Privacy Policy

1. Information we process

Apleriq processes information that you provide when you create and use your account. Depending on how you use the service, this may include your name, email address, authentication information, saved jobs, job applications, application notes, follow-up dates, job descriptions, and information associated with your use of Apleriq's features.

When you use Apleriq's AI-powered CV and career features, you may upload a CV in PDF or DOCX format. CVs can contain personal information such as your name, contact details, education, employment history, skills, languages, and other information that you have chosen to include in your CV.

If you sign in using Google, Apleriq may receive basic account information made available through the authentication process, such as your name and email address.

2. CVs and AI-powered features

When you upload a CV to use an AI-powered feature, Apleriq extracts text from the CV so that it can perform the service you requested, such as analyzing your CV against a job description, suggesting CV improvements, tailoring a CV, generating a cover letter, or preparing interview materials.

The extracted CV text, together with other information needed for the requested feature, is transmitted to Google's Gemini API for AI processing. You should therefore only upload information that you are comfortable having processed for these purposes.

Apleriq's current CV-processing features do not intentionally save the original uploaded CV file to Apleriq's application database. However, information generated from your use of Apleriq may be stored where necessary to provide features you choose to use, such as analysis history, saved jobs, applications, notes, and usage information.

If you separately choose a profile photo for a generated tailored CV, Apleriq currently processes that photo locally in your browser for PDF generation rather than uploading it through the tailored-CV API.

3. How we use your information

Apleriq uses personal information as necessary to operate and provide the service, including to authenticate users, analyze CVs and job descriptions, generate requested career materials, maintain saved jobs and applications, provide analysis history, enforce usage limits, and maintain the security and reliability of the service.

Apleriq may also process limited technical and usage information when necessary to prevent abuse, troubleshoot problems, protect accounts, and understand whether the service is functioning correctly.

Apleriq does not sell your CV or personal information to advertisers. Personal information submitted for Apleriq's career features is used to provide and operate those features and for the other purposes described in this Privacy Policy.

4. Service providers

Apleriq uses third-party service providers to operate and deliver the service. These providers may process personal information on Apleriq's behalf where necessary to provide their services.

These providers currently include Google for Gemini AI processing and Google authentication, Vercel for application hosting and infrastructure, Supabase for database infrastructure, and Resend for transactional email delivery such as email verification.

These providers process information according to their respective terms, privacy commitments, and data-processing arrangements. The information shared with a provider depends on the Apleriq feature you choose to use and what is necessary to provide that feature.

5. Data storage and retention

Apleriq retains personal information for as long as reasonably necessary to provide the service, maintain your account, comply with legal obligations, resolve disputes, prevent abuse, and protect the security of the service.

Information associated with features such as saved jobs, applications, notes, and analysis history may remain associated with your account until you delete the relevant information, delete your account where that functionality is available, or request deletion where applicable.

Some information may remain for a limited period in backups, security records, or records maintained by Apleriq's service providers in accordance with their applicable retention practices and legal obligations.

6. Your privacy rights

Depending on where you live and the applicable data-protection law, you may have rights concerning your personal information. These may include the right to request access to your personal data, correction of inaccurate data, deletion of your data, restriction of certain processing, objection to certain processing, and portability of certain data.

Where processing is based on consent, you may also have the right to withdraw that consent. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise an applicable privacy right, contact Apleriq at privacy@apleriq.com. Apleriq may need to verify your identity before completing certain requests.

You may also have the right to lodge a complaint with the data-protection authority responsible for your jurisdiction.

7. Legal bases for processing

Where the GDPR or similar data-protection laws apply, Apleriq processes personal information only where there is an appropriate legal basis.

This may include processing that is necessary to provide the service you request and perform Apleriq's agreement with you, such as maintaining your account and providing requested CV, job-application, and AI-powered features.

Apleriq may also process information where necessary for legitimate interests, such as protecting the service, preventing abuse, maintaining security, and troubleshooting technical problems, provided those interests are not overridden by your applicable data-protection rights.

In some circumstances, processing may instead be based on your consent or may be necessary to comply with a legal obligation.

8. International data transfers

Apleriq uses service providers that may process personal information in countries other than the country where you live. As a result, personal information may be transferred to or processed in jurisdictions with different data-protection laws.

Where required by applicable data-protection law, Apleriq relies on appropriate safeguards or other lawful transfer mechanisms for transfers of personal information outside the European Economic Area.

9. Security and protection of your data

Protecting the personal information entrusted to Apleriq is an important part of how the service is designed. Because CVs and job application data may contain sensitive personal and professional information, Apleriq aims to collect and retain only the information needed to provide its features and operate the service.

Apleriq uses technical and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, and misuse. These safeguards include authenticated access to account-specific features, authorization checks on protected data, validation of API requests, protected authentication credentials, and measures designed to prevent personal information and CV contents from being unnecessarily exposed in application logs.

Uploaded CVs are processed only as necessary to perform the feature requested by the user. Apleriq's current CV-processing features do not intentionally store the original uploaded CV file in the application database. Where AI processing is required, relevant extracted CV content is provided to the AI service described in this Privacy Policy.

Apleriq also reviews its handling of personal information as the service develops and may introduce additional safeguards as its features and infrastructure evolve.

While Apleriq takes reasonable measures designed to protect personal information, no online service, transmission method, or electronic storage system can guarantee absolute security.

10. Payments and card information

If Apleriq introduces paid subscriptions or other paid services, payment processing will be handled through a dedicated third-party payment provider.

Apleriq is designed so that raw payment-card information, such as your full card number and card security code (CVV/CVC), is not collected or stored by Apleriq's application servers or database. Payment details will instead be entered and processed through the payment provider's secure payment infrastructure.

Apleriq may receive and retain limited payment-related information needed to manage a purchase or subscription, such as a payment provider customer or subscription identifier, payment status, plan information, and limited card information made available by the payment provider, such as card brand and last four digits.

11. Children's privacy

Apleriq is designed as a career and job-application service and is not intended for children. Apleriq does not knowingly seek to collect personal information from children who are not legally permitted to use the service or provide their personal information under applicable law.

If you believe that a child has provided personal information to Apleriq in circumstances where this is not permitted, please contact Apleriq at privacy@apleriq.com.

12. Changes to this Privacy Policy

Apleriq may update this Privacy Policy as the service develops, its features change, or legal and regulatory requirements evolve. When the policy is updated, the "Last updated" date at the top of this page will be revised.

If a change materially affects how Apleriq handles personal information, Apleriq may provide additional notice where appropriate or required by applicable law.