Privacy Policy

Effective Date: October 7, 2025
Last Updated: October 7, 2025

Your privacy matters. This policy explains how ReApply (a DBA of 1123IT, LLC) collects, uses, and protects your information.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Career Data: Resumes, work history, skills, education, career goals
• Application Data: Job postings you analyze, generated resumes and cover letters, application notes
• Payment Information: Processed and stored by Stripe (we never store credit card numbers)

1.2 Information We Collect Automatically

• Usage Data: Features used, application counts, session duration
• Technical Data: IP address, browser type, device information, error logs
• Performance Data: AI processing times, API usage for cost optimization

1.3 Information We Derive

• Company Research: Public information about companies you're applying to (cached 72 hours)
• Gap Analysis: AI-generated assessments of your fit for roles
• Strategic Insights: Recommendations for positioning and application strategy

2. How We Use Your Information

2.1 To Provide Our Services

• Process your resume and extract structured career data
• Analyze job postings and assess your fit
• Generate custom resumes and cover letters for specific applications
• Provide strategic recommendations and insights
• Research companies you're applying to

2.2 To Improve Our Platform

• Monitor performance and optimize AI processing
• Track costs to maintain sustainable pricing
• Identify and fix bugs or errors
• Understand feature usage to prioritize development

2.3 To Communicate With You

• Send account-related notifications (password resets, billing updates)
• Respond to support requests
• Send important service updates (with option to opt-out of non-essential emails)

2.4 To Ensure Security and Compliance

• Detect and prevent fraud or abuse
• Enforce our Terms of Service
• Comply with legal obligations

3. How We Share Your Information

We do NOT sell, rent, or trade your personal information. Period.

3.1 Service Providers

• AI Providers (Anthropic, OpenAI): Process your resume and job data to generate analysis and content. They do not retain or train on your data per their enterprise agreements.
• Payment Processor (Stripe): Handles all payment processing and billing. See Stripe's Privacy Policy.

3.2 Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal process or government requests
• Enforce our Terms of Service
• Protect rights, property, or safety of ReApply, users, or the public
• Detect, prevent, or address fraud, security, or technical issues

3.3 Business Transfers

If ReApply is acquired or merged, your information may be transferred. You'll be notified and given options regarding your data.

4. Data Security

4.1 Technical Safeguards

• All data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Passwords hashed using industry-standard algorithms
• Regular security audits and updates
• Limited employee access to user data (currently single-person operation)

4.2 Your Responsibilities

• Choose a strong, unique password
• Keep your account credentials confidential
• Log out from shared devices
• Report suspicious activity immediately to support@reapply.app

5. Data Retention

Data Type	Retention Period
Account information	Until account deletion + 30 days
Resumes & cover letters	1 year after last modification or account deletion
Application history	Retained indefinitely for your reference
Company research cache	72 hours (automatically purged)
Payment records	Handled by Stripe per their retention policy
Usage logs	90 days

6. Your Privacy Rights

6.1 Access and Portability

• View Your Data: Access all your data from your account dashboard
• Export Your Data: Download your complete profile, resumes, and application history in JSON or PDF format

6.2 Correction and Deletion

• Update Information: Edit your profile, resume, and preferences anytime
• Delete Account: Permanently delete your account and associated data from Settings > Account > Delete Account
• Deletion Timeline: Data purged within 30 days of deletion request

6.3 Communication Preferences

• Opt out of marketing emails (account and billing emails cannot be disabled)
• Manage notification preferences from account settings

6.4 California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information we collect and how it's used
• Right to delete personal information (subject to legal exceptions)
• Right to opt-out of sale (we don't sell data, so this is not applicable)
• Right to non-discrimination for exercising privacy rights

6.5 GDPR Rights (European Users)

If you're in the EU/EEA, you have additional rights under GDPR:

• Right to access, rectification, erasure, and data portability
• Right to restrict processing and object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7. Cookies and Tracking

7.1 What We Use

• Essential Cookies: Session management, authentication, security (required for service)
• Functional Cookies: Remember preferences, improve user experience

7.2 What We Don't Use

• No advertising or tracking cookies
• No third-party analytics or remarketing
• No cross-site tracking

8. Children's Privacy

ReApply is intended for users aged 16 and older. If you are under 18, you may only use ReApply with parent or guardian consent.

We do not knowingly collect information from children under 13. If we discover we've collected data from a child under 13, we will delete it immediately.

If you believe a child under 13 has provided information, contact us at privacy [at] reapply [dot] app.

9. International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. By using ReApply, you consent to international data transfer. We ensure adequate protections through:

• Standard contractual clauses with service providers
• Compliance with Privacy Shield principles (where applicable)
• Encryption and security measures for data in transit

10. Third-Party Links

Our service may contain links to third-party websites (e.g., company career pages you're researching). We are not responsible for their privacy practices. Review their policies before providing information.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via:

• Email notification to account holders
• Prominent notice on the website
• In-app notification upon next login

Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions, data requests, or concerns:

---

This Privacy Policy is governed by the laws of the State of Washington, United States.