Privacy Policy
This Privacy Policy explains how ApplyFast ("we", "us", "our") collects, uses, and protects your personal information when you use the ApplyFast Chrome extension and website.
1. Information We Collect
Account information: When you create an account, we collect your email address and a hashed password.
Profile data you provide: When you upload documents, we extract and store structured data including:
- Personal details: name, date of birth, phone number, address
- Academic records: institutions attended, GPA, course history, test scores
- Experiences and activities: job titles, organizations, dates, descriptions, hours
- Achievements: awards, honors, publications, certifications
Uploaded files: PDF documents you upload are temporarily passed to Google's Gemini AI API for text extraction and then discarded. We do not store the raw PDF files.
Waitlist data: If you join our waitlist, we store your email and the application type you selected.
Usage data: We do not use third-party analytics. Minimal server logs (request timestamps, IP addresses) are retained for up to 30 days for security purposes.
2. How We Use Your Information
- To provide and improve the autofill service
- To authenticate your account
- To contact you with launch updates if you joined the waitlist (one email only)
- To process payments via Stripe
- To respond to support requests
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. AI Processing
When you upload a PDF, its text content is sent to Google's Gemini API to extract structured profile data. This is the only time your document content leaves our servers. Google's data processing is governed by Google's Privacy Policy. We use the API in a way that does not allow Google to use your data to train their models.
4. Data Storage
Your profile data is stored in Supabase, a cloud database service hosted on AWS infrastructure in the United States. Data is encrypted at rest and in transit.
5. Payment Information
Payment processing is handled entirely by Stripe. We never see or store your full credit card number. Stripe's privacy practices are described in Stripe's Privacy Policy.
6. Data Retention
Your profile data is retained for as long as your account exists. Waitlist emails are retained until we either launch and notify you or you ask us to remove your email. You may request deletion of your data at any time.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and all associated data
- Withdraw consent at any time
To exercise any of these rights, email us at support@applyfast.org. We will respond within 30 days.
8. Security
We use industry-standard security practices including HTTPS, encrypted database storage, and hashed passwords. However, no system is perfectly secure. Please use a strong, unique password for your ApplyFast account.
9. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For significant changes, we will notify registered users by email.
11. Contact
Questions or requests? Email us at support@applyfast.org.