Privacy Policy
Last updated: June 1, 2025 · Effective immediately
1. Who We Are
ApplyEdge operates the website at applyedge.work, providing AI-powered resume and cover letter optimization services. For privacy inquiries, contact: [email protected].
This policy applies to all users of applyedge.work. We are committed to complying with applicable privacy laws including Canada's PIPEDA (Personal Information Protection and Electronic Documents Act) and, where applicable, the EU/UK GDPR.
2. Information We Collect
| Type of Data | What It Is | Why We Collect It |
|---|---|---|
| Email address | Your email as entered at checkout | Delivery of results, account access, transactional communications |
| Billing name & postal code | Name and postal/ZIP code from checkout | Required by Stripe for payment processing and fraud prevention |
| Payment data | Card type and last 4 digits (reference only) | Stored by Stripe, not by us. We receive only a payment confirmation token. |
| Purchase records | Plan type, amount, timestamp, Stripe transaction ID | Order fulfillment, customer support, financial compliance |
| Access tokens | Secure random string stored in a cookie | Authenticate your access to the tool without passwords |
| Usage logs | Hashed (anonymized) email, plan type, timestamp of tool use | Aggregate analytics, detecting abuse, capacity planning |
What We Do NOT Collect or Store
- Your full resume text or job description content — these are processed in memory and discarded immediately after your results are generated
- Your full card number, CVV, or bank account details (handled exclusively by Stripe)
- Your physical address beyond postal code
- Location data beyond country (inferred from billing country selection)
- Browsing history, social media profiles, or data from other websites
3. How We Use Your Information
- Delivering your results — emailing your optimized resume and cover letter
- Account access — sending magic link login emails to returning subscribers
- Billing — managing subscriptions, processing payments through Stripe, sending receipts
- Customer support — responding to refund requests and support inquiries
- Legal compliance — maintaining transaction records as required by applicable financial regulations
- Service security — detecting fraudulent or abusive usage patterns
We do not use your information for advertising, do not sell your data to third parties, and do not use your resume content to train AI models.
4. Third-Party Services
Stripe (Payment Processing)
All payment processing is handled by Stripe, Inc. Stripe collects, stores, and processes your card details directly. We do not receive or store your full card number. Stripe is PCI-DSS Level 1 certified. Their Privacy Policy governs how they handle your payment data.
Anthropic (AI Processing)
Resume optimization is performed by Anthropic's Claude API. When you submit your resume and job description, that content is sent to Anthropic's API for processing. Anthropic's Privacy Policy governs their handling of API data. Anthropic states that API data is not used to train their models.
Email Delivery
Result emails are sent via our configured SMTP server. Your email address is used only to deliver your results and account-related communications.
5. Cookies and Tracking
We use a single functional cookie:
| Cookie | Purpose | Duration |
|---|---|---|
ae_access | Stores your access token to authenticate your tool access. Allows you to return to the tool without re-paying. | 7 days (single-use) or 90 days rolling (monthly) |
We do not use tracking cookies, advertising cookies, third-party analytics scripts (such as Google Analytics), or any cross-site tracking technologies. There are no ad networks, retargeting pixels, or social media trackers on this site.
6. Data Retention
- Email & purchase records — retained for a minimum of 7 years to comply with financial record-keeping requirements
- Access tokens — deleted automatically when expired or when a subscription is cancelled
- Usage logs — retained in anonymized (hashed email) form for up to 2 years for aggregate analytics
- Resume content — not stored; deleted from memory immediately after results are returned
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your personal data (subject to legal retention requirements)
- Portability — receive your data in a machine-readable format
- Withdraw consent — unsubscribe from marketing communications at any time
- Complaint — lodge a complaint with your local data protection authority (e.g., Canada's OPC, or your EU/UK supervisory authority)
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Data Security
We implement technical safeguards including:
- TLS/SSL encryption for all data in transit
- Secure HTTP-only cookies for access tokens
- Hashed (SHA-256) email addresses in usage logs
- Server-side input validation and rate limiting
- No storage of sensitive resume content
While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
ApplyEdge is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to active subscribers and/or by notice on the website. The "Last updated" date at the top reflects when this policy was last revised.
11. Contact Us
For privacy questions, data requests, or concerns:
Email: [email protected]
Website: applyedge.work