Legal
Privacy policy
Template — pending legal review. This text is a working draft and is not yet final legal advice.
This policy explains what personal data Applybound ("we") processes when you use our website and Service, why, and the choices you have.
1. Data we process
- Account data — name, email address, password hash, language and security settings.
- Profile data — the CV and profile information you upload and confirm: work history, education, skills, achievements, links, target roles, locations and salary floor.
- Search and application data — matches, application packs, submission status, interview details and offers.
- Messages — recruiter conversations from mailboxes you connect.
- Platform connections — encrypted sessions or tokens for job platforms you connect, and your consent records.
- Billing data — plan, credit ledger and payment records. Card details are handled by our payment processor; we do not store them.
- Technical data — IP address, device and browser information, and logs needed for security.
2. Why we process it
To provide the Service you ask for (contract); to secure accounts, prevent abuse and keep records of consent (legitimate interests and legal obligations); to bill you (contract); and, with your permission, to send product updates (consent).
3. AI processing
Your data is processed by AI models to match jobs, write materials and draft replies. The AI providers that receive your job-search data (your CV, profile, matches, applications and messages) are Anthropic and OpenAI. Model providers act as our processors under contracts that prohibit using your data to train their models. We do not use your data to train public models.
4. Sharing
We share data only with processors that help us run the Service (hosting, AI providers, payment, email, and suppliers such as CAPTCHA solving, phone-number and proxy providers when you use features that need them), with job platforms and employers when you apply, and where required by law. We do not sell personal data.
5. Retention
We keep your data while your account is open. When you delete your account, your workspace data is erased within 30 days, except records we must keep for legal, tax or security reasons.
6. Your rights
Depending on where you live, you may access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Most of this is available in Settings; otherwise write to [email protected]. You may also complain to your data protection authority.
7. International transfers
Your data may be processed outside your country. Where required, we use appropriate safeguards such as standard contractual clauses.
8. Security
We use encryption in transit and at rest, workspace isolation and access controls. See Security & privacy.
9. Children
The Service is not directed to children under 16.
10. Changes and contact
We will post updates here and notify you of material changes. Contact: [email protected].