Privacy Policy

ApplyVerdict is run by the founder, an individual based in Morocco. For anything about your data, email us.

Contact: hello@example.com

When you click Analyze, your browser sends us:

• the CV text you pasted
• the job post you pasted
• the country you picked (used only to check whether you can apply, never to choose an AI provider)

Our server passes this text to one AI provider (see below) to produce the analysis, then sends it back again when you ask for drafts. We don't write your CV, the job post or the results to our database. Your results live in your browser tab and are gone when you close it.

• A scrambled IP address, to count your free analyses. We combine your IP address with a secret value and the date, then hash it. The result changes every day, so it can't be linked across days, and it can't be turned back into your IP address. These counters are deleted after about 7 days.
• A technical record of each AI call: which feature ran, which provider and model answered, the prompt version, the number of tokens, how long it took, the estimated cost, whether the answer was valid, and any error code. It contains no CV text and no job text. These records are deleted after 90 days.
• Hosting logs. Cloudflare, our host, processes your IP address and request details to deliver the site and block attacks. Error logs from our app are kept by Cloudflare for a short time to help us fix problems.

If you tick "Remember my CV on this device", your CV is saved in your browser's local storage, on your device only. We also save the country you picked and your light or dark theme choice there. Untick the box, or clear your browser data, to delete them. Nothing in local storage is sent to us unless you run an analysis.

We don't set cookies today. Cloudflare may set a strictly necessary security cookie to tell people from bots. When accounts launch, we'll use a login cookie to keep you signed in.

We pick the provider from the country Cloudflare detects from your internet connection. The country you choose in the form doesn't change this. If we can't tell where you are, we treat you as being in the EEA, UK or Switzerland.

• Google Gemini API, free tier: the main provider for visitors outside the EEA, UK and Switzerland. Because this is Google's unpaid tier, Google may use the text you submit to improve its products, and human reviewers may read it. This is exactly why we never send text from the EEA, UK or Switzerland to it.
• Cloudflare Workers AI: used for visitors in the EEA, UK and Switzerland, and as a backup when Gemini is busy. Cloudflare says it doesn't use customer content to train its models.
• Anthropic Claude (coming with paid plans): for paid users. Anthropic doesn't train its models on data sent through its paid API by default.

We don't train any AI models on your data ourselves.

Accounts aren't available yet. When they launch, we'll store your data with Supabase, in its EU region:

• your email address, and your name if you sign in with Google
• your profile: CV text, the profile we build from it, country, target roles and preferences
• jobs you save, your analyses and drafts, your applications and notes, and any feedback you send

We keep this until you delete your account. You will be able to delete your account and all of this data from your settings, or by emailing us.

Payments are processed by Dodo Payments, our Merchant of Record. Dodo collects your card or payment details and your billing address; we never see your card number. Dodo tells us the payment ID, the plan, the amount, the currency and the payment status, so we can turn your pass on. We keep these payment records for as long as tax and accounting rules require, even if you delete your account (they are then no longer linked to it).

• Cloudflare: hosting, security and Workers AI.
• Google: the Gemini API (see above).
• Supabase (EU region): our database for usage counters and AI call records, and later for accounts.
• Resend (later): sending emails, such as login links and the optional daily digest.
• Dodo Payments (later): checkout, tax and receipts.
• Anthropic (later): the AI model for paid users.

Some of these companies process data outside your country, including in the United States. We rely on their standard safeguards for international transfers, such as the EU's Standard Contractual Clauses.

• To give you the analysis and drafts you asked for.
• To enforce the free daily limits and stop abuse (our legitimate interest in keeping a free service running).
• To watch costs, errors and quality, using the technical records above (our legitimate interest).
• Later, to run your account, process payments and keep the records the law requires.

• We don't sell or rent your data.
• We don't show ads or use advertising trackers.
• We don't use analytics cookies.
• We don't send applications or messages for you. You decide what to send.

You can ask us to:

• show you the data we hold about you (access), and give you a copy (portability)
• correct it
• delete it
• stop using it for a purpose you object to (objection), or limit how we use it

To use any of these rights, email hello@example.com. We reply within 30 days. If you use the service without an account, we usually hold nothing that identifies you, because the scrambled IP changes daily and AI call records contain no text.

If you're unhappy with our answer, you can complain to a data protection authority: the CNDP in Morocco, or the authority where you live (for example, in the EU or UK).

ApplyVerdict is not for anyone under 16. If you think someone under 16 has sent us personal data, email us and we'll delete it.

When we change this policy, we'll update the date at the top. If a change matters, we'll say so on the site, and once accounts exist, we'll email account holders.

See also our Terms of Service and Refund Policy.