Privacy Policy
Last updated: March 2026
Overview
AppliCraft is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our web application and browser extension.
Data Collection
The AppliCraft extension collects job posting data only when you:
- Click the extension icon
- Click "Capture Job Details"
The extension does not perform any automatic tracking or background data collection. For information about analytics on the web application, see the Analytics & Error Tracking section below.
Data We Collect
When you capture a job posting, we collect:
- Job title, company name, and description
- Job location and requirements
- Job posting URL
- Timestamp of capture
Data We DO NOT Collect
- Browsing history
- Personal information from other websites
- Passwords or credentials
- Any data from non-job-posting pages
- Data without your explicit action
How We Use Your Data
Captured job data is:
- Sent to our server for AI-powered parsing
- Stored temporarily (1 hour) to pre-fill your job detail form
- Used to create your job application record (if you submit the form)
- Used to generate personalized application materials
Third-Party Services
We use the following third-party services:
- Anthropic Claude AI - For intelligent job data parsing and application material generation
- OpenAI (ChatGPT) - For AI-powered analysis generation
- Supabase - For secure data storage (PostgreSQL)
- Resend - For authentication emails (magic link sign-in)
- Loops - For email communications and newsletters
- PostHog - For product analytics and session recording (EU-hosted)
- Sentry - For error tracking and performance monitoring
Note: We may integrate additional AI providers (such as Google Gemini) in the future to improve our services. Any new providers will be added to this list.
Analytics & Error Tracking
We use PostHog (product analytics) and Sentry (error tracking) to understand how users interact with the web application and to identify and fix issues.
What we collect:
- Page views and navigation patterns
- Feature usage (which buttons clicked, forms submitted)
- Session duration and frequency
- Device type and browser (no fingerprinting)
- Error reports and performance metrics
Session recording: We record user sessions to help diagnose usability issues. All form input values (including passwords, email addresses, and text you type) are automatically masked and never captured. Session recordings show interaction patterns (clicks, scrolls, navigation) but not the content you enter into forms.
What we do NOT collect via analytics:
- Form input values (masked in session recordings)
- Personal documents or application content
- Browsing activity outside of our application
Your control:
- We ask for your explicit consent before enabling analytics and session recording. You can accept or decline via the banner shown on your first visit.
- Your preference is stored in your browser and can be changed by clearing site data.
- Enabling "Do Not Track" in your browser also disables analytics regardless of your banner choice.
- Contact us to request deletion of your analytics data.
PostHog data is hosted in the EU (eu.posthog.com). Sentry error tracking is active for all users to maintain application reliability.
Your Rights
You have the right to:
- Delete your captured data at any time
- Request a copy of your data
- Opt out of analytics and session recording via the consent banner or by enabling Do Not Track in your browser
- Opt out of extension data collection by uninstalling the extension
- Request deletion of your account and all associated data
Data Access & Visibility
Your data is accessible only to:
- You - Full access to your own data through the application
- Administrators - Users with administrative roles may access user data for the purpose of troubleshooting technical issues and providing support
The application owner also has direct access to the database where user data is stored. This access is used solely for application maintenance, troubleshooting, and ensuring service quality.
AI Training Data
Your data is NOT used to train AI models.
We use commercial API access from AI providers (Anthropic Claude, OpenAI, and potentially others). Under the terms of these commercial API agreements:
- Your prompts and responses are not used to train or improve AI models
- Your data is not shared with other customers
- AI providers may temporarily retain data for abuse monitoring and legal compliance (typically up to 30 days)
We do not opt in to any data sharing programs with AI providers, and we do not use your data to train custom AI models.
Data Retention
Active accounts: Your data is retained for as long as your account remains active. This includes your profile information, captured job postings, generated materials, and application history.
Beta testers: After the beta testing period ends, your account will remain active and you will retain any unused credits for future use.
Account deletion: When you request account deletion:
- Your account will be deactivated immediately
- You will have a 30-day recovery window during which your account can be restored
- After 30 days, your account and all associated data will be permanently deleted
You can delete your account from your profile settings. If you need assistance, contact us at support@applicraft.ai.
Data Security
We implement industry-standard security measures to protect your data, including encrypted data transmission (HTTPS), secure authentication, and regular security audits.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: support@applicraft.ai
- Website: https://applicraft.ai