How we collect, use, and protect your information
ApplyFlux ("we", "us", "our") operates the ApplyFlux and AutoApply mobile applications and the applyflux.com website (together, the "Service"). This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have. By using the Service you agree to this Policy.
If you enable LinkedIn features, you sign in to LinkedIn inside an in-app browser. We capture the resulting session cookies (li_at, JSESSIONID) and store them on your device only, in the operating system's secure keychain (iOS Keychain / Android EncryptedSharedPreferences). These cookies never leave your device and are used solely to call LinkedIn on your behalf (search, Easy Apply). You can clear them at any time by signing out of LinkedIn in the app.
We do not sell your personal information. We share it only with the following categories of recipients:
Each provider processes data only on our instructions and under a written data-processing agreement.
When you submit an application, the personal information required by that posting (name, email, phone, resume, answers to screening questions, and the CAPTCHA token where applicable) is transmitted directly to the employer's ATS (LinkedIn, Greenhouse, Lever, Ashby, Workable, or SmartRecruiters). Their handling of that data is governed by their own privacy policies.
We may disclose information when required by law, court order, or to protect the rights, property, or safety of ApplyFlux, our users, or others.
If ApplyFlux is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before it becomes subject to a different privacy policy.
We retain your data for as long as your account is active and as needed to provide the Service. You can request deletion at any time (see Section 6). After you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g. billing records) or for legitimate fraud-prevention purposes.
All data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. LinkedIn session cookies are stored only in the device's secure keychain and never on our servers. We restrict internal access to personal data to authorized personnel who need it. No system is 100% secure, and we cannot guarantee absolute security.
You have the right to:
If you are in the EEA, UK, or Switzerland, you have additional rights under the GDPR, including the right to lodge a complaint with your local data-protection authority. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know and delete. We do not sell personal information as defined by these laws.
The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Our providers may process data in the United States and other countries. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers.
The Service integrates with LinkedIn, Google, Apple, and third-party job boards. Their handling of information they receive from you is governed by their own privacy policies, which we encourage you to read.
We may update this Policy from time to time. When we make material changes, we will notify you through the app or by email, and update the "Last Updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
For privacy questions, deletion requests, or to exercise your rights, contact us at: support@applyflux.com