ApplyCove

Privacy Policy

How we collect, use, and protect your data.

Last updated: May 2026

Your data stays yours

We never sell, rent, or share your personal data with third parties for marketing.

Credentials encrypted at rest

Platform login details are encrypted using industry-standard encryption. Never stored in plain text.

Session recordings auto-delete

Session recordings are automatically and permanently deleted after 30 days.

1. What We Collect

When you create an account and use ApplyCove, we collect:

  • Account information: name, email address, password hash.
  • Resume data: the resume you upload or connect for auto-filling.
  • Platform credentials: Naukri and/or LinkedIn login details you provide to run sessions.
  • Job preferences: target roles, locations, salary range, and filter rules.
  • Q&A history: your saved answers to common screening questions.
  • Application history: log of every job applied to, including title, company, date, and status.
  • Session recordings: browser session video for support and debugging. Auto-deleted after 30 days.
  • Metadata: timestamps, session durations, error logs.
  • Device data: IP address, browser type, operating system.

2. How We Use Your Data

We use your data to:

  • Operate your job application sessions on Naukri and LinkedIn.
  • Auto-fill application forms using your profile and Q&A history.
  • Generate AI-assisted cover letters and screening answers.
  • Display your application history in your dashboard.
  • Provide customer support and diagnose issues via session recordings.
  • Send transactional emails (billing, session summaries, alerts).
  • Improve ApplyCove using anonymised, aggregated usage metrics.

We do not use your data for advertising. We do not sell your data.

3. Platform Credentials

Your Naukri and LinkedIn credentials are encrypted at rest using AES-256 encryption before being stored. They are decrypted only at the start of an authorised session and are never logged in plain text. Access is restricted to the session runtime process.

You can delete your stored credentials at any time from your account settings. Deletion is immediate and permanent.

4. Session Recordings

Browser sessions are recorded to a private, access-controlled storage bucket. Recordings are used exclusively for debugging failed sessions and responding to support requests. They are automatically and permanently deleted after 30 days. You may request early deletion by contacting support@applycove.com.

5. AI Processing

ApplyCove uses third-party AI models to generate cover letters and answer screening questions. Providers currently include Gemini, Nemotron, Grok, and models via OpenRouter. Your job preferences and Q&A profile may be sent to these providers as context for generation. We do not send your platform credentials to AI providers.

AI providers are contractually prohibited from using your data to train their models.

6. Third-Party Services

  • AWS S3: encrypted storage for session recordings and resume files.
  • Razorpay: payment processing. We do not store card details.
  • MQTT broker: real-time session event streaming to your dashboard.

7. Cookies

We use a single httpOnly JWT cookie to maintain your login session. No third-party tracking or advertising cookies are set.

8. Data Retention

Your account data is retained as long as your account is active. Session recordings are deleted after 30 days. Application history is retained indefinitely until you delete your account. On account deletion, all personal data is permanently removed within 7 days.

9. Your Rights

You may at any time:

  • Request a copy of your data by emailing support@applycove.com.
  • Request deletion of your account and all associated data.
  • Remove stored platform credentials from your account settings.
  • Opt out of AI-assisted answer generation in your session preferences.

This policy is governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

Questions? Email support@applycove.com.