1. Information We Collect

• User-Provided Information: When you use Aplicate, you manually input information related to your job applications, such as company names, application statuses, and notes.
• Email Content: To provide our "Automated Tracking" feature, we access your email data via the Google Gmail API. We specifically access the sender, subject line, and email body.
• Account Information: We collect the minimal information necessary for authentication (typically your name and email address provided via Google OAuth or submitted on the sign up page).
• Website Content (Chrome Extension): When you use the Aplicate browser extension, we read and extract text data directly from the specific job listing webpages you visit (such as Seek, Trade Me, and Glassdoor). This includes information like job titles, company names, locations, and salary data. The extension only reads data on supported job boards and does not track or record your general web browsing history.

2. How We Use Your Data

• In-Memory Processing: When you enable automatic tracking, the sender, subject, and body of your emails are sent to our private AI classifier (hosted on Hugging Face).
• Classification: This data is processed in-memory solely to determine the status of your application. This data is not stored, saved, or logged. Once the classification is complete, the data is immediately discarded.
• No Model Training: Your data is never used to train, improve, or update our AI models. Our models are static and do not "learn" from your personal information.
• Service Improvements: We use your manually entered application data only to provide the tracking, organizational, and analytical features of the Aplicate dashboard.
• Extension Data Syncing: The job details extracted by the browser extension are temporarily held in your browser's local storage before being securely synced to your personal Aplicate database (hosted on Supabase). We use this data solely to populate your personal job tracking dashboard.

3. Data Sharing and Third Parties

• No Data Sharing: We do not sell, rent, or trade your personal information to third parties.
• Infrastructure Providers: We use industry-standard infrastructure to power Aplicate. Your data is stored in your personal database hosted on Supabase and processed by our secure code hosted on Hugging Face. These providers are strictly used for hosting and processing and do not have rights to use your data for their own purposes.
• Compliance with Laws: We may disclose your information if required by law, regulation, or to protect the safety of our users.

4. Google API Services User Data Policy

Aplicate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

• Limited Use & Purpose: We only request and use the minimum data access granted (via the gmail.readonly scope) to perform the automated classification of your job application statuses.
• Ephemeral Processing (No Permanent Storage): Information retrieved from the Google Gmail API (including sender, subject line, and email body) is processed strictly ephemerally in-memory. **We do not permanently store, log, or save your email content anywhere on our databases or servers.** Once the automated classification is complete, the email data is immediately and permanently discarded.
• No Human Access: We implement a strict policy prohibiting human review of your Google user data. All email parsing and classification is performed entirely by automated, secure, machine-driven code.
• Data Security & Protection Mechanisms: We implement robust technical safeguards to protect your sensitive information. All data transferred between your browser, Google APIs, and our servers is secured using industry-standard encryption in transit (HTTPS/TLS protocols). Furthermore, all sensitive user credentials—including Google OAuth access tokens and refresh tokens—are securely encrypted at rest at the database layer using industry-standard symmetric cryptographic encryption algorithms (such as AES) via secure key management protocols.
• Strict Transfer Restrictions: We do not sell, rent, or trade your Google user data to third parties. We only transfer email data to our secure processing infrastructure (hosted on Hugging Face) solely to execute the in-memory classification feature requested by the user. We do not transfer this data for any other purpose, including advertising, marketing, analytics, or user profiling.

5. Chrome Web Store User Data Policy

The Aplicate Chrome extension's use and transfer of information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We only request the minimum browser permissions necessary to extract job data on supported sites. We do not use your extracted website data for personalized advertising, nor do we sell it to third-party data brokers.

6. Your Rights and Data Deletion

• Data Control: You have full control over your data.
• Deletion: We provide a "Delete Account" button within your account settings. Clicking this will permanently and immediately erase all your application data and account information from our databases.
• Revoking Access: You can revoke Aplicate's access to your Google account at any time via your Google Account Permissions settings.

7. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our service. We will notify you of any significant changes by updating the "Last Updated" date at the top of this page.

8. Contact Us

If you have any questions or concerns about this policy or your data, please contact us at:

• Aplicate
• Email: aplicate.jobs@gmail.com
• Jurisdiction: New Zealand