Privacy Policy

1. What We Collect

When you create an account and use ApplyCove, we collect:

• Account information: name, email address, password hash.
• Resume data: the resume you upload or connect for auto-filling.
• Platform session sync: Naukri and/or LinkedIn cookies and localStorage you capture via the ApplyCove Chrome extension after signing in the way you normally do. We do not collect your portal password.
• Job preferences: target roles, locations, salary range, and filter rules.
• Q&A history: your saved answers to common screening questions.
• Application history: log of every job applied to, including title, company, date, and status.
• Session recordings: browser session video for support and debugging. Auto-deleted after 30 days.
• Metadata: timestamps, session durations, error logs.
• Device data: IP address, browser type, operating system.

2. How We Use Your Data

We use your data to:

• Operate your job application sessions on Naukri and LinkedIn.
• Auto-fill application forms using your profile and Q&A history.
• Generate AI-assisted cover letters and screening answers.
• Display your application history in your dashboard.
• Provide customer support and diagnose issues via session recordings.
• Send transactional emails (billing, session summaries, alerts).
• Improve ApplyCove using anonymised, aggregated usage metrics.

We do not use your data for advertising. We do not sell your data.

3. Platform Session Sync

ApplyCove does not collect your Naukri or LinkedIn password. Platforms are connected through the ApplyCove Session Sync Chrome extension which captures your existing browser session (cookies and localStorage) after you have signed in to the portal the way you normally do. The captured session is encrypted with AES-256 in your browser before upload and is decrypted only inside your isolated cloud browser at the start of an authorised session. The encrypted blob is never logged in plain text and access is restricted to the session runtime process.

You can disconnect a platform at any time from your account settings. The encrypted session is wiped from S3 immediately and permanently.

4. Session Recordings

Browser sessions are recorded to a private, access-controlled storage bucket. Recordings are used exclusively for debugging failed sessions and responding to support requests. They are automatically and permanently deleted after 30 days. You may request early deletion by contacting support@applycove.com.

5. AI Processing

ApplyCove uses third-party AI models to generate cover letters and answer screening questions. Providers currently include Gemini, Nemotron, Grok, and models via OpenRouter. Your job preferences and Q&A profile may be sent to these providers as context for generation. We do not send your platform session data to AI providers.

AI providers are contractually prohibited from using your data to train their models.

6. Third-Party Services

• AWS S3: encrypted storage for session recordings and resume files.
• Cashfree: payment processing. We do not store card details.
• MQTT broker: real-time session event streaming to your dashboard.

7. Cookies

We use a single httpOnly JWT cookie to maintain your login session. No third-party tracking or advertising cookies are set.

8. Data Retention

Your account data is retained as long as your account is active. Session recordings are deleted after 30 days. Application history is retained indefinitely until you delete your account. On account deletion, all personal data is permanently removed within 7 days.

9. Your Rights

You may at any time:

• Request a copy of your data by emailing support@applycove.com.
• Request deletion of your account and all associated data.
• Disconnect a connected platform from your account settings; the captured session is wiped immediately.
• Opt out of AI-assisted answer generation in your session preferences.

This policy is governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

---

Questions? Email support@applycove.com.