Privacy Policy

What this is

ApplyPilot is a job application assistant. You upload your resume, answer a short interview about your background, optionally connect an email account, and the tool helps you fill job application forms and write application emails. This page explains what data it collects, why, and how it is protected.

What is collected

• Your account email address and a hashed password, never the plain password.
• The resume file and text you upload, and the structured profile extracted from it (name, contact details, education, skills, experience, projects).
• Answers you give to the background interview, stored as a structured profile of your values, strengths, and goals.
• Job descriptions you paste in, and the applications, cover letters, and emails generated from them.
• If you connect an email account: either an app password (encrypted at rest) or a Gmail OAuth refresh token (also encrypted at rest). Neither is ever stored in plain text.
• Corrections you make to a filled form's answers, so the same correction can be reused on a future form.

How your Google Account information is used

If you connect Gmail, ApplyPilot requests exactly one Google permission: gmail.send. This lets the application send an email as you, with your resume attached, only when you press Send on a draft you have reviewed. ApplyPilot never reads your inbox, never reads or sends anything you have not explicitly drafted and approved, and never accesses any other Google data. You can revoke this access at any time from your Google Account permissions page or by disconnecting Gmail in ApplyPilot's settings.

Who else sees your data

Resume text, job descriptions, and your background answers are sent to Groq, the AI provider used to generate cover letters, emails, and form answers, solely to generate that output. If you fill a Google Form or Microsoft Form, that form's own provider sees whatever answers you choose to submit, the same as if you had typed them in yourself. ApplyPilot does not sell data, does not use it for advertising, and does not share it with any other third party.

Human in the loop, always

ApplyPilot never submits a form and never sends an email on its own. Every filled form stops before submit for you to review; every email is a draft you can edit until you explicitly press send.

Data retention and deletion

Your data is kept for as long as your account exists. To delete your account and everything associated with it, contact the address below.

Contact

Questions about this policy or a request to delete your data: reach out through the project's GitHub issues.