Privacy Policy – ReadyApply AI

Last updated: January 2026

1. Introduction

ReadyApply AI ("ReadyApply," "the Extension," "we," "us") is a Chrome browser extension that helps users generate tailored job application materials. This Privacy Policy explains exactly what data we collect, how we use it, where it is stored, and how you can control or delete it.

2. Data We Collect

ReadyApply collects the following types of data:

2.1 Resume and Profile Information

• Resume text: You explicitly paste your resume into the extension. This is the primary input used to generate job materials.
• Profile information: Your name and email address, collected during account creation via Supabase authentication.

2.2 Job Listing Content

• Job title: Extracted from the page or manually entered.
• Company name: Extracted from the page or manually entered.
• Job description: The full text of the job posting, extracted when you click "Use current page" or "Rescan page."
• Application URL: The URL of the job listing page.

This data is only collected when you explicitly click a button in the extension. No background scraping or passive monitoring occurs.

2.3 Application Questions and Answers

• Application questions: Questions you enter for the extension to answer (e.g., "Why do you want to work here?").
• Generated answers: AI-generated responses to those questions.

2.4 Generated Content

• Cover letters: AI-generated cover letters based on your resume and the job description.
• Interview prep: AI-generated interview questions and talking points.

2.5 Usage and Operational Data

• Job pack metadata: Creation timestamps, job status (e.g., "Applied," "Interviewing"), and user-provided notes.
• Subscription and billing information: Managed by Stripe. We store your Stripe customer ID and subscription status.
• Operational logs: Server logs containing request timestamps, HTTP status codes, and anonymized request metadata. These logs are retained for 30 days for security, abuse prevention, and debugging purposes.

3. How We Use Your Data

We use the data described above solely for the following purposes:

• Generating job materials: Your resume and job description are sent to OpenAI's API to generate cover letters, application answers, and interview prep.
• Saving job packs: All job-related data and generated content are stored in your account so you can access them later.
• Authentication and account management: Your email and profile information are used to manage your account via Supabase.
• Billing and subscriptions: Stripe processes payments and manages subscription status.
• Security and abuse prevention: Operational logs help us detect and prevent abuse, troubleshoot errors, and maintain service reliability.

We do not:

• Sell your data to third parties.
• Use your data for advertising or tracking.
• Train machine learning models on your data.
• Scrape or monitor pages in the background.
• Read browsing history or unrelated tabs.

4. Where Your Data Is Stored

Your data is stored and processed using the following services:

• Supabase: User authentication, profile data, job packs, and generated content are stored in a Supabase PostgreSQL database with access controls and encryption at rest.
• ReadyApply backend: Hosted on Google Cloud Run, our backend processes requests and coordinates data between the extension, Supabase, and OpenAI.
• OpenAI API: Job descriptions and resume text are sent to OpenAI's API to generate content. OpenAI's data usage policy applies to this processing. As of January 2026, OpenAI states that data submitted via the API is not used to train models unless you explicitly opt in.
• Cloudflare: Provides security, DDoS protection, and routing for our backend.
• Stripe: Processes payments and manages subscription billing. Stripe's privacy policy applies to payment data.

5. Data Retention

We retain your data as follows:

• Job packs and generated content: Stored until you delete them. You can delete individual job packs or your entire account at any time.
• Profile and resume data: Stored until you delete your account.
• Operational logs: Retained for 30 days, then automatically deleted.
• Billing records: Retained as required by law and Stripe's policies for tax and compliance purposes (typically 7 years).

After you delete your account or job packs, some limited records may persist as required for security, abuse prevention, billing reconciliation, or legal compliance.

6. How to Delete Your Data

You have full control over your data. You can:

• Delete individual job packs: Click the delete button in the extension for any job pack.
• Delete your account: Contact us at support@readyapplyhq.com to request account deletion. We will delete your profile, resume, job packs, and generated content within 30 days.

Note: Operational logs and billing records may be retained as described in Section 5.

7. Security

We take security seriously and implement the following measures:

• Encryption in transit: All data is transmitted over HTTPS.
• Encryption at rest: Supabase encrypts data at rest.
• Access controls: Only authorized backend services can access user data. We follow the principle of least privilege.
• Authentication: Supabase handles user authentication with industry-standard security practices.
• Infrastructure protection: Cloudflare provides DDoS protection and security monitoring.

While we take reasonable precautions, no system is completely secure. If you believe your account has been compromised, contact us immediately.

8. Third-Party Services

ReadyApply uses the following third-party services:

• Supabase: Authentication and database storage. Supabase Privacy Policy
• OpenAI: AI content generation. OpenAI Privacy Policy
• Stripe: Payment processing. Stripe Privacy Policy
• Google Cloud Run: Backend hosting.
• Cloudflare: Security and routing. Cloudflare Privacy Policy

We do not share your data with advertisers, analytics platforms, or data brokers.

9. Permissions Explanation

The extension requests the following Chrome permissions:

• activeTab: Access the currently active page only when you click a button.
• tabs: Identify the active tab and detect page changes to prevent stale data.
• scripting: Extract job information from the current page when you click "Use current page."
• sidePanel: Display the extension interface.
• storage: Store user preferences and session data locally in your browser.
• optional host permissions: Request access to job posting sites only when you initiate extraction. You can revoke these permissions at any time via Chrome settings.

These permissions are not used for background activity, tracking, or monitoring.

10. User Control

You are always in control. You can:

• Choose when to extract job data by clicking a button.
• Edit or delete extracted content at any time.
• Revoke site permissions via Chrome settings.
• Delete individual job packs or your entire account.
• Uninstall the extension at any time.

11. Children's Privacy

ReadyApply is not intended for use by children under 13 and does not knowingly collect personal information from children.

12. Changes to This Policy

If this Privacy Policy changes, updates will be posted at https://readyapplyhq.com/privacy. Continued use of the extension after changes constitutes acceptance of the updated policy.

13. Contact

For questions, support, or data deletion requests, contact:

Email: support@readyapplyhq.com
Website: https://readyapplyhq.com