Privacy Policy

This Privacy Policy explains how ApplyLah (“we”, “us”) collects, uses, discloses and protects your personal data, in line with Singapore’s Personal Data Protection Act 2012 (PDPA). By using ApplyLah you consent to the practices described here.

What we collect

Account data: your email address.
Profile & résumé data: the résumé/CV you upload and the information in it (work history, education, skills), plus the role preferences, salary expectations and work-eligibility details you tell us.
Usage data: the jobs you swipe, save and apply to, and basic technical/log data.
Payment data: handled by Stripe — we never see or store your full card number.

How we use it

To match you to relevant jobs, to generate AI-tailored résumés and cover letters, to operate your account and subscription, and to improve the service. We only use your data for these purposes (purpose limitation).

Who we share it with

We use trusted processors to run ApplyLah: Supabase (database & authentication), Stripe (payments), Vercel (hosting), and AI providers (OpenRouter / Google Gemini, OpenAI embeddings) which process your résumé and profile text to produce matches and tailored documents. We do not sell your personal data. When you apply, we send you to the employer’s own site, which has its own policy.

Retention

We keep your data for as long as your account is active, and delete or anonymise it within a reasonable period after you delete your account or when it is no longer needed for the purposes above.

Your rights

Under the PDPA you may request access to, or correction of, your personal data, and you may withdraw consent or request deletion of your account and data. Email us at applylah@gmail.com and we will respond within a reasonable time.

Security & data breaches

We use reasonable technical and organisational safeguards to protect your data. In the event of a data breach that meets the PDPA notification thresholds, we will notify the Personal Data Protection Commission (PDPC), and affected individuals where required, within the timeframes the PDPA requires.

Data Protection Officer

Our Data Protection Officer can be reached at applylah@gmail.com for any privacy questions, requests or complaints.

Changes

We may update this policy; we’ll change the “last updated” date above and, for material changes, notify you.