Privacy Policy

The data controller is the operator of ApplyIQ, based in Warsaw, Poland. For privacy-related enquiries, contact: privacy@applyiq.app

We collect the following categories of personal data:

• Account data: your name and email address, provided at registration
• Application data: job titles, companies, statuses, notes, salary ranges, and follow-up dates you enter
• CV data: the content of CV documents you upload for AI analysis
• Usage data: server logs including IP addresses and request timestamps, retained for up to 30 days for security purposes

• Contract (Art. 6(1)(b) GDPR): processing your account and application data to provide the Service
• Consent (Art. 6(1)(a) GDPR): sending email notifications (weekly digest, follow-up reminders, welcome email) — you can withdraw consent at any time in Settings
• Legitimate interest (Art. 6(1)(f) GDPR): maintaining security logs and preventing abuse

• Providing and personalising the Service
• Sending you emails you have opted into (follow-up reminders, weekly digest, transactional emails)
• AI analysis of your CV against job descriptions — your CV content is sent to Groq, Inc. (USA) under standard contractual clauses for processing; it is not stored by Groq
• Preventing fraud and ensuring security

We do not sell your personal data. We share data only with:

• Neon (database hosting): your data is stored on servers within the EU
• Groq, Inc. (AI processing): job descriptions and CV text are sent to Groq's API for AI analysis, subject to their data processing terms
• Email provider: your email address is used to deliver transactional and notification emails
• Legal authorities where required by applicable law

Your personal data is retained for as long as your account is active. When you delete your account, all your data (profile, applications, CV profiles) is permanently deleted within 30 days. Password reset tokens are deleted immediately after use or after 1 hour, whichever is sooner.

As a data subject, you have the following rights:

• Right of access (Art. 15): request a copy of your personal data
• Right to rectification (Art. 16): correct inaccurate data — available directly in Settings
• Right to erasure (Art. 17): delete your account and all associated data — available in Settings → Danger Zone
• Right to restriction (Art. 18): request restriction of processing in certain circumstances
• Right to data portability (Art. 20): request your data in a machine-readable format
• Right to object (Art. 21): object to processing based on legitimate interest
• Right to withdraw consent: unsubscribe from emails at any time in Settings → Email Notifications

To exercise any of these rights, contact us at privacy@applyiq.app. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.

We use a single HTTP-only session cookie (jwt) to maintain your authenticated session. This cookie is strictly necessary for the Service to function and does not require consent under GDPR. We do not use tracking, advertising, or analytics cookies.

We implement appropriate technical and organisational measures to protect your personal data, including encrypted transport (HTTPS), HTTP-only cookies, hashed passwords, and rate limiting. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Material changes will be communicated by email before they take effect. The current version is always available at this URL.

Data protection enquiries: privacy@applyiq.app
General support: support@applyiq.app