Privacy Policy

Who we are

Applied & Ghosted (appliednghosted.com) is a job-application toolkit run by the independent developer of this project. For privacy questions or requests, contact us via GitHub.

What we collect

Account data. When you sign up, we store your email address and, if you provide it, your full name. You can sign in with email and password, a magic link, or Google OAuth — all handled through Supabase.

Google sign-in. If you choose "Continue with Google," Google shares the profile information you consent to — typically your name, email address, and profile picture. We use that only to create and manage your account. We do not use Google user data for advertising or sell it to third parties.

Usage and billing. We store your plan, usage quotas and credits, Stripe customer and subscription identifiers, and usage events (call type, status, scores, billed amount, estimated model cost, latency, and job details inferred from pasted text such as title, company, and country).

Your content. Resume PDFs you upload and job descriptions you paste are sent to our scoring and optimization engine to produce ATS scores and Harvard-style PDFs. Resumes are sensitive personal data — treat them accordingly, and only upload what you are comfortable sharing for that purpose.

Cookies. We use session cookies required for login (Supabase authentication). We also use Google Analytics (tag G-EHMSQ168RG) to understand how the site is used. Google may set cookies and collect device and usage data under Google's privacy policy. We do not run advertising pixels.

How we use it

We use your data to:

• Provide the service — scoring, optimization, and PDF generation
• Authenticate you and keep your account secure
• Process payments and manage your plan
• Improve the product internally (e.g., understanding usage patterns and costs)

We do not sell your personal data. We do not use your information — including Google account data — to train advertising models or serve ads.

Who we share it with

We use trusted processors to run the service. They handle data only as needed to perform their role:

• Supabase — authentication and database
• Stripe — payments (Ghost Pass one-time top-ups, Friendly Ghost Club monthly subscription, and overflow invoice items). Stripe processes card details; we do not store full card numbers.
• Anthropic — via our engine, for resume parsing and optimization
• Google Analytics — site usage measurement
• Hosting providers — for the website and API

We may also disclose information if required by law or to protect the rights and safety of users and the service.

Retention

We keep your data while your account is active and as needed to provide the service and meet legal obligations. When you delete your account in Settings, we delete your auth user; related usage data is removed via database cascades tied to your account.

Security

We take reasonable technical and organizational measures to protect your data. No online service can guarantee perfect security — if you have concerns, reach out via GitHub.

Your rights

You can access and update much of your account information in Settings. You can delete your account there at any time. For other privacy requests, contact us via GitHub.

Children

Applied & Ghosted is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, please contact us via GitHub.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the service after changes means you accept the updated policy.

Contact

Privacy questions or requests: github.com/eligoze/applied-and-ghosted