ApplyAI Pro Privacy Policy
Transparent disclosure of our on-device architecture, data handling, and multi-jurisdictional privacy rights.
Last Updated & Reviewed: October 30, 2026 • Effective Globally
1. On-Device Execution & Data Boundary
ApplyAI Pro is engineered with a strict on-device privacy architecture. Unlike legacy cloud-based auto-apply platforms, ApplyAI Pro runs locally within your authenticated Google Chrome browser instance.
chrome.storage.local). We do NOT operate cloud scrapers and we never collect portal passwords.2. Global & Regional Regulatory Compliance
India — Digital Personal Data Protection Act (DPDP 2023)
For candidates residing in India, ApplyAI Pro processes candidate information strictly based on unambiguous user consent. Under the DPDP Act 2023, you retain full rights to:
- Review and modify your stored resume context within the extension settings.
- Permanently erase your stored profile by clearing local extension data or clicking "Reset Profile" in settings.
- Direct grievance inquiries to our Data Protection Desk at support@autoapplyjobs.in.
United Kingdom & European Union (UK GDPR & EU GDPR)
Under the UK GDPR (Data Protection Act 2018) and EU GDPR, our legal basis for processing transaction data and license keys is the performance of a contract (delivering your utility pass). You have the right to access, rectify, or request deletion of transaction metadata. We do not engage in automated decision-making that produces legal effects.
United States (California CCPA/CPRA & State Privacy Laws)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- We DO NOT Sell or Share Personal Data: ApplyAI Pro does not monetize, sell, or disclose candidate data to data brokers or third-party advertisers.
- Right to Know & Delete: You may request deletion of any purchase telemetry by contacting our support desk.
- Non-Discrimination: Exercising your privacy rights will never result in discrimination or service degradation.
Canada (PIPEDA & CASL)
In compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canadian Anti-Spam Legislation (CASL), we only collect transaction and license metadata necessary to fulfill software access. We never send unsolicited commercial electronic messages without express opt-in consent.
3. Data Retention & Security Controls
License keys and transaction IDs are retained in our secure edge database solely to validate active passes and prevent fraudulent key duplication. When your pass expires or when you delete the extension, local client state is immediately cleared. All network communications are encrypted in transit using HTTPS/TLS 1.3.