Privacy Policy

How Applyvo collects, processes, and protects your account and resume data — including the third-party AI services we use to generate CVs, cover letters, and recruiter replies.

Last updated: May 18, 2026

Introduction

Applyvo ("Applyvo," "we," "us") provides AI-assisted tools for job seekers, including resume optimization, application tracking, cover letter generation, and recruiter reply assistance. This Privacy Policy explains what information we collect when you use Applyvo, how we use and share it, how long we keep it, and the choices you have. It applies to applyvo.io and any service that links to this policy. If you do not agree with this policy, please do not use the service.

Information we collect

Account information: name, email address, and authentication identifiers managed by our identity provider (Supabase Auth).

Profile and resume content: the text of resumes you upload or build, work history, skills, education, and any other CV profile fields you complete.

Application data: job descriptions, job URLs, employer names, application statuses, notes, contacts, and interaction logs you record in the tracker.

Generated outputs: ATS scores, tailored CVs, cover letters, and recruiter replies produced by our AI features at your request.

Usage data: pages viewed, features used, error events, and approximate request timing, used for product analytics and to detect abuse.

Device and log data: IP address, browser user agent, language preference, and session cookies required to keep you signed in.

Billing information: handled by our payment processor (Stripe). We do not store full payment card numbers on our servers.

How we use your information

We use your information to operate and improve Applyvo: to authenticate you, to run the AI features you request, to display your applications and CVs back to you, to send transactional emails (sign-in, billing, security), to identify and fix service outages, to detect and prevent unauthorized access and account fraud, and to comply with legal obligations. We do not sell your data to advertisers or data brokers, and we do not use your resumes, applications, or AI requests for training models outside your direct control.

Service providers we share data with

We share only the minimum data needed with service providers, each bound by a contract that limits how they may use it:

  • Supabase (database, authentication, and object storage for your uploaded resume PDFs).
  • Anthropic (AI model provider — processes the text you submit for AI feature generation).
  • Stripe (payment processor — handles subscription billing and tax).
  • Hosting and observability providers (operate the service and detect outages).

    • We do not sell or rent your data to advertisers or data brokers.

    Cookies and similar technologies

    We use a small number of strictly necessary cookies: an authentication cookie that keeps you signed in, a language cookie that remembers your locale choice, and a theme cookie that remembers light or dark mode. We do not use third-party advertising cookies. We use first-party, privacy-respecting analytics to count visits and feature usage in aggregate.

    AI processing of your content

    Your content is never used to train AI models. Here's how we handle it:

    When you use our AI features (resume scoring, CV tailoring, cover letter generation, recruiter replies, and job description parsing), we send your text to Anthropic's Claude API over an encrypted connection. Anthropic processes your request and returns the result, which we display to you.

    Your data is protected: we do not allow Anthropic to use your content for model training. Anthropic retains API inputs and outputs for up to 30 days to check for abuse and policy violations, then permanently deletes them—unless law requires longer retention.

    Learn more at anthropic.com/legal/privacy. We may add other AI providers in the future; we'll update this policy first.

    Data retention

    We keep your account data as long as your account is active. Resume PDFs you generate are stored for the life of the parent application. AI request and response payloads are not stored in our application database; our AI providers retain them for up to 30 days to check for abuse, then permanently delete them. When you delete a resume, application, or your account, we delete the corresponding records and storage promptly, except where tax, accounting, or legal requirements require us to keep records.

    Your rights and choices

    Depending on where you live, you may have the right to access, correct, export, restrict, object to, or delete your personal data. You can update most profile fields directly in the app and delete uploaded resumes from the tracker. To request account deletion or any other privacy right, email [email protected]. We will verify your identity before acting on requests that involve sensitive data, and we aim to respond within 30 days.

    Children

    Applyvo is intended for adults in the job market. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

    Changes to this policy

    We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, communicated by email or an in-app notice before they take effect.

    Contact us

    Questions or privacy requests can be sent to [email protected]. We aim to respond within 30 days.