Applydrop logo

Applydrop

Privacy Policy

Privacy policy

How Applydrop handles your data.

This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your personal data.

EffectiveApril 1, 2026
Contactsupport@applydrop.com
Scopeapplydrop.com and API

Information we collect

We collect only the data necessary to provide our job search and application services.

Account information

When you register, we collect your name, email address, and password (stored as a salted hash, never in plaintext).

Resume and profile data

You may upload your CV and provide career preferences. This data is used to match jobs and tailor applications on your behalf.

Usage data

We collect basic request logs (timestamps, endpoints accessed) for security monitoring and rate limiting. We do not use third-party analytics trackers.

How we use your data

Your data is used exclusively to deliver Applydrop's job search and application services.

Job matching and scoring

Your profile and resume are processed locally by our AI engine to score job relevance and suggest matches. This data is not shared with third parties for advertising.

Automated applications

When you use auto-apply, your resume and profile data are submitted to job platforms (e.g., LinkedIn) on your behalf, only with your explicit action.

Email communications

We send transactional emails for account verification, password resets, and application status updates. We do not send marketing emails without consent.

Your rights

  • Access and download your personal data at any time through your account settings.
  • Request deletion of your account and all associated data by contacting support.
  • Withdraw consent for automated applications at any time.
  • Request correction of inaccurate personal information.

Data protection

  • Passwords are hashed with PBKDF2 (120,000 iterations) using unique per-user salts.
  • All traffic is encrypted via TLS (HTTPS) with HSTS enforcement.
  • Session tokens are cryptographically generated and expire after 24 hours.
  • User data is isolated per account; no cross-user data access is possible.

Third-party services

We use a limited number of third-party services to operate Applydrop.

LinkedIn

When you connect your LinkedIn account, Applydrop interacts with LinkedIn on your behalf to apply to jobs. Your LinkedIn credentials are stored in an encrypted browser context.

Data retention and deletion

Active accounts

Your data is retained as long as your account is active. You can export or delete your data at any time.

Deleted accounts

When you request account deletion, all personal data is permanently removed within 30 days. Anonymized aggregate statistics may be retained.

Contact

For privacy-related questions, data access requests, or deletion requests, contact us at support@applydrop.com.