Privacy Policy

Only what you add, or ask the app to find for you:

• Your account: your email address and, if you use one, a password (stored as a secure hash, never readable). If you sign in with Google, we get your name, email address and profile picture from Google, and nothing else from your Google account.
• Your applications: company, job title, stage, dates, salary, location, links, notes, saved job descriptions, next steps, tags and stars, and a history of when each one changed stage.
• Interviews and contacts you add to an application, such as a recruiter's name, email address and profile link. Only add details you're comfortable keeping.
• Resume files you upload. They're stored privately; only you can open them, through links that expire after a few minutes.
• Company websites and logos. To show a logo, the app looks up the company's website from its name and saves it on the card.
• Saved views and feedback you send us, including your email address if you let us reply.

Applylane can add applications from email, either from emails you forward to your private Applylane address or, where it's switched on, from a connected inbox. Either way:

• Only emails that look like job applications are read: confirmations, rejections, interview invitations and offers.
• An AI model reads each of those emails to pick out the company, the job title, the date and any location, salary or job link, or to spot that an application was rejected, moved to interview or got an offer.
• The emails themselves aren't kept. What's saved is what the AI found, plus, for status changes, the email's subject line and a one-sentence summary, so you can review it. Each email's id is kept too, so the same email isn't imported twice.
• Nothing changes on your board until you review it and confirm.
• Your emails are never used to train AI models, shown to anyone else, or sold.

Your forwarding address is private to you. Anything sent to it is read for your board, so don't share it. Only emails your filter or you forward are ever seen.

The optional Applylane extension for Chrome, Edge and Brave saves jobs to your board from the sites you browse. It only talks to applylane.co.

• On job sites (LinkedIn, Indeed, Greenhouse, Lever, Workday and other hiring sites), it checks whether the page shows a single job. If it does, it sends that page's address and its title and job details to Applylane, to show whether the job is already on your board. Other pages, like your feed, messages or profile, are not read or sent.
• When you save a job, or the extension sees that you've just submitted an application, it also sends some of the job's visible text (the description, location and pay). An AI model may read that text to fill in details, as with a pasted job link. What's saved is the job on your board; the page itself isn't kept.
• Company career sites are only looked at if you turn on "Also show on company career sites" in the extension, which asks for Chrome's permission first. The same rules apply: only pages that look like a single job are checked.
• The extension never fills in or submits applications, and never reads form fields, passwords or other pages.
• Connecting the extension gives your browser a key for your account. Only a scrambled version of the key is stored, and you can disconnect any browser from Account → Browser extension.

Applylane uses a few services to run. Each gets only what it needs, and none may use your data for its own purposes.

• Lovable Cloud (built on Supabase) hosts the app and its database, and stores your account, applications and resume files.
• Lovable's AI gateway, using Google's Gemini models, reads job emails and job pages you ask it to fill details from, and suggests company websites.
• Cloudflare receives emails sent to forwarding addresses and passes them straight to Applylane.
• Lovable's email service sends your account emails, like confirming your sign-up or resetting your password, from notify.applylane.co. It receives your email address and the message, nothing else.
• Clearbit, DuckDuckGo and Google are asked for company websites and logos. They only receive company names or website addresses, never anything about you.
• Umami counts visits and a few actions (like "added an application") so we know what's used. It uses no cookies and receives no names, emails, companies or other personal details.
• Sentry receives a report when something in the app breaks: the error, the page it happened on and your browser type. Email addresses and other identifying details are removed first, and nothing from your applications is included.
• Google Fonts serves the app's fonts, so Google can see your IP address when a page loads, as with most websites.

When you paste a job link, Applylane's server visits that page to read the job details. Jobs saved from the browser extension may be read by the same AI, as described above.

Your browser keeps your sign-in session, your light or dark choice, and short lists that stop the app suggesting the same things twice (for example, emails you skipped). Clearing your browser's site data removes them. Pictures made with Share my job search are drawn in your browser too, and only leave your device if you download, copy or post them. Applylane doesn't use advertising or tracking cookies.

Your applications, resumes and everything else in your account are private to you. The app is built so each person can only read their own data. We don't share it, sell it, or show you ads. The app's operator may look at stored data only to fix a problem you've reported, to keep the service secure, or when required by law.

• Delete one application from its card; you'll get a few seconds to undo it.
• Delete everything: Account → Delete account permanently removes your account, every application, note, interview, contact, saved view, uploaded resume, forwarding address, connected browser, feedback you sent, and their history. It can't be undone.
• Take a copy first with Export CSV on the board.

Data kept by the services above is removed with your account or shortly after, as part of their normal deletion. Backups are overwritten on their usual schedule.

Connections are encrypted, access to data is limited to its owner, resume files are private, and email is only handled by the steps described above. No system is perfectly secure, so please use a strong password or Google sign-in.

Applylane is meant for people aged 16 and over.

If this policy changes, the date at the top will change too, and significant changes will be announced in the app.

For questions, or to ask for a copy or deletion of your data: Email hello@applylane.co.