Privacy notice
Effective 8 October 2026 · Version 2026-10-08
Who is responsible
Sizar Arkan Hazim operates ApplyPilot and is responsible for its handling of personal data. Contact details are below.
What we collect and why
- Your sign-in account identifier and email let us provide your account and separate your records from other users. The website host manages authentication; ApplyPilot does not collect your password.
- Files are read in your browser. The original uploaded file is not stored by this application. The basic wording preview, manual draft edits and PDF formatting stay in your browser. Draft edits are not automatically saved to your account; download them before leaving. Choosing Save my CV sends its extracted text to account storage.
- Choosing an AI review sends your CV text, job text and writing preference to OpenAI. The source text and review are saved to your account. This processing provides the service you request; you separately confirm each initial AI submission.
- Orders, credit entries and payment status let us deliver purchases and handle refunds. Stripe collects payment details on its hosted checkout; ApplyPilot does not collect full card numbers.
- Request counts and basic technical records help prevent abuse and limit spending. We do not intentionally record CV text in application error logs.
Account, document and purchase processing is used to perform the service contract. Security and abuse prevention support our legitimate interest in operating a safe service. Financial records may also be required by law. We do not use your CV for advertising or make automated hiring decisions.
Service providers
The site runs on OpenAI Sites with Cloudflare-hosted application storage. OpenAI processes the cloud AI requests; Stripe processes payments. These providers may process data outside Norway and the EEA under their applicable terms and safeguards. This service does not promise EU-only processing.
AI requests use store:false. OpenAI's API documentation says API data is not used to train models by default; abuse-monitoring logs can be kept for up to 30 days, with exceptions. This is not a zero-retention promise. See OpenAI API data controls and Stripe's privacy notice.
Storage and deletion
Your saved CV and reviews remain in your account until you replace or delete them or ask us to close the account. Use My account to export and delete them. Deletion removes them from active application storage; provider backups and security records can have separate retention rules. We do not promise immediate erasure from every backup.
Credit and purchase records are kept separately while needed to deliver unused credits, resolve refunds or disputes, and meet accounting obligations. Request counts are retained while needed to enforce the service's spending allowance. Contact us for account closure or a review of retained records. Clearing the page does not erase saved data, clipboard copies or downloads.
Your choices and rights
You may request access, correction, deletion, restriction, portability or object where applicable by emailing us. We may need to verify your account without asking for unnecessary identity information. You can complain to Datatilsynet. Choosing not to send text to AI means we cannot generate that AI review.
Browser storage
The app uses the host's sign-in session and necessary application functions. Your chosen interface language is saved on this device. CV text is not saved in browser storage. No advertising trackers or third-party marketing analytics are added by ApplyPilot. The host and Stripe may use their own necessary security and payment technologies.
Sizar Arkan Hazim, trading as ApplyPilot · Støperiveien 49, 2010 Strømmen, Norway