Updated On: February 13, 2026
Welcome to Applying Pal. This Privacy Policy explains how we collect, use, and protect your information when you use our Chrome extension. By using Applying Pal, you agree to this policy.
Applying Pal processes data solely to provide functionality requested by the user. Data is never sold, used for advertising, or shared with employers without explicit user action.
All data processing serves one purpose: to help you fill job application forms faster and more accurately. We only access job application pages when you actively use our extension, and we never track your browsing activity outside of these specific interactions.
• Email, name, password (bcrypt hashed)
• Google ID (if using Google OAuth)
• Contact info: Name, email, phone, location, LinkedIn, GitHub, portfolio
• Resume: Text, filename, parsed data (experience, education, projects, skills, certifications, languages)
• Preferences: Industry, role, experience, company size
• Q&A pairs: Saved responses (user-created and AI-generated)
• AI notes: Custom instructions (max 500 chars, sanitized)
• Resume file (stored in IndexedDB, up to 10MB)
• Job descriptions (stored in Chrome Storage, up to 50 most recent)
• Form history (stored in IndexedDB, up to 1,000 most recent)
• Visited job URLs and authentication tokens
Clearable via extension or browser settings.
We collect usage information to improve our services and for billing purposes:
• AI credits, feature usage, API metadata
• Subscription and billing info
• App monitoring via New Relic (no PII)
Stripe handles all payments (PCI-DSS compliant). We store only: Stripe customer ID, subscription ID, and plan status. We never see your credit card numbers.
Your OpenAI/Gemini keys are encrypted (AES-256-GCM) and stored securely. Deletable anytime.
We use your data to:
• Provide services (form filling assistance, AI answer generation, smart application completion)
• Authenticate and secure your account
• Process payments and communicate updates
• Improve services and ensure security
• Comply with legal obligations
We do NOT sell data, share profiles with employers without your action, use data for ads, or track you outside supported job platforms.
• Backend: MongoDB Atlas (encrypted at rest), 30-day backups
• Local: Browser (Chrome Storage/IndexedDB)
• Passwords: bcrypt (12 salt rounds)
• API keys: AES-256-GCM encrypted
• Transmission: HTTPS/TLS
• Access: Role-based controls, authentication required
• AI notes: Sanitized for prompt injection protection
No internet security is 100% guaranteed.
• OpenAI: Resume parsing, answer generation (doesn't train on API data) - openai.com/policies/privacy-policy
• Google Gemini: Alternative AI provider - policies.google.com/privacy
• Stripe: Payment processing (PCI-DSS) - stripe.com/privacy
• Google OAuth: Optional login - policies.google.com/privacy
• MongoDB Atlas: Database with encryption - mongodb.com/legal/privacy-policy
• New Relic: Performance monitoring (no PII) - newrelic.com/termsandconditions/privacy
We request only the permissions necessary for core functionality:
• storage: Saves your resume, job descriptions, and form history locally in your browser (not on our servers)
• activeTab & scripting: Detects and helps fill application forms only when you click to use the extension. We never access pages automatically.
• sidePanel: Displays the extension UI in Chrome's side panel
• Host permissions: Access to job platforms (linkedin.com, greenhouse.io, lever.co, ashbyhq.com, workable.com, indeed.com) ONLY when you visit these sites. We detect form fields, extract job descriptions for AI answers, and help you fill forms faster. We do NOT access other websites, track general browsing, or share your data with employers without your explicit action (clicking Apply/Submit).
• Account/profile: Until deletion
• Local browser data: Until manually cleared
• Usage logs: 90 days
• Backups: 30 days
• Deleted accounts: Permanently removed upon deletion. We do not store any data after deletion.
You can request deletion of your account or data at any time by contacting support@applyingpal.com.
• Access, rectify, or erase your data
• Download your data (portability)
• Withdraw consent or use custom API keys
Contact support@applyingpal.com or use extension settings.
We may update this policy. Material changes: email notification and extension alert. Continued use = acceptance. Review periodically.
Questions or requests: support@applyingpal.com (30-day response)
Using Applying Pal = you've read and understood this policy.
If you have any questions about this Privacy Policy, please contact us at support@applyingpal.com
Return to Home