Privacy Policy

Your privacy matters. This policy explains what data ApplyMaster collects, why, who can access it, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for processing is ApplyMaster (see the Imprint for full contact details).

2. What data we process

• Account data: e-mail address and (optionally) phone number.
• Profile data you upload: your CV/résumé, photo, signature, and personal details (name, contact, education, work experience, skills, etc.).
• Job ads you submit, and the application documents we generate for you.
• Billing data: token purchases and transaction records.

3. Why we process it (legal basis)

We process your profile data solely to generate your tailored application documents (Lebenslauf, Anschreiben and e-mail). Legal basis: your consent (Art. 6(1)(a) GDPR), given at registration, and the performance of our service contract (Art. 6(1)(b) GDPR).

4. AI processing & sub-processors

To generate and (for voice input) transcribe your documents, the relevant content is processed by trusted AI providers acting as our processors. The application itself runs on our own server in the EU.

5. Access by our team

ApplyMaster staff can access and view your data for the purposes of operating the service — i.e. to process your request and to check for problems (for example a wrongly uploaded photo or signature, or an incorrect document). By agreeing, you explicitly consent to this access. We never sell your data or use it for unrelated purposes.

6. Security

Your data is stored securely with access controls and encryption in transit (HTTPS). We apply appropriate technical and organisational measures to protect it.

7. Deletion when you close your profile

You can close your profile at any time. When you do, all of your personal data and documents are permanently deleted — your CV, generated résumés and cover letters, photo, signature and personal details. Nothing personal remains accessible.

8. Retention of billing records

For legal accounting reasons (e.g. §147 AO, §257 HGB), billing and transaction records are retained for the statutory period even after you close your profile. These records contain no application content (no CV, photo or documents) — only what is legally required for bookkeeping.

9. Returning users

If you return after closing your profile, we will ask for your consent again before you start. We do not silently re-identify you from old data.

10. Your rights

You have the right to access, rectify, erase, restrict or port your data, to object to processing, and to withdraw your consent at any time. You may also lodge a complaint with a data protection supervisory authority.

11. Cookies & analytics

We set one strictly necessary cookie: the session cookie that keeps you logged in. It is not used to track you and needs no consent.

We also use Google Analytics 4 (Google Ireland Ltd.) to understand how the site is used — how many people visit, which pages they read, roughly where they come from. Analytics runs only if you agree to it: nothing is loaded and no identifier is stored until you press «Accept» on the banner. If you decline, no Google script is loaded at all.

• What it processes: a randomly generated identifier stored on your device, your shortened IP address, pages viewed, approximate location (country/city level), device and browser type, and the site that referred you.
• Legal basis: your consent — Art. 6(1)(a) GDPR and § 25(1) DDG.
• Transfer: data may be processed by Google LLC in the USA under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Retention: analytics data is deleted after 14 months.
• Withdrawing: you can change your mind at any time — use cookie settings. Withdrawal takes effect immediately and does not affect what was collected before.

Where the banner appears: visitors in the EU/EEA are always asked first, because that is what the law there requires. Visitors from outside that area are not shown the banner and analytics runs on the terms described above; it can still be turned off from the cookie settings link.

We run no advertising, no advertising cookies and no tracking pixels.

12. Contact

For any data request, contact us via the details in the Imprint.