Last updated: February 12, 2026

Privacy Policy

1. Introduction

Outapply ("Outapply", "we", "us") is committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services (the "Services").

Contact (support and privacy): [email protected]

2. Data we collect

2.1 Data you provide

  • Account data: email address, password (hashed), and any optional profile fields you submit.
  • Profile and resume data: your CV/resume content, work history, education, skills, links, and job preferences.
  • Job-related data: job postings you submit or connect (including via email ingestion), decisions you make, and outputs you generate (PDF/DOCX).
  • Communications: information you provide when contacting support.

2.2 Data collected automatically

  • Technical and log data: IP address, device/browser information, timestamps, and logs necessary for security and service reliability.
  • Essential cookies: used to maintain sessions and core functionality (see Section 8).

2.3 Gmail connection (OAuth)

If you connect your Gmail account via OAuth, we access and process job-related emails you authorize to:

  • extract job content,
  • analyze role fit,
  • generate application documents.

3. How we use your data

We process personal data to:

  • Provide and operate the Services (account, ingestion, scoring, document generation).
  • Maintain and improve reliability and security (monitoring, debugging, abuse prevention).
  • Manage billing and subscriptions.
  • Communicate with you (support, product/service updates).
  • Comply with legal obligations.

4. Legal bases (where GDPR applies)

When GDPR applies, we rely on:

  • Contract performance (to deliver the Services).
  • Legitimate interests (security, fraud prevention, service improvement).
  • Consent (Gmail OAuth connection; marketing emails when you opt in).
  • Legal obligation (accounting/tax, compliance).

5. AI processing and generated documents

Outapply uses AI to analyze job content and your profile, and to generate tailored documents.

  • You own your inputs ("User Content") and the generated outputs ("Generated Content").
  • We use your content only to provide and improve the Services.
  • We may use anonymized and aggregated data to improve the product (for example, overall quality metrics). We do not attempt to re-identify anonymized data.

6. Sharing and service providers

We do not sell personal data.

We share data only with service providers needed to run the Services, such as:

  • Hosting/compute and database (for example, managed hosting providers and PostgreSQL).
  • Storage (for example, AWS S3 / Cloudflare R2).
  • Email delivery (for example, AWS SES / Resend).
  • Payments (Stripe).
  • AI provider (OpenAI).
  • Google services (OAuth / Gmail API) when you connect Gmail.

We may also disclose data if required by law or during a business transfer (for example, acquisition), with appropriate safeguards.

7. International transfers

Your data may be processed in countries outside your country of residence depending on our providers' infrastructure. Where required, we use appropriate safeguards to protect your data.

8. Cookies

We use essential cookies only to:

  • keep you logged in,
  • maintain session security,
  • enable core features.

You can disable cookies in your browser, but the Services may not work correctly.

9. Data retention

  • Account and profile: stored until you request deletion.
  • Generated documents (PDF/DOCX): stored while your account remains active, until deletion is requested.
  • Raw emails (temporary storage): retained for up to 7 days, then automatically deleted.
  • Support communications: retained as necessary to provide support and for reasonable recordkeeping.

10. Your rights

Depending on your location (including GDPR), you may have rights to access, correct, delete, object, restrict processing, and withdraw consent.

To exercise your rights, contact: [email protected]

11. Marketing emails

If you opt in, we may send onboarding and product updates. You can unsubscribe at any time using the link in the email.

12. Security

We implement reasonable security measures to protect data. No system is 100% secure.

13. Children

The Services are not intended for individuals under 18.

14. Changes

We may update this policy by posting a revised version and updating the "Last updated" date.

Privacy Policy | Outapply