Privacy Policy

This Privacy Policy explains how Applyance ("Applyance", "we", "us", or "our") collects, uses, and protects your personal data when you use our website at applyance.co and our services (the "Service"). We are the data controller for the personal data described below. By using the Service, you agree to the practices described in this policy.

1. Information we collect

We collect the following categories of personal data:

• Account information — your email address and authentication details when you create an account.
• Content you provide — CVs/resumes, job descriptions, cover letters, LinkedIn profile information, interview answers (including voice recordings), and any other content you upload or enter.
• Payment information — when you subscribe, payments are processed by Stripe. We do not store your full card details; we receive limited billing information and your subscription status.
• Usage and technical data — analyses performed, feature usage, log data, IP address, browser type, and device information.

2. How we use your information

• To provide, operate, and improve the Service (e.g. analysing your CV, generating cover letters, running mock interviews).
• To manage your account, subscription, and billing.
• To enforce usage limits and prevent abuse.
• To send you service-related and, where you have opted in, summary emails.
• To comply with legal obligations.

Our legal bases for processing under UK/EU GDPR are the performance of our contract with you, your consent (where applicable), and our legitimate interests in operating and securing the Service.

3. AI processing

Applyance uses third-party artificial intelligence providers to deliver core features. When you use the Service, content you submit (such as your CV, job descriptions, and interview answers) is sent to these providers to generate analyses, rewrites, and responses. We instruct our providers to process this data only to deliver the Service and not to train their models on your content, where such options are available.

4. Service providers (subprocessors)

We share data with trusted providers who process it on our behalf:

• Supabase — database, authentication, and storage.
• Vercel — application hosting.
• Stripe — payment processing and subscription management.
• Anthropic — AI text generation and analysis.
• OpenAI and ElevenLabs — speech-to-text and text-to-speech for voice interviews.
• Resend — transactional and summary emails.

Each provider is bound by its own data processing terms.

5. Data sharing

We do not sell your personal data. We only share it with the service providers above, where required by law, or in connection with a business transfer (e.g. a merger or acquisition), in which case we will notify you.

6. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may delete your content or close your account at any time, after which we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes.

7. International transfers

Some of our providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

8. Your rights

Depending on your location, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). To exercise any of these rights, contact us using the details below.

9. Security

We use industry-standard measures including encryption in transit, access controls, and scoped database access to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising cookies.

11. Children

The Service is not intended for anyone under the age of 16, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

13. Contact us

If you have questions about this Privacy Policy or your personal data, contact us at support@applyance.co.