Privacy Policy

Welcome to ApplyLeft's Privacy Policy. This policy describes how edbn.me ("we", "us", "our"), the parent company operating ApplyLeft at applyleft.com, collects, uses, discloses, and safeguards your personal information.

We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy applies to all users of our Service, regardless of location, and complies with applicable data protection laws including GDPR, CCPA, and other relevant regulations.

By using ApplyLeft, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

Data Controller Information:

We collect several types of information to provide and improve our Service:

Account Information:

Resume and Profile Data:

Payment and Billing Information:

Usage Data:

Chat and AI Interaction Data:

Technical and Security Data:

We use collected information for the following purposes:

Service Delivery and Core Functionality:

Service Improvement and Analytics:

Communication:

Legal and Security:

We DO NOT:

For users in the European Economic Area (EEA), UK, and Switzerland, we process personal data based on the following legal grounds:

Contractual Necessity:

Legitimate Interests:

Consent:

Legal Obligation:

You have the right to withdraw consent or object to processing based on legitimate interests at any time.

We share your information only in the following limited circumstances:

Essential Service Providers:

All service providers are bound by data protection agreements and are prohibited from using your data for any other purpose.

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Service before your information is transferred and becomes subject to a different privacy policy.

Legal Requirements:

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas). We will notify you of such requests unless prohibited by law.

Protection of Rights:

We may disclose your information to:

With Your Consent:

We may share your information with third parties when you explicitly consent, such as integrations with job boards or applicant tracking systems (future features).

We DO NOT:

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

Active Accounts:

Deleted Accounts:

Payment and Billing Records:

Anonymized Data:

Security Logs:

You can request deletion of your data at any time by contacting us at privacy@applyleft.com.

We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards:

Organizational Safeguards:

Infrastructure Security:

Despite our best efforts, no security system is impenetrable. We cannot guarantee the absolute security of your data. In the event of a data breach, we will:

Depending on your location, you may have the following rights regarding your personal information:

Universal Rights (All Users):

Additional Rights (GDPR - EEA, UK):

Additional Rights (CCPA - California):

How to Exercise Your Rights:

1. Email us at privacy@applyleft.com with your request

2. Use the data export feature in your account settings

3. Contact our support team through the dashboard

We will respond to all requests within 30 days (or as required by applicable law). For security purposes, we may need to verify your identity before processing your request.

We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns.

Types of Cookies We Use:

Essential Cookies (Always Active):

Functional Cookies (Opt-out Available):

Analytics Cookies (Opt-out Available):

We DO NOT use:

Cookie Management:

You can control cookies through:

Note: Disabling essential cookies will prevent you from using certain features of the Service.

ApplyLeft is operated from the United States. If you access our Service from outside the US, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have different data protection laws than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place:

Safeguards for International Transfers:

For EEA, UK, and Swiss Users:

We comply with the EU-US Data Privacy Framework principles and implement appropriate technical and organizational measures to ensure your data receives adequate protection when transferred outside the EEA.

Countries Where Data May Be Processed:

By using ApplyLeft, you acknowledge and consent to the transfer of your information to countries outside your country of residence.

ApplyLeft is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at privacy@applyleft.com. We will take steps to delete such information from our systems.

Age Verification:

By creating an account, you represent that you are:

We reserve the right to request proof of age and to terminate accounts that do not meet these requirements.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Your California Rights:

1. Right to Know: Request disclosure of personal information collected, used, disclosed, and sold

2. Right to Delete: Request deletion of personal information

3. Right to Opt-Out: Opt out of sale of personal information (Note: We do not sell personal information)

4. Right to Correct: Request correction of inaccurate personal information

5. Right to Limit: Limit use and disclosure of sensitive personal information

6. Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights

Categories of Personal Information We Collect:

We DO NOT sell your personal information. We do not share it for cross-context behavioral advertising.

To exercise your California rights:

We will verify your identity and respond within 45 days.

Authorized Agents:

You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR).

Your GDPR Rights:

1. Right of Access: Obtain confirmation of data processing and access to your data

2. Right to Rectification: Correct inaccurate or incomplete personal data

3. Right to Erasure ("Right to be Forgotten"): Request deletion of your data

4. Right to Restriction of Processing: Limit how we use your data

5. Right to Data Portability: Receive your data in a structured, machine-readable format

6. Right to Object: Object to processing based on legitimate interests

7. Right to Withdraw Consent: Withdraw consent for consent-based processing

8. Right to Lodge a Complaint: File a complaint with your local supervisory authority

Data Protection Officer:

For GDPR-related inquiries, contact our Data Protection Officer:

Supervisory Authority:

You have the right to lodge a complaint with your local data protection authority. A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en

Legal Basis for Processing:

We process your data based on:

Our Service may contain links to third-party websites, services, or integrations that are not operated by us. This Privacy Policy does not apply to third-party services.

Third-Party Services We Use:

When you interact with third-party services:

We recommend reviewing the privacy policies of any third-party services before providing your information.

OAuth Permissions:

When you use OAuth (Google, GitHub), we only request:

We do not access or store your passwords for third-party services.

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked.

Because there is not yet a common understanding of how to interpret DNT signals, ApplyLeft does not currently respond to web browser DNT signals. Instead, we offer you choices about data collection through our cookie settings and account preferences.

You can control tracking through:

We will update this policy if industry standards for DNT are established.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You of Changes:

Material vs. Non-Material Changes:

Material Changes (require notice):

Non-Material Changes (no notice required):

Your Consent:

By continuing to use ApplyLeft after changes take effect, you accept the updated Privacy Policy. If you do not agree with the changes, you should stop using the Service and request account deletion.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Privacy Inquiries:

Data Protection Officer (GDPR):

Customer Support:

Legal Department:

When contacting us, please include:

We are committed to resolving your privacy concerns and will work with you to address any issues promptly and transparently.