Privacy Policy
Apply Tracker (“we”, “our”, or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit or use our platform in compliance with the General Data Protection Regulation (GDPR) and international privacy laws. Last updated: August 14, 2026.
1. Who We Are & Data Controller
Apply Tracker is an independently operated platform, not a registered company. The individual operating Apply Tracker acts as the data controller responsible for your personal data under GDPR. To contact the controller about any privacy matter, use our Contact page at apply-tracker.com/contact.
2. Personal Data We Collect
We collect information you provide directly to us when creating an account or using our features: • Account Details: Name, email address, username, profile picture, and authentication credentials via NextAuth. • Job Applications & Career Data: Job titles, target companies, salary expectations, interview notes, and application status stages saved in your Kanban dashboard. • Resumes & Cover Letters: Content, work history, skills, and PDF document drafts created or uploaded to our AI Resume Builder and Cover Letter Generator. • User Content: Public interview reviews, company ratings, and community feed posts. • Direct Messages: Content of private conversations you send to other users through our messaging feature. • Contact Form Submissions: Your name, email address, and message content when you contact us through our Contact form.
3. How We Use Your Data
We process your personal information strictly for the following purposes: • Providing and maintaining your job application workspace. • Generating AI resume ATS compatibility scores and role-tailored cover letter drafts via an AI language model processor (DeepSeek API). • Authenticating secure account access and protecting against unauthorized login attempts. • Aggregating anonymous analytics via Google Analytics 4 (Google Consent Mode v2) to measure platform health and performance.
4. Third-Party Data Processors & Infrastructure
We do not sell your personal data to advertisers or third parties. We share data only with trusted infrastructure subprocessors necessary to deliver our service: • Database Infrastructure: Self-hosted MongoDB running on our own dedicated VPS server. We do not use a managed third-party cloud database provider. • AI Processing: DeepSeek API (for generating resume bullet suggestions and cover letters; data is processed in-memory and not used to train public AI models). • Authentication: Google OAuth (Sign in with Google) — when you sign in with Google, Google shares your name, email address, and profile picture with us to create and authenticate your account. • Job Search Providers: Adzuna, Jooble, and JSearch APIs — your search queries (e.g. job title, location) are sent to these providers to return relevant job listings. • Analytics: Google Analytics 4 with Google Consent Mode v2 (ip-anonymized traffic analytics).
5. International Data Transfers
Some of our subprocessors, including DeepSeek (our AI language model provider), are located or process data outside the European Economic Area (EEA), including in China. Where we transfer personal data internationally, we rely on the safeguards available to us, such as Standard Contractual Clauses, where offered by the subprocessor. If you are located in the EEA, UK, or Switzerland and have concerns about a specific transfer, contact us via our Contact page at apply-tracker.com/contact.
6. Cookies
We use only the cookies necessary to operate Apply Tracker: • Essential/Session Cookies: Used by NextAuth to keep you securely signed in. These are required for the platform to function and cannot be disabled. • Analytics Cookies: Google Analytics 4, used with Google Consent Mode v2, to understand aggregate platform usage. These only load with your consent where required by law.
7. Data Retention & Deletion
We retain your personal data only as long as your account remains active. You can export or permanently delete your account and all associated job applications, resumes, and interview reviews at any time from your Account Settings.
8. Your Rights Under GDPR & Privacy Laws
Under GDPR and applicable privacy legislation, you have the right to access, rectify, restrict processing, or request full erasure of your personal data. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully. To exercise your rights, contact us via our Contact page at apply-tracker.com/contact.
9. Browser Extension
Our optional browser extension lets you save job postings from sites like LinkedIn and Indeed directly to your Apply Tracker dashboard with one click. • Data Collected: Only the job details you choose to save (job title, company name, location, and posting URL). The extension does not collect your full browsing history or page content beyond the job posting you actively save. • Authentication: The extension never collects or stores your password. Signing in redirects you to the Apply Tracker website, where a secure, time-limited access token is issued and stored locally in your browser. • Data Storage: Saved jobs are sent directly to your Apply Tracker account via our API and stored in the same database as applications you enter manually on the website.
10. Children's Privacy
Apply Tracker is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us via our Contact page at apply-tracker.com/contact so we can remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last updated" date. Continued use of Apply Tracker after changes take effect constitutes acceptance of the updated policy.