Security & Privacy
Your job search data is sensitive. We protect it with production-ready security, never sell it, and give you full control.
Our Security Commitment
ApplyArc will never sell your data. Your job applications, cover letters, notes, and personal information are used only to provide our service. When the AI Career Coach analyses your pipeline to tell you what to do next, that analysis stays private to you. We use industry-standard encryption and host on Microsoft Azure's enterprise infrastructure. Read our full security audit.
How We Protect Your Data
Encryption at Rest & Transit
Data is encrypted at rest and in transit. Your job applications, notes, and documents are protected by Azure-managed security controls.
Azure Enterprise Infrastructure
Hosted on Microsoft Azure, using Microsoft-managed cloud security controls for production job search data.
No Data Selling
We never sell your data to third parties. Your job search history, applications, and personal information stay yours.
Microsoft Entra ID Authentication
Industry-standard authentication via Microsoft. We never store your password. Authentication is handled by Microsoft's secure identity platform.
Minimal Data Collection
We collect the account and job-search data needed to run ApplyArc. Google Analytics, Microsoft Clarity, and the Azure Application Insights browser SDK stay off unless you accept optional analytics, including Clarity heatmaps and session replay. Our servers still keep the service records described in our privacy policy.
Data Portability
Download a complete JSON copy of your account data anytime from Settings. Pro also includes CSV export for job analytics.
Compliance & Certifications
ApplyArc is built on Microsoft Azure infrastructure that meets rigorous security standards.
GDPR Rights
Access, export, and deletion support
Azure Security Controls
Built on Microsoft cloud infrastructure
Microsoft Cloud Standards
Uses Azure security and access controls
Privacy Rights Support
Account export and deletion workflows
What Data We Collect
What We Collect
- Saved jobs (title, company, URL, description)
- Your notes and documents per job
- AI-generated content you create
- Account email and profile info
- Optional usage analytics after consent
What We Never Collect
- Browsing history (extension doesn't track)
- Your passwords (Microsoft handles auth)
- Browsing history outside ApplyArc
- Full payment card details
- Data from non-job-board sites
Security FAQ
Frequently Asked Questions
Yes. ApplyArc is built on Microsoft Azure with production-ready security. Data is encrypted at rest and in transit, we use Microsoft Entra ID for authentication (we never see your password), and we never sell your data.
No. We never sell your data to third parties. Your job applications, notes, cover letters, and personal information are used only to provide ApplyArc's services. We don't share your data with recruiters, employers, or advertisers.
Data is encrypted at rest when stored and in transit when transmitted. ApplyArc uses Azure-managed security controls rather than storing your data in plaintext.
Yes. Request account deletion from Settings. The privacy policy provides for account-data deletion within 30 days. Billing and dispute records may be retained for up to seven years for tax and legal obligations; analytics and service-provider records have their own retention periods. Read the privacy policy before deleting your account.
No. The ApplyArc Chrome extension is waitlist-only/private beta, and it will only act when you click it. It won't run in the background, won't track your browsing history, and won't collect data from the pages you visit.
Your account data is stored in Microsoft Azure data centers in North Europe, with a replica in UK South and continuous backups for disaster recovery. Azure publishes independent compliance documentation for its cloud infrastructure.
Your job-search content is private and is not provided to employers or recruiters. Service providers process the data needed to run ApplyArc, and you can share relevant information with support. Content needed for AI tasks goes to Azure OpenAI, where separate abuse monitoring may store flagged content for review by authorised Microsoft staff. The privacy policy explains provider access and limited legal or payment-dispute disclosures.
We support GDPR data rights including access, deletion, portability, and transparent privacy practices. Our privacy policy explains how we handle EU user data.
Security Questions?
Have a security concern or found a vulnerability? We take security seriously.
security@applyarc.com