Privacy Policy
Last updated: October 2026 · Designed in alignment with global privacy principles including GDPR, CCPA & India DPDP guidelines
ApplyHook is founded on a straightforward principle: your career credentials belong to you. We evaluate, score, and format your resumes and cover letters, and nothing else. We never sell your personal contact details, resume text, or employment history to third-party recruiters, advertisers, or data brokers.
Information We Collect
When you sign in with Google OAuth, we receive your name, verified email address, and profile photo URL. We store these solely to manage your authentication session and track your usage limits.
When you perform a free resume scan as a guest (without an account), the document text is processed in transient memory to compute your diagnostic breakdown and is purged from RAM once the analysis response completes.
To guard our free diagnostic engines against automated scraping and denial-of-service abuse, we apply sliding-window rate limiting on IP addresses. IP strings are kept in temporary volatile cache and are never linked to any advertising identifiers.
To prevent automated bot abuse of free monthly quotas across multiple duplicate accounts, we compute an anonymous cryptographic hash of non-identifying browser attributes. This device fingerprint is stored solely to enforce monthly free usage quotas and prevent coordinated abuse. It is never sold, licensed, or used for cross-site behavioral advertising.
Zero Binary Storage & What We Never Keep
Zero raw binary file storage: Uploaded PDF or Word binary files are parsed in-memory and never written to permanent disk storage.
No data resale: We do not license, sell, or rent candidate contact info or resume text to recruiting agencies, aggregators, or brokers.
Zero prompt training: Your resume text and career history are never utilized to train public foundation AI models.
Ephemeral processing: Job descriptions pasted into the Matcher or Cover Letter generator are not stored in user records.
The Resume Vault: How Stored Text Works
Pro and Ultra subscribers can save resumes in their personal Resume Vault (`/my-resumes`).
The Vault stores only sanitized plain text capped at 8,000 characters. It does not store binary file attachments, metadata headers, or system file paths. You have full control to rename, edit, or permanently delete vault entries at any time.
AI Model Processing & Candidate Privacy
ApplyHook does not sell, license, or utilize candidate career data or prompt inputs to train proprietary AI foundation models. AI generation requests (such as cover letter synthesis and diagnostic checks) are processed ephemerally through Google Cloud's Gemini API infrastructure. While ApplyHook deletes input text from transient memory immediately after processing, API requests are subject to Google's standard developer API terms. Upgraded paid accounts operate under commercial non-training data provisions.
Third-Party Infrastructure & Subprocessors
ApplyHook relies on trusted, industry-standard cloud infrastructure partners:
User authentication & secure identity verification
Encrypted cloud database for user accounts and vault text
PCI-DSS Level 1 compliant subscription payments and tax compliance
Secure global edge server hosting with SSL encryption
Cookies & Local Session Security
We use strictly necessary encrypted session cookies (`next-auth.session-token`) to maintain your authenticated login state. We do not use third-party cross-site advertising tracking cookies or data broker beacons.
Data Retention & Immediate Account Deletion
You maintain complete ownership of your data. You may delete saved resumes directly from your dashboard with immediate effect. To permanently delete your entire account and all associated records, you can submit a deletion request to support@applyhook.com, and all database records will be erased within 7 business days.
Your Rights (GDPR & Indian DPDP Act)
Depending on your jurisdiction (including the European Union under GDPR, California under CCPA, and India under the Digital Personal Data Protection Act), you have rights to access, inspect, export, or revoke consent for processing your personal data. ApplyHook honors all lawful data access and deletion requests promptly.
Children's Privacy
ApplyHook is open to students and job seekers. In accordance with standard online privacy regulations (COPPA), we do not knowingly collect personal information from children under the age of 13.
Contact & Data Requests
For any questions or privacy inquiries regarding your career data, please contact our privacy desk at support@applyhook.com.