Privacy Policy

This Privacy Policy explains how ApplyLah (“we”, “us”) collects, uses, discloses and protects your personal data, in line with Singapore’s Personal Data Protection Act 2012 (PDPA). By using ApplyLah you consent to the practices described here.

What we collect

Account data: your email address.
Profile & résumé data: the résumé/CV you upload and the information in it (work history, education, skills), plus the role preferences, salary expectations and work-eligibility details you tell us.
Usage data: the jobs you swipe, save and apply to, and basic technical/log data.
Email preferences: when we emailed you, whether you replied, whether you separately joined the weekly ApplyLah email, and whether you unsubscribed. We do not store the content of replies forwarded to our inbox.

How we use it

To match you to relevant jobs, to generate AI-tailored résumés and cover letters, to operate your account, and to improve the service. We may also email you about your account, ask for product feedback, or send relevant job matches. If you explicitly opt in, we may also send a weekly email with job-search tips and Singapore hiring updates. Every automated or newsletter email includes an unsubscribe link. We only use your data for these purposes (purpose limitation).

Who we share it with

We use trusted processors to run ApplyLah: Supabase (database & authentication), Vercel (hosting), and Brevo and Zoho Mail (email delivery and reply handling), OpenAI which process your résumé and profile text to produce matches and tailored documents. Careerjet supplies some listings through its publisher feed. We don’t send it your résumé or ApplyLah profile. If you open one of those listings, Careerjet and the employer site receive the normal browser information needed to load the page. We do not sell your personal data.

Retention

We keep your account and profile data while your account is active. Prepared application answers, generated résumé files and private form screenshots are deleted after 30 days. If you delete your account, we also remove its database records and stored files.

Your rights

Under the PDPA you may request access to, or correction of, your personal data, and you may withdraw consent or request deletion of your account and data. Email us at applylah@gmail.com and we will respond within a reasonable time.

Security & data breaches

We use reasonable technical and organisational safeguards to protect your data. In the event of a data breach that meets the PDPA notification thresholds, we will notify the Personal Data Protection Commission (PDPC), and affected individuals where required, within the timeframes the PDPA requires.

Data Protection Officer

Our Data Protection Officer can be reached at applylah@gmail.com for any privacy questions, requests or complaints.

Changes

We may update this policy; we’ll change the “last updated” date above and, for material changes, notify you.