Privacy policy
This policy covers appyl.ai and the Appyl app at app.appyl.ai. Questions or requests: appyldotai@gmail.com.
The short version: Appyl uses what you give it to match you to jobs, tailor your applications, and help you reach the people hiring. We don’t sell your data, we don’t run ads, and you can delete your account at any time.
What we collect
Things you give us
- Your account email, used to sign in with a one-time code.
- Your resume and anything you add to your profile: work history, education, skills, links, and the countries you want to work in.
- Your LinkedIn profile URL and the information on that public profile.
- If you connect GitHub, the repositories you choose to share. We don’t read repositories you don’t select.
- What you create in the app: applications and their stages, tailored resumes and cover letters, outreach messages, notes, and Studio chat messages.
Things we collect automatically
- In the app: usage events (for example, that you opened a job or kept a suggested resume line), device and browser type, and error reports.
- On appyl.ai: page views and button clicks, only if you accept analytics cookies.
We strip query strings from the page addresses we record, and we don’t record your screen or keystrokes.
Information about other people
To suggest who to contact about a job, Appyl looks up publicly available professional information about people at the hiring company, such as name, job title, and public profile URL. We use it only to show you contacts for applications you’re working on.
How we use it
- To build your profile and find the skills your experience supports.
- To match you to jobs and explain each match.
- To tailor resumes and cover letters and write outreach messages, using AI models.
- To track your applications.
- To keep Appyl secure, fix bugs, and understand which features help people.
- To contact you about your account.
We don’t use your resume or profile to train our own AI models.
Who processes your data
We use service providers to run Appyl. They process data on our behalf and only for that purpose:
- Hosting and storage: Railway (application servers and database), Cloudflare (website and file storage).
- Sign-in: WorkOS.
- AI: Google Gemini and OpenRouter (text generation), Langfuse (monitoring AI quality).
- Analytics and errors: PostHog (EU region), Sentry.
- Public web data: Apify and Jina, to fetch public job postings and public professional profiles.
- Integrations you choose: GitHub.
Some of these providers process data outside your country, including in the United States. Where the law requires it, we rely on standard contractual safeguards for those transfers.
We don’t sell or rent your personal data, and we don’t share it with advertisers.
Cookies
The app uses cookies and local storage to keep you signed in and to measure product usage.
On appyl.ai we ask first. If you accept, PostHog sets analytics cookies that may be shared with app.appyl.ai so a visit and a sign-up count as the same person. If you decline, appyl.ai sets no analytics cookies. You can change your choice any time with Cookie settings in the site footer.
How long we keep it
We keep your data while your account is open. When you delete your account, we delete your profile, documents, applications, and messages. Copies in backups and logs are deleted on their normal rotation schedule. We may keep the minimum needed to meet legal obligations.
Your choices and rights
- Delete your account from your account settings in the app. This removes your data as described above.
- Access, correct, or export your data by editing your profile or emailing us.
- Object or restrict our processing, or withdraw consent for analytics cookies, at any time.
If you live in the EU, UK, or a place with similar laws, you also have the right to complain to your local data protection authority. Email us first and we’ll try to fix it.
Security
Data is encrypted in transit. Access tokens for connected services such as GitHub are encrypted at rest. Only people who need access to run Appyl have it.
Children
Appyl is not for anyone under 16, and we don’t knowingly collect their data.
Changes
If we change this policy in a way that matters, we’ll update the date above and tell signed-in users in the app or by email before the change takes effect.