Privacy Policy

1. Introduction

At BlitzApply, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume building platform.

We do not sell your personal data. Your resume content and professional information remain yours.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Profile picture, professional details
• Resume Content: Work history, education, skills, achievements, and other career information
• Payment Information: Credit card details (processed securely by third-party payment processors)
• Communications: Messages you send to us, feedback, support requests

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Log Data: Access times, error logs, performance data
• Cookies: See Section 8 for detailed cookie information

2.3 Information from Third Parties

• Authentication Services: If you sign in with Google or other providers, we receive basic profile information
• Service Providers: Analytics and infrastructure providers may provide aggregate usage information

3. How We Use Your Information

We use your information to:

• Provide Services: Create, store, manage, and optimize your resumes
• AI Processing: Generate AI-powered suggestions using Google Gemini AI
• Document Generation: Create and export professional resume documents
• Account Management: Authenticate users, manage subscriptions, process payments
• Version Control: Track and maintain revision history of your resumes
• Communication: Send service updates, newsletters, and respond to inquiries
• Analytics: Understand usage patterns and improve user experience
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and protect our rights
• Product Improvement: Develop new features and enhance existing ones using anonymized, aggregated data

4. How We Share Your Information

We do not sell your personal information.

We may share your information in the following circumstances:

4.1 With Your Consent

When you explicitly consent or direct us to share information (e.g., when you export or share your resume).

4.2 Service Providers

We share data with trusted third-party service providers who assist us:

• Cloud Infrastructure: Secure hosting and storage services
• AI Processing: Google Gemini AI for content generation and optimization
• Payment Processing: Secure payment gateways
• Analytics: Usage analytics and application monitoring
• Email Services: Transactional and marketing email delivery
• Authentication: Identity verification and access management

4.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights or property
• Investigate fraud or security issues
• Protect the safety of users or the public

4.4 Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.5 Aggregated Data

We may share anonymized, aggregated data that cannot identify you for analytics, research, and business purposes.

5. Data Storage and Security

We implement enterprise-grade security measures to protect your information:

• Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Infrastructure Security: Secure cloud hosting with regular security audits
• Monitoring: 24/7 security monitoring and incident response
• Regular Updates: Automated security patches and updates

However, no internet transmission is 100% secure. You acknowledge that you provide information at your own risk. We recommend maintaining your own backups of critical data.

6. AI Data Processing

When you use AI features, your resume content is processed by Google Gemini AI. Important points:

• AI processing is performed according to Google's privacy policies
• We may use anonymized, aggregated data to improve our AI models and services
• You can manage AI feature usage through your account settings
• AI-generated content should always be reviewed for accuracy

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request a copy of your personal information
• Export your data in a machine-readable format

7.2 Correction and Update

• Update or correct inaccurate information
• Modify your profile and resume content

7.3 Deletion

• Request deletion of your personal information
• Delete your account and associated data

7.4 Objection and Restriction

• Object to certain processing activities
• Restrict how we use your information

7.5 Withdraw Consent

• Withdraw previously given consent at any time
• Opt out of marketing communications

7.6 Exercising Your Rights

To exercise these rights, contact us through your account settings or our contact page. We will respond within the timeframes required by applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience. Here's what we use:

Most browsers automatically accept cookies, but you can modify your browser settings to decline cookies. Note that disabling cookies may affect your ability to use certain features.

9. Data Retention

We retain your information as follows:

• Active Account Data: Retained while your account is active
• Deleted Accounts: Personal data removed within 90 days of account deletion
• Backup Data: May persist in backups for up to 180 days
• Legal Retention: Data subject to legal holds retained as required by law
• Anonymized Data: Aggregated, de-identified data may be retained indefinitely

You can request early deletion of specific data through your account settings or by contacting us.

10. Children's Privacy

BlitzApply is not intended for users under 16 years of age. We do not knowingly collect information from children under 16.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information. If you believe we have inadvertently collected such information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where data protection laws may differ.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions where applicable
• Compliance with applicable transfer mechanisms

12. Do Not Track Signals

We do not currently respond to Do Not Track (DNT) signals because we do not track users across third-party websites to provide targeted advertising.

Learn more about DNT at allaboutdnt.com.

13. Region-Specific Rights

13.1 European Economic Area (GDPR)

If you are located in the EEA, you have additional rights under GDPR including:

• Right to lodge a complaint with a supervisory authority
• Right to object to processing based on legitimate interests
• Right to withdraw consent where processing is based on consent
• Right to data portability

Our legal basis for processing your data includes: contract performance, consent, legitimate interests, and legal compliance.

13.2 California Residents (CCPA/CPRA)

California residents have specific rights including:

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

To exercise these rights, contact us through our contact page.

13.3 Nevada Residents

Nevada residents have the right to opt-out of the sale of certain personal information. We do not currently sell personal information as defined by Nevada law. If our practices change, we will update this policy and provide opt-out mechanisms.

13.4 Other Jurisdictions

We respect privacy rights under all applicable laws. If you have questions about your rights under laws specific to your jurisdiction, please contact us.

14. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy with a new "Last updated" date
• Sending email notification to your registered email address
• Displaying a notice through the Services

Your continued use of the Services after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Through our contact page
• Via your account settings for privacy-related requests
• Through our support channels for general inquiries

We will respond to all requests within the timeframes required by applicable law.