV file itself is not kept. It is read once to extract records, you review them, and only what you approve is saved.

Where it lives and who processes it

Data is stored in a Supabase (Postgres) database in the United States, with row-level security scoping every record to your account. The app runs on Vercel. Three other processors touch limited data to make the product work: Anthropic runs the language models that parse your documents and generate output (your graph records and pasted postings are sent for those runs; for interview prep, the company and role name are used in live web searches); Resend delivers sign-in emails; Sentry receives error reports when something breaks so we can fix it.

Like every web service, the hosting layer keeps ordinary server logs (IP address, request details) for a short time for security and debugging. If you use AppliAid from outside the United States, your data is still stored and processed in the United States.

What never happens

Your data is not sold, rented, or shared with advertisers or data brokers. There are no ad trackers or third-party analytics scripts on the site. Nothing in your graph is used to train models. No one but you sees your graph, your fit reports, or your documents — with the two exceptions any honest policy has to name: a valid legal order could compel disclosure, and if AppliAid were ever acquired, your data would move with the service under this same policy and you would be told first.

Cookies

One kind: the authentication cookie that keeps you signed in. There are no marketing or tracking cookies.

Your control

You can edit or delete any record on the graph page, and deletions are real deletions, not soft flags. Everything else works by email from your sign-in address to support@appliaid.com: ask for a copy of everything AppliAid holds about you, ask for a correction, or ask for your whole account and its data to be deleted — done within 30 days, usually much sooner. These rights are yours wherever you live. Your records are kept until you delete them or your account; nothing is retained past that except the short-lived logs above.

Children

AppliAid is not directed to children and requires users to be at least 16. If we learn an account belongs to someone younger, we will delete the account and its data.

Changes

If this policy changes in a way that matters, the change will be described here and the date above updated before it takes effect.