Privacy Policy

• Account details: your email address and sign-in records (the time and the device's IP address), and one-time sign-in codes, which we store only in scrambled form. If you choose “Continue with Google” or “Continue with LinkedIn”, that service tells us your name, email address and profile photo; we never receive your password, and LinkedIn sign-in does not give us your work history or connections.
• Career information you give us: your resume file and its text, the facts you confirm, edit or add, your job preferences (roles, industries, locations, work style, level, salary expectation, work authorisation, sponsorship need and notice period), contact details such as phone, city and LinkedIn address, and links you add to show your work.
• What you do in the service: the roles you view, save, skip or apply for, the documents and interview preparation we generate for you, your application statuses, ratings you give us, and credit and referral activity.
• Your LinkedIn connections list, if you choose to upload it: the file you download from LinkedIn yourself. We keep each connection's name, profile link, company, job title and the date you connected, never their email. Only you can see it. We use it for one thing: showing you who you know at the employers you look at. We never contact your connections, and you can delete the whole list from your profile at any time.
• Messages we draft for you to send yourself on LinkedIn, and the names you log as having contacted, so we can remind you to follow up.
• Information you give us about an interviewer to prepare for an interview (such as their name and role). Please only use what they have made public, such as a professional profile.
• AI assistants you connect: if you add Your Apply Desk in Claude or ChatGPT and sign in, we record which assistant, when you connected it and when it last asked for something. The assistant can then read your matches, your applications and the roles ready for you, and check your fit for a job link you give it; it can't apply, change your resume or see your payments. What you ask the assistant is handled by that assistant's provider under its own privacy terms. You can remove the connection from your profile at any time.
• Payment information is collected by our payment provider, Stripe; we never see or store card numbers.
• Technical data: basic logs and error reports needed to keep the service running and secure, and a count of the pages visited: the page, the site you came from, campaign tags in the link, your approximate location (country, region and city from your network address), the type of device and browser, and how long the page took to load. Without a cookie we tell visits apart for a single day only, using a scrambled code made from your network address and browser that changes every day. We never store your network address itself.
• Our own analytics cookie, only if you allow it: we ask everyone first. Only if you choose Allow in the cookie banner do we set a random visitor ID (cookie ad_vid) and keep the history of pages you visit on our site and the main buttons you click (such as Get started, Check my fit, Sign in or Buy), plus which sections you scroll to, so we can see how people find and use Your Apply Desk. Once you sign in, that history is linked to your account. To see which organisation a visit comes from, we look up the owner of your network (for example a company, university or internet provider) in public internet registries and reverse DNS, and optionally with IPinfo; your address is used for that lookup only and never stored. This tells us about organisations, never about you as a person, and we don't use services that try to identify individual visitors. The same cookie powers the job search check on our home page (with a second cookie for which version you saw). You can change your choice any time with Cookie settings at the bottom of every page; choosing No deletes the visitor ID. Browsers set to “Do Not Track” or Global Privacy Control are never given the cookie. Page counts are deleted after 180 days, and visitor histories not linked to an account after a year without a visit. We don't use advertising or cross-site tracking cookies anywhere.
• “Talk to us” and job alert forms: the name, email and message you send, so we can reply to you by email. If you allowed analytics, we note on your visitor history that you wrote to us or asked for alerts.
• Hiring stories you post in our community: the story or reply, its topic, the company you name (if any), and the first name you choose to show (anonymous by default). Before a person reviews it, emails, phone numbers, links and handles are removed automatically. Published posts are public on our website and may be shared, with a link, in our Telegram group and Discord channel. We keep which account wrote each post so we can handle reports, but never show it. You can ask us to take a post down at any time.
• Help chats (Stella in your desk, Ruby on our website): the questions you type and the answers given, so a person can follow up and we can improve our help guide. The answers come from our own written help guide, not from AI, so your questions are not sent to any AI provider. If you ask for a person, we also keep the email (and name, if you give it) we reply to. Ruby keeps a random conversation key in your browser's local storage (yad_chat_ruby), not a cookie; we store only a scrambled version of it and a scrambled, daily-changing code made from your network address to stop abuse, never the address itself. Website chats are deleted after 180 days. Chats in your desk are deleted with your account.

Please don't give us sensitive information a resume doesn't need, such as health details, government ID numbers, bank details, religion, caste, ethnicity or other protected characteristics. If your resume contains it, remove it at the fact-checking step and it won't be used.

• To provide the service you asked for (performing our contract with you): reading your resume, finding and scoring roles, writing documents and interview preparation for roles you choose, tracking your applications, and sending sign-in codes and service emails.
• To keep it safe and working (our legitimate interests, and legal obligations): preventing fraud and abuse, enforcing our terms and fixing problems.
• To improve it (our legitimate interests): understanding which features help, using aggregated or de-identified information wherever possible.
• With your consent, where the law requires it: for example optional emails with tips or offers, and, in India, processing your personal data for the purposes described when you sign up. You can withdraw consent at any time, as easily as you gave it, without affecting what happened before.
• To meet legal obligations.

We do not sell or rent your personal information, we do not share it with employers or recruiters, and we do not use it for advertising. We don't contact employers on your behalf. Nothing is sent to an employer unless you send it yourself.

We use AI models provided by Anthropic to read your resume, score roles, suggest improvements and draft documents. Only the information needed for the task is sent, under contract terms that do not allow the provider to train its models on it.

Fit scores and drafts are produced automatically from the job description and the facts you confirmed. They are suggestions to help you decide; they are never used to make decisions about you that have legal or similarly significant effects, and you review everything before using it. You can ask us which of your information and which main factors produced a score, and ask a person to look at it again, by writing to support@amstech.ai.

The Your Apply Desk extension works only on job application pages. When you open one, it reads the form's questions and fills them with your own details, your saved answers and the resume or cover letter you made for that role. If you use its AI answers, the questions it could not fill (their wording and options), the role's address and the visible text of that application page (up to 6,000 characters, so the answers fit the role) are sent to us so we can draft answers from your confirmed facts. It does not read or keep your browsing history, other tabs, passwords or what you type elsewhere, and it submits an application only when you press Submit in its panel.

The extension stores a connection key and your Penny settings in your browser. When you submit an application, it also remembers the answers you chose to standing questions (such as veteran, disability, race, gender, visa or work-authorization status) so it can fill them next time; these stay only in your browser, are never sent to us, and you can see and forget them from the Penny icon in Chrome's toolbar. You can disconnect it on your Profile page or by removing it from Chrome. Errors it hits are reported to us with the employer site's address and the error message, never the contents of a form.

Limited Use: the use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to fill and answer the applications you open, never for advertising, never sold, and never read by people except with your permission, for security, or as the law requires.

If you use Your Apply Desk inside ChatGPT, Claude or another AI assistant, in Microsoft Word or Google Docs, or through the job widget on another website, we receive only your search: a job title or field, and optionally a place, a company and filters. We don't receive your conversation, your document, your name or your resume, and we don't link searches to anyone. The add-ins never read or change your document.

Our Telegram, Discord and Slack bots receive the messages and commands sent to them, along with the chat, channel or workspace identifier needed to reply. We keep only the searches a chat asks us to follow (the title, the place and where to post), until someone in that chat stops them, plus the access token Slack gives us when a workspace installs the app. We don't keep the messages themselves.

We count searches, clicks and shares on our links and, if you then create an account, which of these it came from (and the partner's code for the widget). Organisations that register for a job page give us their name, a contact email and optionally a website, which we use for their monthly report; each report shows totals only, never who searched or signed up. What those services do with your conversation is covered by their own privacy policies.

If you ask us to email you new roles from a role page, we keep your email address, the role and place you chose, and where you came from (for example ChatGPT, or a partner's website). Nothing is sent until you confirm by clicking the link we email you. Each alert email has a one-click stop link; after you stop, we keep only the record that you opted out. We don't share your address with employers or anyone else.

Purchases are processed by Stripe. Stripe collects your card or other payment details under its own privacy policy; we receive only the result (what you bought, the amount, the currency and a payment reference) and keep payment records for as long as tax law requires, even after an account is deleted.

Only service providers who help us run Your Apply Desk, under contracts that limit their use of your information to providing their service to us:

• Supabase (database, file storage and sign-in), hosted in the United States;
• Vercel (website hosting);
• Anthropic (AI processing, as above);
• Resend (sending email);
• Cloudflare (a quick check, when you ask for a sign-in code, that you're a person and not a bot; it reads technical signals from your browser and network address);
• Stripe (payments). Where it acts as the seller of record, it processes your payment details under its own privacy policy.

Employers you Easy Apply to. When you tap Easy Apply on a role listed through Your Hiring Desk (run by AMS Technology Solutions LLC), we send that employer your name, email, phone, location, work authorisation where the role asks for it, a PDF of the resume shown on screen and any answers you add. We send it only for that role and only when you tap the button. The employer then holds that copy under its own privacy policy, and can tell us when your application moves to interview, offer or a decision, so your tracker stays up to date. Its internal notes and reasons are never shared with us.

We may also disclose information if required by law or to protect the rights, safety and security of our users, the public or AMS Technology Solutions LLC, and to a successor if the business is reorganised or sold, in which case this policy continues to apply.

Your information is stored and processed in the United States. It is encrypted in transit and at rest, access is limited to the people who need it to run the service, and changes our team makes to accounts are logged. Your resume files are kept in private storage and are never public.

If you use the service from outside the United States, your information is transferred to the US. We protect those transfers as the law of your country requires: for the UK, using the UK Extension to the EU-US Data Privacy Framework where a provider is certified, or the UK International Data Transfer Addendum; for Quebec, after assessing the transfer as Law 25 requires; for Australia, by holding our providers to standards consistent with the Australian Privacy Principles; and for India, in line with the Digital Personal Data Protection Act and any government restrictions on transfers.

No system is perfectly secure. If a breach is likely to put you at risk, we will tell you and the relevant authorities as the law requires, including the UK Information Commissioner within 72 hours and India's Data Protection Board.

• While your account is open, we keep your information so the service works.
• When you ask us to delete your account, we delete your resume, facts, documents and preferences within 30 days, and remove them from backups within a further 60 days.
• If an account is unused for 24 months, we may delete it; we'll email you at least 48 hours before.
• We keep limited records longer only where the law requires (for example, payment and tax records, and security logs for at least one year) or to resolve disputes and prevent abuse.

Wherever you live, you can ask us to show you, correct, export or delete your personal information, withdraw consent, and close your account at any time. You can download your data and delete your account yourself on your Profile page (Your data), or write to support@amstech.ai from your sign-in email. We'll confirm it's you, reply within 30 days at most (sooner where the law requires), and won't charge you or treat you differently for using your rights.

The UK GDPR and the Data Protection Act 2018 apply. Besides the rights above you can ask us to restrict or stop processing based on our legitimate interests, and to move your data to another service. You can complain to the Information Commissioner's Office (ico.org.uk), though we'd like the chance to fix things first. Our UK representative's details will be listed here before we offer the service in the UK.

PIPEDA, and in Quebec the Act respecting the protection of personal information in the private sector (Law 25), apply. You can access and correct your information and, in Quebec, ask for it in a commonly used format, ask how automated scores were made, and ask us to stop disseminating it. Our person in charge of the protection of personal information is the Privacy and Grievance Officer, at support@amstech.ai. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

The Privacy Act 1988 and the Australian Privacy Principles apply. You can access and correct your information, and you may deal with us anonymously for general questions, though an account needs an email. If you're not satisfied with our response to a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

The Digital Personal Data Protection Act, 2023 and its Rules apply. You can ask for a summary of the personal data we process and who we share it with, ask us to correct, complete, update or erase it, withdraw consent, and nominate another person to exercise your rights if you die or are unable to. Grievances: Privacy and Grievance Officer, support@amstech.ai; we acknowledge within 48 hours and resolve within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.

Depending on your state, laws such as the California Consumer Privacy Act and the New Jersey Data Privacy Act give you rights to know, access, correct, delete and port your information and to opt out of its sale, targeted advertising and certain profiling. We don't sell personal information or use it for targeted advertising or profiling with legal or similarly significant effects. You can use an authorised agent, and you can appeal a decision on your request by replying to it.

We send sign-in codes and essential service messages. We only send tips, news or offers if you've agreed, and every such email says who it's from, includes our postal address and has a one-click way to stop them.

Your Apply Desk is for people aged 18 and over. We don't knowingly collect information from anyone younger; if we learn we have, we delete it.

If we change this policy in a way that matters, we'll tell you by email or in the service before the change takes effect and, where the law requires, ask for your agreement again.

AMS Technology Solutions LLC, 100 Overlook Center, 2nd Floor, Princeton, NJ 08540. Privacy questions, requests and grievances: Privacy and Grievance Officer, support@amstech.ai. General support: support@amstech.ai.