1. Who we are
AutoApply ("we", "us", "our") is a job application automation service operated at autoapply.uk. We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact: hello@autoapply.uk
2. What data we collect
Account data
Your email address and password (passwords are hashed and never readable by us), name, phone number, and optional address.
CV and career data
Your CV file and the text content extracted from it. Your job preferences including target roles, locations, salary expectations, and search criteria.
Application data
Job listings matched to your profile, tailored applications you have generated for your own use, and application status history.
Billing data
Your subscription status and a billing reference. We do not store card numbers or payment details. These are held exclusively by our payment processor.
Usage data
Number of CVs and cover letters generated in a given period and session authentication data.
3. How we use your data
| Purpose | Legal basis (UK GDPR Art. 6) |
|---|---|
| Creating and managing your account | Contract performance |
| Tailoring your CV and cover letter for each job listing | Contract performance |
| Matching job listings to your preferences | Contract performance |
| Processing subscription payments | Contract performance |
| Communicating with you about your account | Contract performance / Legitimate interests |
| Improving and debugging the service | Legitimate interests |
| Complying with legal obligations | Legal obligation |
Your CV content and relevant job information are processed by an AI service to generate tailored applications. This data is processed in accordance with that provider's privacy and security commitments. We do not use your data to train AI models.
4. Who we share your data with
We share data with third-party service providers only to the extent necessary to operate the service. All providers are contractually bound to handle your data in accordance with UK GDPR.
| Category | Purpose | Location |
|---|---|---|
| Authentication and database services | Storing your account and profile data securely | EU / US (SCCs apply) |
| AI processing provider | Generating tailored CV and cover letter content | US (SCCs apply) |
| Payment processor | Handling subscription billing | US (SCCs apply) |
| Job-listings provider | Source of job listing data | UK |
| Cloud infrastructure | Hosting our servers | Europe |
We do not sell your personal data. We do not share it with advertisers, data brokers, or prospective employers directly.
5. Your CV and generated content
Your CV is used solely to generate tailored CV and cover letter documents for you to download and submit yourself. We do not share your CV with employers, and we never send applications on your behalf.
You can delete your CV and all associated data at any time from your account settings.
6. Data retention
| Data type | Retention period |
|---|---|
| Account and profile data | Until you delete your account |
| CV and career data | Until you delete your account or replace your CV |
| Job listings | 45 days from date of posting |
| Applications | Until you delete your account |
| Billing records | 7 years (legal requirement) |
7. Your rights under UK GDPR
You have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interests. To exercise any of these rights, contact us at hello@autoapply.uk. We will respond within 30 days.
If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies and analytics
AutoApply does not use cookies. We use privacy-friendly, cookieless product analytics, self-hosted on our own server (Umami), to understand how the site is used - for example, page views and visit counts. This stores an anonymous identifier in your browser's local storage; it does not identify you personally, is not used for advertising, and is never sold or shared with data brokers. We also use strictly-necessary local storage to keep you signed in and to remember basic app preferences, such as your chosen Tracker view.
9. Security
All data is transmitted over HTTPS. Passwords are hashed and unreadable. Our infrastructure is hosted within the EU and access to production systems is restricted to authorised personnel only.
If you believe your account has been compromised, contact us immediately at hello@autoapply.uk.
10. Children
AutoApply is not directed at anyone under 18. If you believe a minor has registered, contact us and we will delete their data promptly.
11. Changes to this policy
We may update this policy from time to time. Significant changes will be communicated by email. Continued use of the service constitutes acceptance of the updated policy.
12. Contact
hello@autoapply.uk - we aim to respond within 5 business days.