Privacy Policy

When you use AutoApply, we collect the following categories of information:

• Google profile data: your name, email address, and profile photo from your Google account • Gmail access: read-only access to retrieve Seek.com.au sign-in verification codes (see Section 2) • Resume content: the text and formatting of your uploaded resume • Seek.com.au credentials: your Seek account email and session data required to submit applications • Job application data: job listings you apply to, application status, employer names, and generated cover letters • Usage data: feature interactions, application counts, and performance metrics • Billing data: subscription status and payment history (payment card details are held by Stripe, not by us)

AutoApply requests the gmail.readonly OAuth scope from Google. This permission is used for one purpose only: to read Seek.com.au sign-in verification codes sent to your email so the bot can authenticate your Seek session automatically.

We do not read, index, store, or process any other emails in your inbox. We do not access emails from senders other than Seek. Our Gmail access is scoped to search for and read only Seek verification emails.

You can revoke Gmail access at any time from your Google account's security settings (myaccount.google.com/permissions). Revoking access will prevent the bot from logging in to Seek on your behalf.

We use the information we collect to:

• Operate the AutoApply bot and submit job applications on your behalf • Tailor your resume and generate cover letters for individual job listings using AI • Score job listings against your profile to filter relevant opportunities • Track application history and provide you with a dashboard of your activity • Send you transactional emails about your account, subscription, and application status • Improve the AI models and matching algorithms (using anonymized, aggregated data only) • Comply with our legal obligations

All data is stored on Amazon Web Services (AWS) in the ap-southeast-2 region (Sydney, Australia). Your resume files, generated documents, and application records are stored in AWS S3 with server-side encryption enabled. Database records are encrypted at rest. All data in transit is protected by HTTPS/TLS. We do not transfer your personal data to servers outside Australia except where required to interact with third-party services listed in Section 6.

We retain your data for the following periods:

• Account data and profile information: retained while your account is active and for 30 days after deletion request • Resume and generated cover letters: retained for up to 1 year, then automatically deleted • Job application records: retained to provide your application history dashboard; may be retained in anonymized form for analytics after account deletion • Billing history: retained for 7 years as required by Australian tax law

You may request deletion of your account and personal data at any time. We will process deletion requests within 30 days.

AutoApply uses the following third-party services, each of which may receive limited data as described:

• Google OAuth: receives your Google account information to authenticate your login. Subject to Google's Privacy Policy. • Stripe: processes subscription payments. Receives your email and billing details. Does not receive your resume or application data. Subject to Stripe's Privacy Policy. • Amazon Web Services (AWS): hosts our infrastructure in Sydney. Stores encrypted data. Subject to AWS's Privacy Policy. • OpenAI (GPT-4o): receives your resume text and job descriptions to generate tailored content. Data is not used to train OpenAI models under our API agreement. • Anthropic (Claude): used for job scoring and content generation. Data is not used to train Anthropic models under our API agreement.

We do not sell your personal data to any third party.

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you • Request correction of inaccurate or incomplete information • Request deletion of your account and personal data (processed within 30 days) • Request a copy of your data in a portable format (data export) • Opt out of marketing communications at any time

To exercise any of these rights, contact us at support@autoapply.com.au. We will respond within 30 days.

AutoApply uses minimal cookies. We set session cookies required for authentication and to maintain your logged-in state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not use cookies to track you across other websites. You may disable cookies in your browser settings, but this will prevent you from logging in to AutoApply.

We take security seriously. Our security measures include:

• Encryption at rest for all stored data using AES-256 • HTTPS/TLS for all data in transit • Access controls ensuring only authorized systems can access your data • Regular security reviews • No storage of Seek passwords in plain text

Despite these measures, no system is perfectly secure. Please contact us immediately at support@autoapply.com.au if you suspect unauthorized access to your account.

AutoApply is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us at support@autoapply.com.au and we will delete the account promptly.

AutoApply is committed to compliance with the Australian Privacy Act 1988 and the 13 Australian Privacy Principles (APPs). If you believe we have breached your privacy rights or an Australian Privacy Principle, please contact us first at support@autoapply.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time. If we make material changes to how we handle your personal information, we will notify you via email before the changes take effect. The current version is always available at autoapply.com.au/privacy. Your continued use of AutoApply after any changes constitutes acceptance of the updated policy.

For any privacy-related questions, data access requests, or complaints, please contact:

AutoApply (operated by the AutoApply team) Sydney, New South Wales, Australia Email: support@autoapply.com.au

We aim to respond to all enquiries within 24 hours on business days.