Draft -- to be reviewed before launch

Privacy notice

A plain-language notice for the invite-only beta of ApplyMog. It describes how the software behaves. It has not yet been reviewed by a lawyer, and it will change before the beta opens more widely.

Who runs this service

The beta is run by the person who operates the server it is hosted on (the operator), who also sends the invitations. The operator's name and a contact for privacy questions will be published here before the beta opens.

What is stored

Your account

• Your email address and the name you give.
• Your password, stored only as a salted hash. The password itself is not kept.
• Your signed-in sessions (when each started and was last used, and a coarse browser label such as "Chrome on Linux") and the browsers whose extension you paired.
• Account events, such as signing in, changing your password or pairing a browser, with no email address, password or other value in them.

Your workspace

• Your profile, your resume files and the answers you approved.
• The jobs you saved, your applications, their stages, your notes and plans.
• Documents ApplyMog prepared for you, such as tailored resumes and cover letters.
• What Autofill filled on an application form, so you can review it later. Passwords, one-time codes and similar secrets typed on a page are never stored.

Where it is kept

On the operator's server. Each person's data is kept in a separate workspace that only that person's account can reach. Backups of the server are encrypted.

A short security log is kept beside the backups so that restoring an older backup cannot undo a deletion, a disabled account or a password change. Each line holds a random account identifier, what happened and when: no name, email address or content. It is not encrypted, and it is kept for as long as the service runs.

If the operator has set up email, your email address is passed to their mail provider to deliver your invitation and password reset messages.

AI providers

Some features use an AI provider: scoring jobs against your profile, tailoring a resume, writing a cover letter and drafting an answer. They are available only where the operator has turned AI on; until then Settings says AI is not available, and nothing is sent to any AI provider. Your profile and job text are sent to a provider only after you allow that provider in ApplyMog's settings, which name each provider and link to its terms. Nothing is allowed until you choose, and you can withdraw your choice at any time. What a provider does with what it receives is governed by that provider's own terms.

The browser extension

The extension acts on the page where you use it. When you press Autofill, it sends the questions on that application form to your workspace so ApplyMog can plan answers from your profile, and it reports what it filled. It never submits an application.

Cookies and browser storage

• A session cookie keeps you signed in. It cannot be read by scripts on the page.
• A security cookie protects your forms from being sent by another site.
• A device cookie, kept for up to a year, remembers that this browser has signed in to your account before, so repeated wrong passwords sent from elsewhere cannot lock you out. It holds a random value and nothing about you, and it cannot be read by scripts on the page.
• Your appearance choice and similar conveniences are kept in your browser's own storage and never sent anywhere.

These pages and the application load no advertising or analytics scripts and set no tracking cookies.

Network addresses

The service uses your network address to limit repeated sign-in attempts and similar abuse. For that it keeps only a scrambled form of the address, in memory, and forgets it about an hour after the last attempt, or when the service restarts. The web server's access log also records each request's address, the page asked for, the time, the answer and the browser's headers (never cookies, passwords or sign-in links). That log keeps about the most recent 100 MB of requests and is not part of the backups.

Your choices

• Download your workspace and your account record (sessions, paired browsers, AI use and account events) from your account page.
• Sign out other browsers and revoke paired extensions from your account page.
• Change which AI provider may receive your information in Settings.
• Delete your account from your account page. Your workspace, profile, documents, email address and name are removed. A record of account events, AI spending and the deletion itself is kept under a random identifier, with no name, email address or content.
• Backups made before a deletion are deleted about 30 days after they were made. Two exceptions: while new backups are failing, the copies kept away from the server are not deleted, so that one usable copy remains; and a backup the operator's tools find damaged or unreadable is kept until the operator removes it by hand. A restored backup deletes your account again from the security log above.

Changes

This is a draft for a beta. When it changes, the new version will be published on this page.