Privacy Policy

Who is responsible

ApplyFast is operated from India by Eshaan Kansal. Payments are processed by Dodo Payments as merchant of record, which means Dodo is the seller for your transaction and issues your receipt. For any privacy question, or to have your data deleted, email eshaankansal0@gmail.com. That inbox reaches one person directly.

What is collected

• Account — your email address, and a password hash if you did not sign in with Google. Handled by our authentication provider; we never see your password.
• Your CV — the file or text you upload, and the structured version extracted from it (name, contact details, work history, education, skills).
• What you generate — job links you submit, job descriptions you paste, and the CVs and cover letters produced for you.
• Credits and payments — your credit balance and a record of each purchase. Card details are never sent to or stored by ApplyFast.
• Usage — pages visited and actions taken, such as generating or downloading an application.

Why, and on what legal basis

• To provide the service — your CV and the job you choose are what the product operates on. Without them there is no product.
• To take payment — processing your purchase and crediting your account.
• To keep it working and secure — rate limiting, abuse prevention, and understanding which parts of the product are used or broken.

Data is handled under India's Digital Personal Data Protection Act 2023 and the IT Act 2000. Where you are in the EU or UK, the GDPR also applies because ApplyFast offers its service to people there, and the two bases above correspond to performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Who else sees your data

ApplyFast does not sell your data and does not share it for advertising. It is passed to these providers only to make the product work:

• Anthropic (United States) — receives your CV content and the job description in order to generate your tailored CV and cover letter. Anthropic does not use API data to train its models.
• Supabase — database and authentication. Stores your account, CV and generated applications.
• Vercel — hosting. Serves the site from Frankfurt.
• Dodo Payments — merchant of record. Handles the checkout and receives your email address; ApplyFast never receives your card details.
• Firecrawl and Jina AI — receive the job URL you paste, so the posting can be read. They do not receive your CV.
• Google Analytics — usage measurement. Your account identifier is a random database ID; your email and CV are never sent to Google.

ApplyFast is operated from India and these providers are spread across India, the EU and the United States, so your data is processed outside your own country. Where data of EU or UK users is transferred, it relies on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long it is kept

Your CV and generated applications are kept until you delete them or ask for your account to be deleted. Payment records are kept for as long as tax and accounting law requires. Ask for deletion and everything not legally required to be retained is removed.

Your rights

Wherever you are, you can request a copy of your data, correct it, have it deleted, restrict or object to how it is used, and receive it in a portable format. Email eshaankansal0@gmail.com and it will be handled within 30 days. No account deletion fee, no retention dark patterns.

These are your rights under the DPDP Act 2023 if you are in India, and under the GDPR if you are in the EU or UK. EU and UK users can also complain to their national data protection supervisory authority; users in India can raise a grievance with the Data Protection Board.

Cookies

ApplyFast sets a cookie to keep you signed in. That one is required for the product to function. Google Analytics sets its own cookies to measure usage. No advertising or cross-site tracking cookies are used.

Changes

If this policy changes in a way that materially affects you, the date at the top will change and, where the change is significant, you will be told by email.