Privacy
Last updated 29 October 2026
Your job search is personal. We keep only what we need to fill applications for you, we never sell it, and you can take it or delete it anytime.
What we store
- Your account: your email address.
- Your profile and resumes: the resume you upload, the resumes you edit with the AI, and your job preferences.
- Your answer library: answers you give when an application asks something new, so you're not asked twice.
- Your application log: which jobs you applied to and when, so you can keep track and see how many applications you have left.
This is stored with Cloudflare (D1 databases and R2 file storage).
What we don't store
- Job-site passwords. When a job site needs an account, the extension creates a password and keeps it only in your browser. It is never sent to us.
- Your card details. Stripe handles payments.
- The pages you visit. The extension only reads application forms when you ask it to fill one.
What the AI sees
To fill a form, we send Anthropic (the maker of Claude) the form's field labels and options, plus the parts of your profile needed to answer them. We don't send the rest of the page. Anthropic processes this to give us an answer; it doesn't use it to train its models.
Who else handles your data
- Cloudflare hosts our service and stores your data.
- Anthropic runs the AI that fills forms and edits your resume.
- Stripe takes payments as merchant of record (through Stripe Managed Payments), so it also handles sales tax and receipts.
That's the full list. We don't sell your data, share it with advertisers or show ads.
Export or delete it anytime
In Settings you can download everything we hold about you, or delete your account. Deleting removes your profile, resumes, answers, log and files, and cancels any renewal. It happens straight away.
How long we keep it
We keep your data while your account is open. When you delete your account, it's gone from our live systems right away and from backups within 30 days. Stripe keeps payment records for as long as tax law requires.
Your rights
We follow the Australian Privacy Principles. If you're in the EU or UK, GDPR and UK GDPR give you the right to access, correct, delete and move your data, and to object to how we use it; we process it to provide the service you signed up for. If you're in California, the CCPA gives you similar rights, and we don't sell or share your personal information. Email us to use any of these rights, or to complain. You can also contact your local privacy regulator, such as the OAIC in Australia.
Children
OhApply isn't for anyone under 16. If we learn an account belongs to someone under 16, we delete it.
Changes
If we change how we handle your data, we'll update this page and email you before it takes effect.