Privacy Policy | MassApply.ai

MASSAPPLY.AI — PRIVACY POLICY Effective Date: August 6th, 2026 This Privacy Policy explains how MassApply.ai ("MassApply," "we," "us," "our") collects, uses, discloses, stores, and otherwise processes personal information. 1. Information You Provide MassApply may process information you provide directly, including: Account Information • name; • email address; • password credentials or authentication tokens; • profile photograph • phone number • location; • timezone; • account preferences. Career and Resume Information • resumes; • contact details within resumes; • employment history; • employers; • dates of employment; • job titles; • responsibilities; • accomplishments; • professional skills; • technical skills; • certifications; • licenses; • education; • degrees; • institutions; • professional memberships; • publications; • portfolios; • websites; • GitHub links; • LinkedIn links; • veteran experience; • volunteer experience; • career summaries; • salary expectations; • work authorization information if voluntarily entered; • security-clearance information if voluntarily entered; • language skills; • geographic preferences; • remote/hybrid preferences; • career preferences; • industries; • target roles; • seniority preferences; • schedule preferences; • employer exclusions; • job-search notes. Application Information • job descriptions; • job URLs; • employer names; • applications; • tailored resumes; • cover letters; • screening-question responses; • AI-generated materials; • user edits; • selected AI modes; • application statuses; • interview status; • offer status; • rejection status; • notes; • application dates; • application history. AI Interaction Data • prompts; • natural-language instructions; • resume-edit instructions; • messages entered into AI interfaces; • requested transformations; • user feedback; • generated responses; • selected or rejected outputs; • regenerate actions; • comparison activity. Support Information • support emails; • bug reports; • screenshots; • uploaded files; • feedback; • survey responses; • communications with MassApply. 2. Information Collected Automatically MassApply and service providers may automatically collect: • IP address; • browser type; • browser version; • operating system; • device type; • device identifiers; • language; • timezone; • approximate location derived from IP; • referral source; • pages visited; • button clicks; • navigation paths; • feature usage; • session duration; • timestamps; • login activity; • authentication events; • error logs; • crash reports; • network information; • API request metadata; • response times; • job-search activity; • pipeline usage; • AI mode usage; • PDF generation activity; • subscription tier; • package usage; • device/browser compatibility information; • cookie identifiers; • analytics identifiers; • fraud and abuse indicators; • rate-limit events. Website Analytics MassApply uses Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC ("Google"), to understand how visitors and users interact with our website and product. Depending on your settings and how you use the Services, GA4 may process information such as pages viewed, links and buttons clicked, approximate geographic region (derived from IP address), browser and device characteristics, referral source, session duration, and custom interaction events (for example, account signup, login, free demo usage, checkout initiation, and completed subscription purchases). GA4 uses cookies and similar technologies to distinguish browsers and sessions. MassApply configures analytics to measure product usage, marketing effectiveness, and conversions. We do not send resume text, cover letter content, job application answers, email addresses, names, or other direct identifiers in Google Analytics event parameters. For subscription revenue reporting, our servers may send Google a pseudonymous internal account identifier and transaction metadata (such as plan, amount, and currency) when a payment completes — not your payment card number. You can learn how Google uses data from sites and apps that use Google services at https://policies.google.com/technologies/partner-sites. You may opt out of Google Analytics in your browser using Google's opt-out add-on: https://tools.google.com/dlpage/gaoptout. Cookies and Similar Technologies MassApply and our service providers use cookies and similar technologies for essential operations (such as authentication, session management, and security) and for analytics where enabled. Analytics-related cookies may include Google Analytics identifiers (for example, _ga and _ga_*), which help recognize returning browsers and measure site usage. We may also use short-lived cookies to enforce fair-use limits on free guest demos (for example, one free job search or resume preview per browser). You can control cookies through your browser settings; disabling essential cookies may affect login and core functionality. MassApply does not currently use third-party advertising cookies for cross-site behavioral advertising. 3. Payment Information Payments are processed by Stripe. MassApply may receive transaction-related information such as: • name; • email; • Stripe customer ID; • subscription ID; • price/plan; • payment status; • invoice status; • billing period; • partial payment-method identifiers; • country; • tax information; • transaction amount; • payment-failure status. MassApply does not store complete payment card numbers; Stripe collects and processes payment details. Stripe itself may process more extensive transaction, device, fraud, and payment information under its policies. 4. Information From Third Parties MassApply may receive information from: • authentication providers; • Stripe; • job-board APIs; • public job postings; • company ATS platforms; • search providers; • referral partners • analytics providers • browser-extension integrations; • public career pages. 5. How We Use Information MassApply may process information to: • create and authenticate accounts; • operate the Services; • parse resumes; • store resume versions; • generate tailored resumes; • generate cover letters; • generate screening answers; • provide job recommendations; • execute natural-language job searches; • rank or sort jobs for the user; • calculate informational fit scores; • calculate ATS-oriented metrics; • provide gap analyses; • generate resume strategies; • generate PDF documents; • save application history; • track applications; • provide AI editing; • maintain subscriptions; • prevent abuse; • secure accounts; • investigate fraud; • debug errors; • improve UX; • measure feature performance; • monitor reliability; • provide customer service; • perform internal analytics; • measure website traffic, conversion funnels, and marketing effectiveness (including through Google Analytics); • enforce Terms; • comply with law; • maintain accounting records; • protect rights and safety. 6. Product Improvement MassApply may analyze usage metadata, aggregate statistics, feature interactions, performance information, and user feedback to understand how the Services are used and improve UX. We do not use the contents of your resume, cover letter, or application materials to train third-party foundation models for the benefit of unrelated customers unless you expressly opt in. OpenAI's business/API default is that inputs and outputs are not used for model training unless the customer opts in. 7. Disclosure of Information MassApply may disclose personal information to categories of service providers including: • cloud/database/storage providers; • AI model providers; • payment processors; • hosting providers; • authentication providers; • job-data/API providers; • email providers; • analytics providers • error-monitoring providers • customer-support providers • security/fraud providers; • professional advisers; • law enforcement where legally required; • potential acquirers in a corporate transaction. 8. Named Service Providers Current examples may include: Supabase — database, authentication, storage, and related backend infrastructure. OpenAI — AI inference and generation. Stripe — billing, payment processing, subscription management, fraud-related payment services. Google (Google Analytics 4) — website and product usage analytics, conversion measurement, and aggregated traffic reporting. Google's privacy policy: https://policies.google.com/privacy 9. We Do Not Sell Personal Data MassApply does not sell personal information for monetary consideration. MassApply does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws. 10. Sensitive Information Users should avoid uploading highly sensitive information not required for job-search functionality. Potentially sensitive information may appear in resumes or application answers, including: • citizenship; • immigration/work-authorization information; • disability information; • veteran information; • ethnicity; • religious information; • health information; • government identifiers; • financial information; • precise location; • union membership; • background information. MassApply does not require many such categories for core resume tailoring. 11. Data Minimization MassApply seeks to collect information reasonably necessary to operate, secure, improve, and support the Services. 12. Retention MassApply retains information for periods reasonably necessary for the purposes described in this Privacy Policy, including: • account data: while the account remains active and for a reasonable period afterward; • resumes/application materials: until deleted by the user or account deletion, subject to backups and legal retention; • subscription/accounting records: as required for business, tax, payment, fraud, and legal purposes; • logs: for a period reasonably necessary for security, diagnostics, and abuse prevention; • analytics data: according to the event data retention period configured in our Google Analytics 4 property (see Google's documentation for current options); • support records: as reasonably necessary to resolve issues and preserve business records; • backups: deleted through normal backup rotation. 13. Security MassApply uses administrative, organizational, and technical safeguards appropriate to the nature of the Services, which may include: • encryption in transit; • encryption at rest provided by infrastructure vendors; • authentication; • access controls; • secrets management; • database row-level security; • least-privilege access; • logging; • backups; • dependency maintenance; • rate limiting. Supabase states its hosted platform maintains SOC 2 Type 2 controls covering its backend services. No security system is perfectly secure. If MassApply becomes aware of a security incident affecting personal information, we will provide notice where required by applicable law. 14. International Processing Providers may process information outside your state or country. 15. Privacy Rights Depending on location and applicable law, users may have rights to: • access; • correction; • deletion; • portability; • objection; • restriction; • withdrawal of consent; • opt out of targeted advertising; • opt out of sale; • opt out of certain analytics or tracking where required by law; • appeal certain privacy decisions. Where applicable, you may also limit analytics collection through browser cookie controls or Google's Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout). 16. Colorado Users Once applicable thresholds or specific provisions are triggered, Colorado privacy law may provide rights concerning access, correction, deletion, portability, targeted advertising, and sale opt-outs. 17. California Users If you are a California resident, you may have additional rights under applicable California privacy law, including access, deletion, and opt-out rights where applicable. Contact us to submit a request. 18. EEA/UK Users If you are located in the European Economic Area or the United Kingdom, you may have additional rights under applicable data protection law, including the right to lodge a complaint with a supervisory authority. Contact us for more information. 19. Children MassApply is not directed to children under 18, and we do not knowingly allow individuals under 18 to create accounts. 20. Account Deletion You may request account deletion through your account settings or by contacting us. Certain records may be retained for: • fraud; • security; • legal claims; • tax/accounting; • payment disputes; • and legal compliance. 21. Law-Enforcement Requests MassApply may preserve or disclose information where required by valid legal process or where otherwise permitted by law to protect rights, safety, or security. 22. Business Transfers Information may transfer as part of: • merger; • acquisition; • financing; • reorganization; • bankruptcy; • sale of assets. Any successor remains subject to applicable law. 23. Changes We may update this Privacy Policy from time to time. When we do, we will revise the Last Updated date above. Material changes may be communicated through the Services or by email where required by law. 24. Contact Shred Lord LLC massapplysupport@gmail.com