Privacy Policy

1. Introduction

Application Butler ("we," "our," or "us") operates the website located at applicationbutler.ai and the Application Butler platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use the Service, we may collect:

• Name and email address (via Manus OAuth authentication)
• Resume content, including work history, education, skills, and contact information
• Cover letter content and job application materials
• Job preferences (title, location, salary range, employment type)
• Third-party API keys you choose to store (e.g., RapidAPI key), which are encrypted at rest using AES-256-CBC
• Payment information processed by Stripe (we do not store raw card numbers)

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical information, including:

• Log data (IP address, browser type, pages visited, time and date of visits)
• Usage data (features used, actions taken within the platform)
• Device information (operating system, screen resolution)
• Analytics data via our self-hosted analytics platform (Umami), which does not use cookies and does not track you across sites

2.3 Information from Third Parties

We receive basic profile information (name, email) from Manus OAuth when you authenticate. We receive subscription and payment status from Stripe. We do not purchase or receive data from data brokers.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process your job applications through the Auto-Apply engine on your behalf
• Generate AI-powered resume improvements, cover letters, and match scores using your resume and job description data
• Send transactional emails (post-apply summaries, weekly digest, account notifications)
• Process payments and manage your subscription through Stripe
• Respond to your support requests and communications
• Monitor and analyze usage patterns to improve the Service
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your resume content or job application data to train AI models beyond the immediate processing required to deliver the Service.

4. How We Share Your Information

We share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors who help us operate the Service, including Stripe (payments), Manus (authentication and infrastructure), and OpenAI (AI processing). These providers are contractually bound to protect your data.
• Job Applications: When you use Auto-Apply, your resume and application materials are submitted to third-party job boards and employer application systems. By using Auto-Apply, you authorize us to submit this information on your behalf.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
• Business Transfers: If Application Butler is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes. Resume content and job application records are retained for the duration of your account and deleted upon account deletion.

6. Data Security

We implement industry-standard security measures to protect your information, including AES-256-CBC encryption for sensitive stored credentials, TLS encryption for all data in transit, and access controls that limit who within our organization can access your data. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a machine-readable format.
• Opt-out of emails: Unsubscribe from non-transactional emails via the Settings page or the unsubscribe link in any email.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking

We use a session cookie to maintain your authenticated state after login. This cookie is essential for the Service to function and cannot be disabled. We use Umami Analytics, a privacy-respecting analytics platform that does not use cookies, does not track users across websites, and does not collect personally identifiable information. We do not use advertising cookies or third-party tracking pixels.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it promptly.

10. International Data Transfers

Application Butler is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date at the top. For significant changes, we will send an email notification to registered users. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: