Privacy Policy

Overview

ApplyArc is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data.

Data We Collect

• Account Information: Email, name, and authentication data via Microsoft Entra
• Job Application Data: Job listings, companies, notes, and application status
• Resume/CV Data: CV content you upload, stored securely to power the AI tools (matching, cover letters, resume analysis). Delete anytime from Settings.
• Usage Data: How you interact with ApplyArc to improve our service
• Payment Data: Handled securely by Stripe (we don't store card details)

Your Rights (GDPR)

• Access: Request a copy of your data
• Delete: Request deletion of your account and data
• Export: Download your data in CSV format
• Correct: Update your personal information

Contact us at privacy@applyarc.com for any requests.

Data Retention

• Account & job data: Kept while your account is active, and deleted within 30 days of account deletion.
• Inactive & deleted accounts: Accounts that stay inactive for an extended period, or that are removed from our sign-in provider, may have their data deleted by our routine cleanup. Your account is identified by your Microsoft sign-in, not your email address alone, so registering again creates a new account rather than restoring the old one. Once data is deleted it is generally unrecoverable, so export anything you want to keep from Settings. We are not a backup service.
• Analytics: Aggregated usage data is kept for up to 2 years; Microsoft Clarity session replays for up to 13 months, after which Microsoft deletes them automatically.
• Billing & dispute records: Kept for up to 7 years for tax and legal compliance, and to defend payment disputes or chargebacks.

ApplyArc in ChatGPT (Apps SDK)

ApplyArc is also available as an app inside ChatGPT, built on OpenAI's Apps SDK / Model Context Protocol. This section covers that experience specifically. It is anonymous: there is no account, no login, and we do not link anything you do in ChatGPT to an ApplyArc profile.

• What it processes: Only the text you paste into the conversation · the job posting and your resume/CV text · plus a coarse, IP-derived location used solely for rate limiting and abuse prevention.
• What it returns: Generated text only: a match score, missing keywords, a job breakdown, a cover letter, or interview prep. No session, trace or request IDs, no timestamps, and no internal identifiers are included.
• What it never does: It does not create, edit, delete, send, or post anything on your behalf. The tools are read-only.
• Who processes it: Microsoft Azure OpenAI (your data is not used to train models) and our Azure Functions backend. Nothing else.
• Retention: Nothing is stored against an account. Inputs are processed for the single request and not persisted; only a transient IP record is kept briefly for rate limiting.
• Saving your work: An optional link can take you to applyarc.com to save or track your work. No purchases are made inside ChatGPT.