• We collect what we need to find jobs and tailor resumes for you — nothing more.
• Your resume content, applications, and saved jobs are yours. We don't sell them. We don't train public models on them.
• AI processing happens on Anthropic and OpenAI infrastructure under no-training agreements.
• You can export everything as JSON or delete your account permanently from Settings → Privacy at any time.
• We're a UAE company. We honor GDPR, UK GDPR, and CCPA rights regardless of where you live.

You give us: name, email, work history, skills, education, locations, salary expectations, the resumes and cover letters you build, and any documents you upload.

You connect: with your permission, profile data from LinkedIn (read-only), Google Drive (resume files), and email forwarding addresses you set up for application replies.

We observe: pages you visit inside Apply Edge, features you use, plan and billing events, IP, browser, and device fingerprint (for fraud and login security only).

We don't: read your email inbox, harvest your contacts, install browser extensions you didn't approve, or pull location beyond city-level from IP.

• Passwords to job sites. Apply Assist uses our own integrations and OAuth — never your credentials.
• Government IDs, biometrics, or financial information beyond what Stripe needs for billing.
• Personal info about your references unless you paste it into a resume yourself.

1. Run the product. Match jobs, tailor resumes, send applications, surface stats.
2. Improve quality. Aggregated, anonymized usage signals (e.g. "tailoring lifts response rate by 3.4× in this market") inform features. Your resume text is never in this dataset.
3. Communicate. Account emails, weekly digests (you can turn off), and the occasional product announcement.
4. Bill you. Process payments via Stripe.
5. Stay safe. Detect fraud, abuse, and account takeovers.

We do not use your resume content, application history, or job preferences to train AI models — ours or anyone else's. Anthropic and OpenAI process inference requests under zero-retention agreements: your prompts and outputs are not retained beyond the API call and not used for their model training.

Only the processors we need to run the service:

• Anthropic, OpenAI — AI inference (no training, no retention)
• AWS (eu-central-1, us-east-1) — hosting and storage
• Stripe — payments
• Postmark — transactional email
• Sentry, PostHog — error monitoring and product analytics (self-hosted, EU region)

We don't sell, rent, or share your data with advertisers, data brokers, recruiters, or third-party marketers.

If a recruiter or company contacts you through an application you sent, we share only the materials you submitted (resume, cover letter, contact details on the application). We do not share your other applications, browsing history, or saved jobs.

• Active account: as long as you keep using Apply Edge.
• After cancel/downgrade: resumes and applications stay available on Free indefinitely; oldest items archive (read-only) past Free's caps.
• After account deletion: personal data wiped within 30 days. Backups roll over within 90 days. Anonymized aggregate analytics may persist.
• Billing records: retained 7 years for tax compliance.

Wherever you live, you can:

• Access — export everything as JSON from Settings → Privacy
• Correct — edit anything in-app, or email us
• Delete — one click in Settings → Privacy. Permanent. We won't ask why.
• Portability — JSON export includes resumes, cover letters, applications, and notes
• Object — opt out of analytics and product emails from Settings → Notifications
• Withdraw consent — for any optional integration, anytime

For GDPR/UK GDPR or CCPA-specific requests, write to privacy@apply-edge.com. We respond within 30 days.

Encryption in transit (TLS 1.3) and at rest (AES-256). SOC 2 Type II audit underway, completion expected Q3 2026. Production access is MFA-gated, role-scoped, and logged. We run quarterly penetration tests and a continuous bug bounty.

Full details: apply-edge.com/security

Apply Edge is operated from the UAE with primary infrastructure in the EU (Frankfurt) and a US replica (Virginia) for latency. EU/UK personal data crosses borders only under Standard Contractual Clauses with all subprocessors. Data residency on a specific region is available on Ultimate.

Apply Edge is not intended for users under 16. We don't knowingly collect data from children. If you believe a child has signed up, write to us and we'll delete the account.

If we change anything material, we'll email every active user at least 30 days before it takes effect. Cosmetic and clarifying edits are listed in the changelog at the top.

Privacy questions: privacy@apply-edge.com

Data Protection Officer: dpo@apply-edge.com

Apply Edge (entity formation in progress), Dubai, UAE (registered address pending)