Privacy Policy

This Privacy Policy explains how ApplyLogic ("we", "us", "our"), owned and operated by Sekora AI LLC, collects, uses, and discloses personal information when you use applylogic.ai and related ApplyLogic services (the "Service").

Sekora AI LLC is the company responsible for ApplyLogic. The company's website is sekora.ai.

Information we collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address, account settings, connected authentication providers, and a salted password hash when you use password sign-in.
• Single sign-on information. If you sign in with Google or LinkedIn, we receive account information from that provider, such as your email address, name, profile image URL, and a stable provider account identifier. We do not receive your provider password.
• Resume information. If you upload a resume, we store the file, filename, file type, file size, extracted or generated resume summaries, resume search profiles, AI processing status, and related timestamps.
• Job search and application data. We collect search queries, filters, selected resume profiles, saved filters, saved jobs, application status, applied dates, notes, cover letter text, and linked resume references that you choose to store.
• MCP and connector data. If you connect an AI client or create MCP access tokens, we store OAuth client and token metadata, scopes, authorization state, token status, and related audit information needed to operate and revoke access.
• Usage and device data. Our hosting and security providers may log request metadata such as IP address, user agent, timestamps, requested URLs, and error or performance data.
• Cookies. We use encrypted, HTTP-only session cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

How we use information

• To create, authenticate, and secure your account.
• To send transactional emails such as verification and password-reset messages.
• To provide job search, resume-aware matching, saved filters, saved jobs, and application tracking.
• To process resumes and create AI-generated summaries and search profiles.
• To operate OAuth-protected MCP tools and connected agent workflows at your direction.
• To debug, protect, maintain, and improve the Service.
• To enforce our Terms of Service and comply with legal obligations.

We do not sell your personal information. We do not use your personal information for advertising. We do not use your uploaded resumes to train proprietary AI models.

AI processing

Resume processing and agent workflows may send resume content, job-search criteria, and related metadata to automation and AI model providers that help generate summaries, search profiles, or job search results. We use these providers to perform the Service you request, not to sell your data or serve ads.

Service providers

We share information with service providers that help us operate the Service. These providers process information on our behalf:

• Cloudflare — application hosting, security, Workers runtime, and OAuth-related storage.
• Neon — managed Postgres database for account, job, resume, filter, and tracking records.
• Resend — transactional email delivery.
• n8n — workflow automation for resume processing and agent workflows.
• AI model providers — AI-assisted resume parsing, summaries, and agent workflows.
• Google and LinkedIn — only if you choose to sign in with those providers.
• Payment processors — if paid plans are introduced, billing information may be processed by a payment provider rather than stored directly by ApplyLogic.

Connected clients and MCP access

If you authorize an MCP client, that client may access ApplyLogic tools according to the scopes you grant, such as reading job search data or working with saved jobs. You are responsible for the clients you connect. You can revoke MCP access from your account settings.

Data retention

We retain account, resume, search, filter, saved-job, and MCP data for as long as your account is active or as needed to provide the Service. You can delete uploaded resumes and revoke MCP tokens in the product where those controls are available. You can request deletion of your account by contacting us; we will delete or de-identify associated personal information within 30 days, except where retention is required for security, fraud prevention, legal compliance, or backup recovery.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these rights, email us at the address below.

Security

We use safeguards such as TLS in transit, encrypted session cookies, salted password hashing, scoped OAuth access, and access controls. No system is perfectly secure; use a unique, strong password and notify us if you suspect unauthorized access.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

International transfers

The Service is operated from the United States. If you access it from another jurisdiction, your information may be transferred to, stored, and processed in the United States and other locations where our service providers operate.

Changes to this Policy

We may update this Policy from time to time. If we make a material change, we will update the "Last updated" date and, where appropriate, notify you by email or in the Service.

Contact

Questions about this Policy or your personal information can be sent to hello@sekora.ai.