The short version
- The public resume builder keeps nothing. Files you upload without an account are processed in memory and the temporary session is deleted within 30 minutes.
- We never sell your data and resume content is never used for advertising.
- You can delete your account data at any time; see data deletion.
- Questions? Email accretiondinc12@gmail.com.
What we collect
Depending on how you use ApliBot, we may process:
- Account details: name, email address and sign-in method (email and password, or Google Sign-In).
- Profile and resume content: work history, education, skills and the answers you give in your profile.
- Job-search information: roles and locations you search for, jobs you save, application stages, notes and follow-up dates.
- Generated materials: tailored resumes, cover letters and reports created for you.
- Billing records for paid features, handled by Stripe. We never see or store your full card number.
- Technical and usage data needed to keep the service secure and working, such as error logs.
How we use it
- To provide the features you ask for: parsing your resume, generating PDFs and documents, searching and matching jobs, and tracking applications.
- To keep accounts secure, prevent abuse and fix problems.
- To answer support and privacy requests.
- To understand which public pages are useful (see analytics below).
We do not sell personal information, and we do not use your resume content to train third-party advertising profiles.
Temporary public-builder files
The public resume builder is designed around temporary processing. Uploaded resumes and temporary public-builder sessions are automatically deleted within 30 minutes. Nothing from the public builder is linked to an account unless you sign in and choose to save it. AI improvements in Resume Studio need a free ApliBot account and are counted per account per day; no IP address is used for this. If you sign in from Resume Studio, your draft is kept in your own browser tab for up to one hour so you can continue where you left off.
Service providers
We use trusted providers to run ApliBot. They process data only as needed to provide their service to us:
| Provider | Purpose |
|---|---|
| Supabase | Authentication and database |
| Vercel and Render | Website and application hosting |
| Stripe | Payments for optional paid features |
| Google Sign-In (if you choose it) and advertising on public pages | |
| Anthropic (Claude AI models) | Reading your resume, comparing it with jobs and drafting the resumes and cover letters you request. Anthropic states that commercial API inputs and outputs are not used to train its models by default, except where the customer opts in or submits feedback. |
| Resend | Search results, account and password-reset emails |
Some providers may store data outside Canada, including in the United States.
Job sources
To find jobs in Free, Pro, Campaigns and agency accounts, ApliBot uses available job feeds and APIs including Adzuna, Himalayas, Jobicy, Jooble (when enabled), Remote OK, Remotive and Arbeitnow. Where a provider offers keyword search, ApliBot sends the role and city or region, not your resume, name or contact details. Requests also carry standard technical information, such as the server IP address. Every result identifies its source and links to the posting. LinkedIn, Indeed and Job Bank open directly in your browser; ApliBot does not crawl those sites on behalf of public users. ApliBot prepares resumes and cover letters, but does not submit applications on behalf of public users. Private owner-only tools are not part of the public product.
Consent and Canadian privacy law
ApliBot aims to handle personal information in line with applicable Canadian privacy requirements, including PIPEDA and British Columbia's PIPA where applicable. We explain how data is used before you provide it; please review this notice when uploading a resume or enabling a feature that requires processing by our providers. You can request access, correction or deletion and withdraw consent, subject to legal and operational limits, by using the account controls or contacting us. Merely displaying this policy does not replace any consent that the law requires us to obtain separately.
Agency pilot participants: your employment agency does not get access to your ApliBot account, resume or searches. It only knows how many of its invitation places were used. Share documents with your counsellor only if you choose to.
How long data is kept
Resumes made in the public builder without an account are deleted automatically within 30 minutes. With an account, your saved profile is kept until you delete it or your account. Original uploaded resumes and saved source profiles stay until you explicitly delete them or your account. Job-specific resumes and application details are eligible for deletion no sooner than 14 days after a confirmed application, only when you have not followed up and there is no interview, offer or recruiter contact. Unsubmitted job listings are not automatically purged, and a short record of confirmed applications is kept so your totals and duplicate protection survive. Cleanup runs on a schedule, so deletion can happen shortly after these limits rather than at the exact minute. Temporary builder uploads, billing records, security records and legally required records may follow different retention rules. The original file you uploaded is stored privately with your saved profile and is deleted when you delete that profile or your account.
Security and accountability
- All traffic uses HTTPS. Resumes and generated documents are kept in private storage that only your signed-in account (and the server acting for it) can read.
- Paid features are processed by Stripe; ApliBot never sees your full card number. You can manage or cancel a subscription yourself from your profile.
- When you agree to this notice, ApliBot keeps a dated record of that consent (notice version and where you gave it).
- If a security incident affected your personal information and created a real risk of significant harm, we would notify you and the relevant privacy authority as the law requires.
- Person responsible for privacy: Sergio Ramírez, ApliBot founder — accretiondinc12@gmail.com.
Public-site analytics
ApliBot records public-page traffic so the owners can understand which pages are being used. Each analytics event stores the page path, event time, a pseudonymous browser identifier, a tab-session identifier, the referring domain when available, a broad device category, a heuristic automation signal and a two-letter country code when the website edge provides one. These signals do not verify a person's identity or reliably detect every bot. It does not store your raw connection IP address, account email, resume text or application content; hosting providers may keep separate security or access logs under their own policies.
To know whether the free tools are actually useful, ApliBot also records anonymous usage steps (for example: opened Resume Studio, saw a match score, downloaded a PDF, created an account, ran a search). Each step stores only the step name, the time and a one-way hashed identifier of the browser or account. Campaign links may add a source tag such as utm_source.
Analytics event rows are retained for about 90 days. The browser identifier is stored in localStorage and rotates after about 90 days, or sooner if you clear site storage; the session identifier uses sessionStorage and normally ends with the tab session. Analytics reports are restricted to owner accounts.
Advertising and cookies
Some public pages and the free resume builder may show ads served by Google, including Google AdSense and Google Ad Manager. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet.
You can opt out of personalized advertising in Google Ads Settings or at aboutads.info. Learn how Google uses data from partner sites. Your uploaded resume content is never used for advertising.
Your choices and rights
- Access and correction: review and edit your profile and documents in your account, or ask us for a copy.
- Deletion: delete documents and searches in the product, or request full account deletion (see data deletion).
- Google Sign-In: you can remove ApliBot's access at any time from your Google Account's third-party connections page.
- Analytics and ads: clear site storage to reset the analytics identifier, and use Google Ads Settings to control personalized ads.
ApliBot is intended for adults looking for work and is not directed at children.
Changes and contact
If we change this policy, we will update the date at the top of this page. For privacy questions, data requests or support, email accretiondinc12@gmail.com. We aim to reply within two business days.