Privacy policy

What we collect

• Account details. Your email address. If you sign in with Google, we also receive your name and profile picture from Google.
• Your tracker. The applications you add: company, role, status, dates, salary range, job description, links and notes.
• Your résumé profile. What you enter or upload about your background: contact details, work history, education, projects, skills, work authorisation and the career context you write for AI generation.
• Files. Résumés, attachments, a profile picture, and documents we generate for you (tailored résumés and cover letters).
• Preferences. Settings such as how your applications table is laid out.
• Job pages, through the extension.When you ask the extension to read a job page, autofill a form or save an application, it reads that page's content and form fields, or the screenshot or text you give it. It doesn't read pages you haven't asked it to act on, and it doesn't track your browsing.

How we use it

• To run Tap2Apply: show your tracker, store your profile and files, keep you signed in.
• For AI features (parsing job posts and résumés, tailoring résumés, writing cover letters, suggesting form answers): we send the relevant content to Google's Gemini API and show you the result. We only send it when you use one of these features.
• To answer you when you contact us.

We don't use your data for advertising, sell it, or share it with recruiters or employers. Applications are only sent when you submit them yourself.

Who processes it for us

• Supabase: sign-in, database and file storage.
• Vercel: hosts the web app.
• Google: Google sign-in, and the Gemini API for AI features.

Each one processes data only to provide its service to us, under its own terms.

Google user data

With Google sign-in, we only ask for your basic profile (name, email and picture), and we use it only to create and sign in to your account. Tap2Apply's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Browser extension

The extension stores your sign-in session locally in your browser. Data it reads from job pages is used only for the feature you asked for, and isn't sold, used for advertising, or used to judge creditworthiness. This is in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Security

Data is encrypted in transit. Database rows and private files are locked to your account, so other users can't read them. One exception: your profile picture is stored at a public link so it loads quickly. Don't upload anything there you wouldn't show the world.

Keeping and deleting your data

We keep your data while your account exists. You can edit or delete applications, profile details and files in the app at any time. To delete your whole account, email mc.chellechan@gmail.comfrom the address you signed up with. We'll delete your account and its data within 30 days. You can also ask us for a copy of your data.

Children

Tap2Apply isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date at the top. If a change is significant, we'll tell you in the app.

Contact

Questions or requests: mc.chellechan@gmail.com