Privacy Policy

Introduction and Organizational Info

At AppliedOn, we are dedicated to serving you and managing your personal information responsibly when you use our website, browser tools, and related services. Our primary goals in processing your information include:

• Enhancing your experience on our platform by understanding your needs and preferences.
• Providing timely support and responding to your inquiries or service requests.
• Improving our products and services to meet the evolving demands of active job seekers.
• Conducting necessary business operations, such as account and subscription management.

It is our policy to process your personal information with the utmost respect for your privacy and security. We adhere to relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction. We do not have a designated Data Protection Officer (DPO), but we remain fully committed to addressing your privacy concerns at privacy@appliedon.com.

Information We Collect and How We Collect It

We collect personal information directly from you when you create an account, interact with our platform (website and/or mobile site), or communicate with us. We also collect technical data automatically when you navigate our site or activate our optional browser extension.

• Account Information: When you sign up, we collect details such as your full name, email address, and authentication credentials as provided by partner authentication services.
• Job Search Records: Information you voluntarily input into your tracking history, including companies, job titles, application dates, response statuses, interview details, offer details, salary ranges, benefits, and personal notes.
• Demographic and Career Details: Optional information you choose to provide to enrich your metrics, such as your city, state, occupation, and/or experience level.
• Technical and System Data: Information automatically generated by your browser or device, including IP addresses, system request logs, browser type, operating system, referring URLs, and interaction event data.

Third-Party Infrastructure Services and Data Processors

To provide, host, and maintain our application, we engage trusted third-party service providers who process data on our behalf:

• Supabase: We use Supabase to securely manage your authentication, maintain your active session tokens, and store your application database records.
• Vercel: Our application is hosted on Vercel. Vercel automatically processes server logs, IP addresses, edge request logs, and technical performance metrics necessary for system stability and service delivery.
• Sentry: We use Sentry to detect and diagnose errors and performance problems. When an error occurs in your browser or on our servers, Sentry receives technical details such as stack traces, the page address with sensitive values removed, browser and device information, and your IP address. Sentry also measures the performance of a small sample of page loads. It runs from the first page load without setting cookies, does not receive your name or email address, does not record session replays, and keeps this data for up to 30 days.
• PostHog: We utilize PostHog for web analytics, monitoring site performance, and tracking your activity events and behavior to optimize platform usage and user interface performance. With your analytics consent, PostHog also records anonymized session replays of how you interact with the app; all on-screen text and form inputs are masked before recording, and you can withdraw this consent at any time.
• Brevo: We use Brevo to deliver essential account notifications (such as email verifications and account updates) as well as optional marketing communications, weekly digests, and reminders. Marketing communications are strictly optional and require your explicit opt in. You have the right to opt out of marketing emails at any point using the unsubscribe link in any message or through your account settings.

Social Sign-In and OAuth Authentication

When you register or log into our services using third-party identity providers such as Sign in with Google or Sign in with LinkedIn, we collect and store:

• Your basic profile information, including your full name and email address.
• Authentication tokens provided by the identity platform to securely maintain your login session.

We process this information strictly to verify your identity, set up your account, and maintain your active login sessions.

Crowdsourced Benchmarks and Anonymized Data

To provide community benchmarks, response rate analytics, and market insights, we aggregate crowdsourced data on applications and industries based on user reported activity. This includes tracking what companies you apply to, the type and date of any replies logged, general perks, benefits, or company provided salary ranges, correlated by optional attributes such as your city, state, occupation, or experience level should you elect to provide them.

All crowdsourced data is anonymized using three strict controls:

1. Exclusion of Confidential Specifics: Other than the date and receipt of an offer, general perk or benefits (such as healthcare, equity availability, or 401k match), and any public or general compensation range you chose to list, no confidential or free form details (such as exact offer amounts, individualized equity package allocations, specific negotiation notes, or personal contact details, or application notes) are ever utilized in benchmarks or displayed in crowdsourced reporting.
2. Aggregated Display Thresholds: Data is displayed only in aggregate and only at such time as a sample of multiple users has been collected. This normalizes and obscures the results so details from any single user cannot be singled out.
3. Complete Identity Separation: No shared data, benchmark, or insight is linked back to any individual record or identity. No mechanism or public profile is created showcasing any aggregate or individual data that other users or non users could access.

Furthermore, no user specific detail is sold or granted to any third party except in the explicit case of operating the service (such as securely hosting our database).

Data Ownership and License Grant

You retain full ownership of your personal data, the right to edit or delete it at any time, and the right to opt out of crowdsourced participation.

By using the platform, you grant us a license to utilize de-identified and aggregated data for platform analytics and public benchmarks displayed to other users, in media releases, and for other business purposes, provided that said data remains strictly anonymized and generalized and you have not elected to opt out of crowdsourced participation via your account preferences.

Optional Browser Extension

We offer a browser extension as an optional feature for tracking jobs. You may install or remove this tool at any time.

• Selective Activation Scope: The tool is designed to capture details only when you explicitly activate it by clicking on it. It does not continuously monitor your browsing activity. When utilized, this tool enables us to track the specific web pages you visit when you explicitly activate the tool, how often you activate it, and whether you complete saving a record.
• Data Extracted: When activated, we attempt to read the pages accessed in order to collect the job description, company name, and job title to use on your behalf.
• This data and activity is captured for the purpose of saving jobs you apply to and monitoring our system performance.

Cookies and Browser Storage

Our site uses cookies, pixel tags, and local storage objects to maintain your login sessions, remember your site preferences, and collect aggregated performance analytics through PostHog.

• Necessary Cookies: Essential for basic platform functions, such as authenticating your session and keeping your account secure.
• Analytics Cookies: Help us understand how visitors interact with our pages, features, and performance bottlenecks.

Cookies and Consent Management: Upon your first recognized visit to our site, you will be presented with a cookie consent banner where you can accept all cookies, reject non-essential cookies, or customize your preferences. Necessary cookies (such as authentication tokens) are required to operate the service. You may change, revoke, or grant cookie permissions at any time by clicking the "Cookies" link in the footer of our website.

Privacy Preferences and Global Privacy Control (GPC)

• Account Controls: A right to opt out of optional communications and crowdsourced data participation exists, and is directly accessible and controllable by you in your account preferences settings.
• Global Privacy Control (GPC): Please note that our platform does not currently support automated browser based Global Privacy Control (GPC) or Do Not Track signals. All privacy preferences must be configured directly within your user account controls.

Legal Bases for Processing (GDPR and European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the context:

• Performance of a Contract: Processing required to fulfill our service commitments to you under our Terms of Service.
• Consent: Processing optional marketing communications or optional analytics where you have provided explicit opt in consent.
• Legitimate Interests: Processing required to operate, secure, and maintain our application infrastructure and protect against fraudulent access.
• Data Portability: You have the right to export and download your personal data at any time. Through your account settings, you may download a CSV summary of your tracking records or a complete JSON export of your full account data.

Regional State Privacy Disclosures (United States)

Depending on your state of residence (including California, Colorado, Virginia, and Connecticut), you may hold statutory rights regarding your personal data:

• The right to request access to the personal data we hold about you and may do so by contacting us or directly through your account settings page.
• The right to request correction of inaccurate personal records.
• The right to request deletion of your personal data and may do so by contacting us or directly through your account settings page.
• The right to non discrimination for exercising your privacy rights.

We do not sell your personal data or share your personal data with third parties for cross context behavioral advertising.

Data Security

We employ industry standard technical and organizational security measures to protect your information, including encrypted database connections, tokenized authentication sessions, and strict access controls. However, no digital transmission over the internet or database storage model can be guaranteed to be completely secure.

International Data Transfers

Our servers and primary databases are located in the United States. If you access our platform from outside the United States, your information will be transferred to, stored, and processed in the United States in accordance with this policy and applicable data protection regulations.

Data Retention and Account Lifecycle

• Server Logs and Analytics: Server logs, IP addresses, and web analytics may be kept for a period of up to 90 days or longer as legally required. Web analytics details may be retained for longer periods in aggregated levels.
• Account Retention: Your user account exists in perpetuity until such time as you elect to remove it or we determine your account is no longer active and decide to remove it on your behalf. In the event we elect to remove an account for inactivity, we will first notify you at your registered email address.

Age Requirements and Children's Privacy

This site is intended strictly for adults, ages 18 and older, as a professional job tracking service. We do not knowingly collect or solicit personal data from anyone under 18 years of age. If we learn that an account has been registered by an individual under 18, we will take immediate steps to delete that account and all associated data.

Corporate Transactions and Business Transfers

In the event this site is acquired, merged, or sold, data will be transferred in accordance with this policy. In the event of a change of policy resulting from a corporate transaction, you will receive adequate prior notice of any material change, such that you have the opportunity to review and remove your data before it goes into effect.

Notification of Changes

In the event of significant changes to our privacy policy that may affect your rights or the way we handle your personal information, we will provide notice through prominent means, such as email or website notifications. We will also indicate the effective date of the updated policy at the top of the document. We encourage you to review our privacy policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our services after any changes to the policy signifies your acceptance of the updated terms.

Contact Us

If you have any questions or concerns about our privacy policy or how we handle your data, please contact us at privacy@appliedon.com.