ApplyFit (“we”, “us”, “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including British Columbia's Personal Information Protection Act (PIPA).
We use your personal information for the following purposes:
We do not sell your personal information. We share data only with:
Processing sessions (uploaded documents, generated outputs, job descriptions) are temporary and automatically expire after 24 hours. Account information is retained for as long as your account is active. You may request deletion of your account and associated data at any time.
Under Canadian privacy law, you have the right to:
To exercise these rights, contact us at the email address provided in the application. We will respond to your request within 30 days.
We use essential cookies that are strictly necessary for the operation of the Service, including authentication tokens and session identifiers. These cookies are required for the Service to function and cannot be disabled. We do not use advertising or marketing cookies. You may manage cookie preferences through your browser settings, but disabling essential cookies may prevent you from using the Service.
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), encryption at rest for stored files, secure password hashing, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure.
Your data may be processed in servers located outside of Canada, including the United States. When data is transferred outside Canada, we ensure that appropriate safeguards are in place to protect your personal information in accordance with PIPEDA requirements.
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.
To protect the integrity of our free tier and ensure fair access for all users, ApplyFit collects limited device signals when you sign in. These signals include screen resolution, timezone, browser language, and a canvas/WebGL rendering token.
What we store: We hash these signals with a server-side salt before storing them. We never store raw fingerprints or use them for advertising, cross-site tracking, or sale to third parties.
What they decide: Device signals may only influence whether additional free credits are granted. They will never block sign-in, paid feature access, or access to your existing documents.
Fail-open design: If device signal collection fails for any reason (e.g., privacy extensions), you can still use ApplyFit normally. We fail open — uncertainty never counts against you.
Deletion: You can request deletion of your device signals at any time by contacting us. Signals are automatically purged when you delete your account.
We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Your continued use of the Service after changes constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at the email address provided in the application. You may also contact the Office of the Privacy Commissioner of Canada if you have unresolved privacy concerns.