Privacy Policy

This policy explains what personal data Aplikado processes, why, who we share it with, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data Controller

Aplikado is the controller of the personal data in your account: your login details, the CVs and profiles you create, your applications, your billing records and your usage data. For privacy questions, contact legal@aplikado.com.

2. What Data We Process

• Account data: email address, login and security data (including two-factor authentication), account tier.
• CV content: CVs, images, PDFs and LinkedIn profile URLs you upload or paste, and the CV profiles, projects and facts you save. These can contain your name, contact details, work history, education and skills.
• Application data: job postings you save, application status, notes, interview dates, interviewer names you enter, and the research, match scores and texts the app generates for them.
• Billing data: plan, payment status and subscription period. Card and BLIK payment details are handled by Stripe; we do not store them.
• Usage and support data: feature usage and credit consumption (for quotas and security), and messages you send through the contact form, with attachments.

3. Why We Process It (Legal Basis)

• To provide the service you request (contract): storing your CVs and applications, job search, matching, AI-generated texts, research and PDF export.
• To take payments and keep billing records (contract and legal obligation).
• To keep the service secure and prevent abuse (legitimate interest): quotas, blocking misuse, error diagnosis.
• To answer your support requests (legitimate interest).

We do not sell your data, use it for advertising, or use it to train AI models.

4. Service Providers

We send data to the providers below only as needed for the feature you use:

• Hosting and database: Supabase (database and login), Railway (application servers), Trigger.dev (background tasks such as job searches and CV adaptation).
• AI processing: Groq, Google Gemini, and Requesty, which routes some requests to OpenAI and Google models (including document text recognition). These receive the CV, job and application content needed for the feature you run.
• Web research and job search: Apify (LinkedIn company and profile lookups), Firecrawl (reading job pages), and job board APIs. These receive search terms, URLs, and company or person names, not your CV.
• Payments: Stripe.

Some of these providers process data outside the European Economic Area, for example in the United States. Where they do, the transfer relies on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. Data About Other People

Some features process data about people other than you. Interview Prep looks up the interviewers you name on LinkedIn and on the public web to prepare a briefing. Job Deep Research reads public company pages and LinkedIn posts. Only submit data about other people that you are allowed to use for your job search.

6. Public Share Links

If you share your application statistics card, we store a snapshot (the numbers and an image) at a public link. Anyone with the link can open it. The snapshot does not include your CV.

7. Retention

• Account, CV and application data are kept until you delete them or delete your account.
• Job search results are temporary and are deleted automatically when they expire.
• Billing records are kept as long as tax and accounting law requires.
• AI and research providers keep request data only under their own retention terms.

8. Cookies and Browser Storage

We use only strictly necessary cookies and browser storage, and no advertising or tracking cookies. See our Cookies Policy.

9. Your Rights

• Access, rectify or erase your personal data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time, where processing relies on consent
• Lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO)

You can export your data or delete your account from the account settings in the app. To exercise any other right, or for any privacy question, contact us at legal@aplikado.com.

10. Changes to This Policy

If we change this policy, we will update the effective date above.