Privacy Policy

Last updated: February 26, 2026

1. Overview

ApplyStack is designed to help you automate job applications. We value your privacy and only request the minimum data necessary to perform our services. We do not sell, rent, or trade your personal data to third parties.

2. Google OAuth & Data Access

ApplyStack uses Google OAuth 2.0 to connect to your Gmail account. Our access is strictly limited to the "https://www.googleapis.com/auth/gmail.send" scope. This means:

  • We can only send emails that you explicitly trigger via the Telegram bot.
  • We cannot read, modify, or delete your Gmail messages.
  • We do not access your contacts or inbox contents.
  • We never see or store your Google password.

Google user data obtained through OAuth is used solely to provide the core functionality of sending job application emails on your behalf.

3. Data We Collect

To provide our services, we collect and store the following data:

  • Telegram ID: To link your account to our bot.
  • Name: To personalize communications.
  • Resumes: PDF files uploaded by you for application use.
  • Application Metadata: Job title, company name, timestamps, and application status.
  • Google OAuth Tokens: Encrypted refresh tokens required to send emails on your behalf.

4. Data Sharing, Transfer & Disclosure

ApplyStack does not sell, rent, or commercially distribute your personal data. We do not transfer or disclose your personal data to third parties except as described below.

We may share or transfer limited data only in the following circumstances:

  • Service Providers: Secure infrastructure providers (e.g., hosting, database, and AI processing services) strictly for the purpose of operating ApplyStack.
  • Legal Requirements: If required by law, regulation, or valid legal process.

Google user data is never shared with third parties except as necessary to provide the intended functionality of the application or as required by law.

5. AI Processing

Job descriptions and resume data may be processed by AI systems solely to generate tailored cover letters and application content for your direct use.

We do not use Google Workspace data or Gmail content to train global AI or machine learning models. Data processed for AI generation is used only to fulfill your specific request.

6. Data Protection & Security

We treat your Google OAuth tokens and uploaded resumes as sensitive data. We implement industry-standard security and protection mechanisms to safeguard this information, including:

  • Encrypted data transmission (HTTPS/TLS).
  • Encrypted storage (AES-256 or equivalent) of sensitive credentials and OAuth tokens.
  • Restricted internal access to production systems and databases.
  • Secure cloud infrastructure providers with strict IAM access controls.

Access to Google OAuth tokens is strictly limited to the automated systems required to send emails on your behalf.

7. Data Retention & Deletion

You may delete your resumes or account data at any time via Telegram bot commands.

Revoking Google OAuth access through your Google Account settings immediately prevents ApplyStack from sending emails on your behalf.

We retain data only as long as necessary to provide our services or comply with legal obligations.