What we keep, and why

Who we are

ApplyDojo is the controller for the account, CV, and application data you store here. Questions about this notice can be sent from the email address on your account.

What we store

We store your name, email, and a form of your password we cannot read back. We store the base CV file, the text taken from it, the job descriptions you paste or that a fetch returns, tailored drafts, cover letters, interview notes, application status, and your billing status. If you join from a referral link, we store which account invited you, so we can add the credits that invitation earns.

We also keep a short technical record of a visit: IP address, browser type, and the time, so we can keep the session secure and see when something breaks. We do not ask for your age, your location from the device, or access to a photo library. We do not store your full card number.

Do not upload a CV if you do not want that processing. The file is the career we work from.

Why we use it

We use the account and the CV to provide the product you asked for: a match score, a rewrite, a letter, interview questions, a PDF, and a board. That processing is necessary for the contract.

We use security logs to keep accounts from being misused, which is our legitimate interest. We keep payment records because tax and accounting law requires it. We email you about the account, a payment, or a change to these terms. We do not send marketing you did not ask for, and we do not use your CV to advertise to you or to anyone else.

Who else sees the CV

CV text and job text are sent to the configured AI provider, OpenAI by default, so the product can structure them, score a posting, and rewrite lines that already belong to you. We send the text that feature needs, not your password and not your card.

OpenAI processes that text in the United States. Our payment provider may also process billing data outside the UK. We use those providers only to run the feature you asked for, under their own terms and a duty to keep the data confidential.

We do not sell CV data. We do not share it with advertisers, and we do not run remarketing. A host and a database provider store the files so the product can run. If the company is sold, the buyer would receive this data only so the product can continue, and this notice would still apply until you are told otherwise.

We may disclose information if the law, a court, or a regulator requires it, or to stop a serious abuse of the service.

Cookies

We use a session cookie so you stay logged in, and a security cookie so a form post is really yours. They are essential. They do not contain your CV. If you block them, the account will not stay signed in.

We do not use advertising cookies, analytics cookies, or cookies that follow you onto other sites. You can delete cookies in the browser. That signs you out. It does not delete the CV on our servers.

Payments

Our payment provider processes card payments. We store customer and subscription identifiers, the plan, and whether a payment succeeded. After a payment, the card number stays with the payment provider, not in our database.

How we protect it

Pages are served over HTTPS. Passwords are stored in a form we cannot turn back into the original. Access to production data is limited to people who need it to run the service. No method is perfect. We cannot promise that a breach is impossible.

How long, and your rights

We keep the data while your account is open and delete it when you delete the account, except records we must keep for tax or fraud. A backup may keep a copy for a short time after that, until the backup itself expires. We do not keep CV text longer than the account in the systems we use day to day.

You can ask for a copy, a correction, a restriction, or deletion, and you can ask us to send the structured data you provided to another service, by emailing us from the address on your account. You can object to processing based on legitimate interests. You can also complain to the Information Commissioner’s Office at ico.org.uk. We aim to answer a request within one month.

ApplyDojo is not for children. Do not create an account if you are under 18.

Other sites, and changes

A job link leaves ApplyDojo. The employer’s site has its own privacy notice, and this one stops at that boundary.

If we change this notice, we will post the new version here and change the date above. If a change affects how we use the CV in a way you would not expect, we will tell you in the product or by email before it takes effect.