1. Introduction & Australian Privacy Principles (APPs) Commitment
ApplyLab ("we", "our", or "us") operates the AI Job Application Copilot service. We are committed to protecting the privacy of job seekers, candidates, and visitors. This Privacy Policy sets out how we collect, hold, use, disclosure, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).
By creating an account, uploading career history, pasting job descriptions, or using ApplyLab, you consent to the data practices described in this policy.
2. Information We Collect
To provide tailored resumes, Australian standard cover letters, and interview coaching, we collect the following categories of personal information:
A. Account & Contact Information
Your full name, email address, password hash, and OAuth authentication tokens (e.g. Google Sign-In IDs).
B. Master Career Profile & Professional Data
Employment history (role titles, company names, dates of employment, responsibilities, bulleted achievements), educational background, formal qualifications, licenses, skills repository, contact phone numbers, addresses, and any uploaded resume documents (PDF, DOCX).
C. Job Application Data
Target job descriptions pasted or imported from SEEK, LinkedIn, or employer portals, extracted key selection criteria, generated tailored resumes, cover letters, and practice interview responses.
D. Billing & Transaction Information
Subscription status, tier history, and transaction receipts. All payment transactions are processed securely via Stripe Inc. Raw credit card numbers are never stored on ApplyLab servers.
E. Technical & Telemetry Data
IP addresses, browser type, device information, operating system, and authentication session cookies strictly required for platform operation.
3. How We Use Artificial Intelligence & Third-Party LLMs
Because ApplyLab is an AI-powered platform, we enforce strict, ironclad data protection guarantees regarding Large Language Models (LLMs):
- Strict Zero-Data Training Guarantee: Your personal information, work history, uploaded resumes, and interview responses are NEVER used to train, retrain, or fine-tune public foundation models (including OpenAI, Anthropic, or Google AI models).
- Enterprise API Contracts: We process prompt data exclusively via enterprise API endpoints bound by commercial agreements that mandate zero data retention for model training purposes.
- Strict Fact Grounding (Anti-Hallucination): Our proprietary system prompts require AI model outputs to strictly reference verified facts from your Master Career Profile.
- No Autonomous Legal or Employment Decisions: ApplyLab tools generate draft content for your review. You retain full editorial control over every resume and application document prior to submission.
4. How We Use Your Information
We use your personal information solely for the following business purposes:
- Generating 1-page ATS-optimized resumes and Australian-tailored cover letters.
- Parsing SEEK and LinkedIn job ads to extract selection criteria and calculate match percentages.
- Generating role-specific STAR method interview practice questions and feedback scores.
- Processing subscription payments and managing account billing via Stripe.
- Sending critical technical service updates, security notifications, and billing receipts.
- Preventing platform abuse, fraudulent transactions, and unauthorized access.
5. Third-Party Sub-Processors & Infrastructure
We store and process data using vetted, enterprise-grade cloud providers adhering to SOC 2 Type II, ISO 27001, and PCI-DSS standards.
| Sub-Processor | Role & Purpose | Security / Standards |
|---|---|---|
| Supabase / AWS | Database hosting, authentication, user data storage | AES-256 at rest, TLS 1.3 in transit |
| Vercel Inc. | Next.js application hosting & edge runtime | SOC 2 Type II, ISO 27001 |
| Stripe Inc. | Payment processing & customer billing portal | PCI-DSS Level 1 Compliant |
| Enterprise AI Vendors | Prompt processing for resume tailoring & interview prep | Zero Data Retention (ZDR) APIs |
6. Data Retention, Export & "Right to Be Forgotten"
We retain your career data for as long as your account remains active. You maintain total ownership over your information:
- Data Export: You can export your full Master Career Profile and generated documents at any time in JSON, PDF, or editable DOCX formats.
- Account Deletion: You can initiate account deletion at any time via your Account settings. Upon confirmation, all your personal data, career profile entries, resume drafts, and cover letters will be permanently purged from our active databases within 30 days.
8. International Data Transfers (APP 8 Compliance)
As an Australian entity, we comply with Australian Privacy Principle 8 (Cross-border disclosure of personal information). While our primary operations are based in Australia, our encrypted cloud sub-processors operate secure data centers in Australia, the United States, and the European Union.
Before disclosing personal information to overseas cloud recipients, we ensure that overseas recipients are bound by contractually enforceable obligations to uphold privacy standards substantially similar to the APPs.
9. Contact Information & Privacy Complaints
If you have questions regarding this Privacy Policy, wish to request access to or correction of your personal information, or wish to lodge a privacy complaint, please contact our Data Privacy Officer:
ApplyLab Privacy Officer
Email: privacy@applylab.io
Address: ApplyLab Privacy Office, Sydney NSW, Australia
Escalation to OAIC
If you are not satisfied with our response to a privacy complaint, you may escalate your matter to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992