Privacy Policy

1. Who we are

ApplyLink (https://applylink.id) lets recruiters and hiring teams ("HR users") turn a job posting into a shareable application link. Applicants open the link and upload a CV, and ApplyLink screens the CV against the job description. ApplyLink is operated by Rizky Adil Hakim, based in Indonesia ("we", "us").

This policy explains what personal data we collect, how we use it, who we share it with and the choices you have. Questions go to privacy@applylink.id.

2. Data we get from Google sign-in

HR users sign in with Google. We request only the email and profile scopes, and from your Google account we receive and store:

• your Google account ID,
• your email address (only if Google has verified it),
• your name, and
• the URL of your Google profile picture.

We use this data only to create your ApplyLink account, sign you in, show your name and picture in the app, and set your email as the reply-to address on rejection emails you choose to send. We do not store your Google access or refresh tokens, and we do not access your Gmail, Drive, Calendar, contacts or any other Google data.

ApplyLink's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models, and we do not let people read it except where you ask us to, where it is needed for security or where the law requires it.

3. Data HR users give us

• The job postings you paste, and the job details, screening criteria and settings you create from them.
• Rejection email templates, if you turn on automatic rejection.
• Your review decisions on applicants.

4. Data applicants give us

Applicants don't need an account. When you apply, we collect:

• your full name, email address and WhatsApp/phone number,
• your CV file (PDF or DOCX, up to 10 MB), its file name, and the text we extract from it.

From your CV we produce a screening result: a match score, a summary, and how you meet each criterion, with short quotes from your CV as evidence. Your application, CV and screening result are visible to the company that posted the job.

For applicant data, the hiring company decides how it is used in its recruitment, and we process it on that company's behalf. The screening result is a tool to help the company review applications; people at the company make the hiring decision.

5. How we use data

• To run the service: create links, accept and store applications.
• To screen CVs with AI against the job description and the company's criteria.
• To send a rejection email to an applicant, only when the hiring company has turned on automatic rejection and the application falls below its threshold.
• To keep the service secure and prevent abuse.

We don't use your data for advertising and we don't sell it.

6. AI screening

To read job postings and screen CVs, we send the job posting text, the screening criteria and the text of the CV to a third-party AI model provider. The model is instructed to ignore name, photo, age, gender, religion and marital status. We send only what screening needs, and never send your Google account data to an AI provider.

7. Who we share data with

We share data only with the service providers that help us run ApplyLink, and only as much as each needs:

• AI model providers, for screening (see section 6),
• cloud hosting and file storage, where the app and CVs are kept,
• an email delivery provider, for rejection emails.

Applicant data is shared with the hiring company that posted the job. We may also disclose data if the law requires it. We don't use analytics or advertising trackers.

8. Cookies

We use only strictly necessary cookies. They are httpOnly, so scripts on the page cannot read them:

• applylink_session keeps you signed in (7 days).
• applylink_claim lets you claim a link you created before signing in (24 hours).
• applylink_oauth_nonce protects Google sign-in against forgery (10 minutes).

9. How long we keep data

• Account data is kept while your account exists, and deleted when you ask us to delete your account.
• Applications, CVs and screening results are deleted 90 days after the job closes.
• Server logs are kept for up to 14 days.

10. Security

Data is sent over HTTPS. CVs are stored privately, and only the job's owner can open them, through links that expire after 5 minutes. No system is perfectly secure, but we work to protect your data and will tell affected users about a breach as the law requires.

11. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and similar laws, you can ask to access, correct or delete your personal data, or withdraw your consent. Email privacy@applylink.id from the address you used with ApplyLink. We reply within 30 days. Applicants can also contact the company they applied to.

You can also remove ApplyLink's access at any time from your Google account permissions.

12. Children

ApplyLink is meant for job seekers and employers, and is not directed at children under 18.

13. Changes

We will post any change to this policy on this page and update the effective date. If a change is significant, we will tell signed-in users in the app.

14. Contact

Rizky Adil Hakim, ApplyLink, Indonesia. Email: privacy@applylink.id. See also our Terms of Service.