Privacy Policy Last updated: 29 March 2026

1. About This Policy Apply Kit ("we", "us", "our") is operated by Techfluent Systems Pty Ltd (ABN: 45 679 144 506), based in Australia. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our web application at applykit.com.au, our Chrome browser extension, and related services (collectively, the "Service"). We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

2.1 Information You Provide • Account information: name, email address, and password when you create an account. • Profile information: avatar type (APS or Private), APS band, current role, target role, target industries, salary expectations, and career goals. • Resume data: work experience, education, skills, certifications, awards, publications, referees, and contact details that you enter or upload. • Job listings: job descriptions, URLs, and related metadata that you save or import via the web app or Chrome extension. • Generated content: STAR responses, cover letters, resignation letters, interview guides, and LinkedIn optimisations created using our AI tools. • Payment information: billing details are collected and processed by Stripe. We do not store your credit card number on our servers.

2.2 Information Collected Automatically • Usage data: pages visited, features used, timestamps, and interaction patterns to improve the Service. • Device information: browser type, operating system, and screen resolution. • Authentication tokens: JWT access tokens (stored in memory) and refresh tokens (stored in secure httpOnly cookies).

2.3 Chrome Extension Our Chrome extension extracts the visible text content of the web page you are viewing only when you explicitly click "Save This Job". We do not track your browsing history, monitor pages in the background, or collect data from pages you do not choose to save. The extracted text is sent to our API for AI-powered parsing and is not stored in its raw form — only the structured job data (title, company, requirements, etc.) is saved to your account.

3. How We Use Your Information • To provide, maintain, and improve the Service. • To process your resume, job, and career data through AI analysis (powered by Anthropic Claude). Your data is sent to Anthropic's API for processing but is not used by Anthropic to train their models. • To generate personalised content (cover letters, STAR responses, interview guides, etc.) based on your profile and job data. • To calculate match scores, ATS scan results, and career readiness metrics. • To process payments and manage your subscription via Stripe. • To send transactional emails (account confirmation, password reset, subscription updates). We do not send marketing emails without your consent. • To detect and prevent fraud, abuse, and security incidents.

4. AI Processing ApplyKit uses Anthropic's Claude AI to power features including resume scanning, job-resume matching, content generation, and interview guide creation. When you use these features, relevant portions of your data (e.g., resume text, job descriptions) are sent to Anthropic's API for processing. • Anthropic does not use your data to train or improve their AI models. • AI-generated content is based solely on information you provide — we instruct the AI to never fabricate experience or qualifications. • AI results (scores, generated text) are stored in our database so you can access them later. • Scoring operations use deterministic settings (temperature=0) to ensure consistent results.

5. Data Storage and Security • Hosting: All data is stored on Amazon Web Services (AWS) infrastructure in the Sydney region (ap-southeast-2), Australia. • Database: PostgreSQL with encryption at rest and in transit. • Authentication: Passwords are hashed using bcrypt. Access tokens are short-lived (15 minutes) and stored in memory, not localStorage. Refresh tokens use secure httpOnly cookies. • Payments: All payment processing is handled by Stripe. We never store or have access to your full credit card details. • File storage: Uploaded resume files are stored in AWS S3 with server-side encryption. • Soft deletes: When you delete data (resumes, jobs, etc.), records are soft-deleted and can be permanently purged upon request.

6. Data Sharing We do not sell, rent, or trade your personal information. We share data only with: • Anthropic — for AI processing (resume scanning, matching, content generation). Subject to Anthropic's data processing terms. • Stripe — for payment processing. Subject to Stripe's privacy policy. • Amazon Web Services — as our hosting and infrastructure provider. • Law enforcement — if required by Australian law or valid legal process.

7. Your Rights Under Australian privacy law, you have the right to: • Access your personal information held by us. • Correct inaccurate or incomplete information. • Delete your account and associated data by contacting us. • Export your resumes and documents in PDF or DOCX format. • Withdraw consent for optional data processing at any time. • Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

8. Data Retention We retain your data for as long as your account is active. If you delete your account, we will permanently delete your data within 30 days, except where retention is required by law (e.g., financial records for tax purposes). Soft-deleted records (resumes, jobs, documents) are purged during account deletion.

9. Cookies We use only essential cookies required for the Service to function: • Refresh token cookie: a secure, httpOnly cookie used to maintain your authentication session. It cannot be accessed by JavaScript and is sent only to our auth endpoint. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

10. Children's Privacy ApplyKit is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: Email: [email protected] Website: applykit.com.au

• Account information: name, email address, and password when you create an account.

• Profile information: avatar type (APS or Private), APS band, current role, target role, target industries, salary expectations, and career goals.

• Resume data: work experience, education, skills, certifications, awards, publications, referees, and contact details that you enter or upload.

• Job listings: job descriptions, URLs, and related metadata that you save or import via the web app or Chrome extension.

• Generated content: STAR responses, cover letters, resignation letters, interview guides, and LinkedIn optimisations created using our AI tools.

• Payment information: billing details are collected and processed by Stripe. We do not store your credit card number on our servers.

• Usage data: pages visited, features used, timestamps, and interaction patterns to improve the Service.