Applydrop logo

Applydrop Privacy Policy

Privacy Policy

Privacy policy

How Applydrop handles your data.

This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your personal data.

EffectiveApril 25, 2026
Contactinfo@applydrop.com
Scopeapplydrop.com and API

Information we collect

We collect only the data necessary to provide our job search and application services.

Account information

When you register, we collect your name, email address, and password (stored as a salted hash, never in plaintext).

Resume and profile data

You may upload your resume and provide career preferences. This data is used to match jobs and tailor applications on your behalf.

Additional profile fields

We may collect: date of birth (for age-appropriate job matching), marital status, gender, LinkedIn profile URL, certifications, notice period, preferred work mode, portfolio URL, current employer, and citizenship when you add them in your profile. These values are used for job matching and to answer application form fields where relevant.

Usage data

We collect request logs, page activity, device/browser signals, and performance measurements for security, reliability, analytics, and abuse prevention. We do not sell this data or use it for ad targeting.

Browser storage

Applydrop may store profile details, target locations, job matches, preferences, scan reports, application state, and session state in cookies or local browser storage on your device. You can clear this from your browser settings by deleting Applydrop site data, especially on shared devices.

How we use your data

Your data is used exclusively to deliver Applydrop's job search and application services.

Job matching and scoring

Your profile and resume are processed by Applydrop systems and AI/job data providers configured for the service to score relevance, suggest matches, and fill saved answers. This data is not shared with third parties for advertising.

Automated applications

When you use auto-apply, your resume and profile data are submitted to job platforms (e.g., LinkedIn) on your behalf, only with your explicit action.

Email communications

We send transactional emails for account verification, password resets, and application status updates. We do not send marketing emails without consent.

Marketing updates

Product updates and early-access emails are optional. You can decline them during registration or unsubscribe later without affecting your account.

Contact requests

When you contact support, we use your name, email, and message only to respond to your request and improve support quality. Do not send passwords or sensitive documents through the contact form.

Connected accounts

If you connect Google, Gmail, LinkedIn, or a browser extension, Applydrop uses that connection only to provide the requested sign-in, sync, job-search, or application workflow.

Your rights

  • Access and download your personal data at any time through your account settings.
  • Request deletion of your account and all associated data by contacting support.
  • You can request deletion of all your data by emailing info@applydrop.com. We will process requests within 30 days.
  • Withdraw consent for automated applications at any time.
  • Request correction of inaccurate personal information.
  • Clear local browser storage through your browser's site data controls if you use a shared device.

Data protection

  • Passwords are hashed with PBKDF2 (120,000 iterations) using unique per-user salts.
  • All traffic is encrypted via TLS (HTTPS) with HSTS enforcement.
  • Session tokens are cryptographically generated and expire after 24 hours.
  • User data is isolated per account; no cross-user data access is possible.

Third-party services

We use a limited number of third-party services to operate Applydrop.

Vercel

Hosts the frontend application and provides privacy-friendly analytics and speed insights. Subject to Vercel's privacy policy.

Google and Gmail

Supports Google sign-in and optional Gmail workflows when you choose to connect them. Google handles its own authentication and account permissions.

LinkedIn

When you connect LinkedIn or use the extension, Applydrop interacts with LinkedIn on your behalf to discover jobs, prepare forms, and support applications that you review.

AI and job data services

Applydrop may use AI model providers, job-data APIs, and application platform integrations to parse resumes, rank jobs, generate drafts, and automate requested workflows.

Data retention and deletion

Active accounts

Your data is retained as long as your account is active. You can export or delete your data at any time.

Deleted accounts

When you request account deletion, all personal data is permanently removed within 30 days. Anonymized aggregate statistics may be retained.

Contact

For privacy-related questions, data access requests, or deletion requests, contact us at info@applydrop.com.