1. Scope
This Privacy Policy explains how Appycan LLC, a Florida limited liability company ("Appycan," "we," "us," or "our"), collects, uses, stores, and shares information when you use our website, dashboard, browser extension, and related services.
2. Information we collect
We collect the information you choose to provide, including your name, email, phone number, location, work authorization, resume uploads, portfolio links, GitHub link, job-search preferences, saved answers, custom answer prompts, AI writing context, application history, and support messages.
When Appycan surfaces a sensitive or consent question (such as a demographic, EEO, SMS, marketing, recording, or background-check question) and you answer it, we record your decision in a consent decision audit log. The log captures the date and time, company and role context, the question prompt, available options, and the answer you selected. Saved consent preferences (your reusable answers for future similar questions) are also stored. These records are retained as described in our Terms of Service section 5a(e).
We also collect operational data needed to run the product, such as extension connection status, application run events, plan status, usage counters, diagnostic logs used for debugging and service improvement, and browser session information.
3. How we use information
We use your information to provide Appycan, including storing your application profile, generating cover letters and long-form answers when enabled, filling supported application fields, tracking application history, powering the extension connection, enforcing plan limits, improving saved-answer reuse, responding to support requests, and protecting the service from abuse.
4. AI processing
If you enable AI writing, we send data to OpenAI (our AI provider) to generate cover letters, application answers, and to extract text from uploaded resumes. The data sent may include your name, current job title, current employer, location, years of experience, work authorization status, LinkedIn and portfolio URLs, uploaded resume content, previously saved application answers, custom writing instructions, and job details such as the title, company, and description of the role you are applying to.
This data is sent over encrypted connections and is used solely to generate content for your applications. We instruct the model not to invent facts, but AI outputs may still be incomplete or wrong, so you remain responsible for reviewing and approving what is submitted. You can disable AI writing at any time in your preferences.
5. Service providers
We use third-party service providers to host the application, store files and state, process payments, provide AI generation, deliver transactional emails, and support login. Our current providers include Render for hosting, Supabase for storage and authentication (including signup confirmation and password-reset emails), OpenAI for AI generation, Stripe for payment processing, and Resend for email delivery. If we add or change providers, we will update this policy.
6. Cookies and session data
Appycan uses cookies or similar session mechanisms to keep you signed in to the dashboard and to protect authenticated routes. These session cookies are used for product functionality and security.
7. How long we keep information
We keep your workspace data for as long as needed to provide the service, operate the product, enforce our terms, comply with legal obligations, resolve disputes, or honor your requests. If you want data deleted, use our Contact page and we can handle the request manually until self-serve deletion is fully available.
8. Sharing and disclosure
We do not sell your personal information for money. We may disclose information when needed to provide the service, to comply with law, to protect rights or safety, to investigate abuse, or as part of a merger, acquisition, financing, or business transfer.
9. Security
We use reasonable safeguards designed to protect stored information, but no security measure is perfect and no storage or transmission method is guaranteed to be fully secure. You should not upload anything you are unwilling to risk if compromised.
10. Third-party platforms
Appycan interacts with LinkedIn and may process information from job pages and application flows. We do not control LinkedIn’s policies, privacy practices, or decisions. Your use of LinkedIn remains subject to LinkedIn’s own terms and policies.
11. International and legal compliance
Appycan is operated from the United States. If you use the service from outside the United States, you understand that your information may be transferred to and processed in the United States or other jurisdictions where our providers operate.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date and may provide additional notice for material changes.
13. Contact
If you have questions, privacy requests, or deletion requests, please use our Contact page.