Privacy Policy

Your data, your control. In plain English — and in detail.

Effective date: 6 July 2026.

This Privacy Policy explains how ApplyBandit (“ApplyBandit”, “we”, “us”, “our”) collects, holds, uses, discloses, secures, retains and deletes your personal information when you use our website and services (the “Service”). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It describes the actual posture of the product — not boilerplate.

1. Information we collect

We only collect what we need to run the Service for you. Depending on how you use ApplyBandit, this includes:

  • Account & identity data — your name, email address, password (stored only as a salted hash by our authentication layer), and, if you sign in with a third party, the basic profile that provider returns.
  • Profile & career information — your work history, education, skills, locations, salary expectations, seniority, notice period, and preferences.
  • Sensitive information — your work-rights / visa status, and any other sensitive details you choose to add. We collect sensitive information only with your consent and only to deliver features you ask for (see section 4).
  • Documents & writing style — the résumés and documents you upload or create, cover material, and writing samples you provide so drafts can be prepared in your own voice.
  • Job targets & activity — the companies and roles you monitor, your saved searches, the listings we surface for you, and the applications you prepare, review, track and mark as submitted.
  • Billing information — your plan and subscription status. Card and payment-instrument details are collected and processed directly by our third-party payment processor; we do not receive or store your full card number.
  • Technical & usage data — device and browser information, IP address, pages viewed and actions taken, and diagnostic/error data, collected via cookies and similar technologies (see section 8). Optional analytics are only collected after you consent.
  • Communications — messages you send us (for support, feedback or disclosure) and our replies.

2. How we collect it

  • Directly from you — when you create an account, complete your profile, upload documents, set preferences, or contact us.
  • Automatically — as you use the Service, through cookies and usage logging (analytics are consent-gated).
  • From public third-party sources — we monitor employers’ public careers pages and public job aggregators on your behalf to surface roles. We collect factual listing details (such as title, company, location and a link) from publicly available sources; we crawl politely and observe site rules (see section 9).

3. How and why we use it

We use your information to provide, secure and improve the Service, specifically to:

  • create and manage your account and authenticate you;
  • monitor the companies and roles you choose and match them to your profile;
  • prepare application documents and tailored drafts in your writing style, and optimise them for applicant-tracking systems;
  • help you review, organise, track and submit applications yourself;
  • process your subscription, payments and plan limits;
  • provide support and respond to your requests;
  • keep the Service secure, prevent fraud and abuse, and enforce our terms;
  • understand and improve how the Service is used (optional analytics only, and only with your consent); and
  • comply with our legal obligations.

Where the law requires a lawful basis or consent (including for sensitive information and optional analytics), we rely on your consent, and you can withdraw it at any time.

4. Sensitive information

Work-rights / visa status is sensitive information under the Privacy Act. We collect it only with your consent and use it solely to reflect your eligibility in your profile and application materials. We practise data minimisation: when a task needs to process your information, we send only the specific fields that task requires, never raw identifiers we don’t need. You can update or remove this information at any time.

5. Automated preparation of your documents

ApplyBandit uses automated tools to draft and optimise application documents in your writing style. These tools produce drafts that you review, edit and choose to submit yourself. We do not use them to make decisions that produce legal or similarly significant effects about you, and nothing is ever submitted to an employer or job board without your review (see our Terms of Service).

6. When we disclose it

We do not sell your personal information, and we never trade it. We disclose it only:

  • to service providers who help us run the Service — namely categories of providers for cloud hosting and database infrastructure, payment processing, transactional email delivery, and (where you consent) product analytics and error monitoring. These providers are bound by contract to protect your information and to use it only to provide services to us, on our instructions;
  • where required by law — to comply with a law, court order, or lawful request from a regulator or authority;
  • to protect rights and safety — where reasonably necessary to prevent harm, fraud or abuse, or to enforce our terms; and
  • in a business transfer — if we are involved in a merger, acquisition or sale of assets, subject to this policy continuing to protect your information.

7. Overseas storage and disclosure

Some of our service providers may store or process information on servers located outside Australia. Where that happens, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles and this policy.

8. Cookies, analytics and consent

We use strictly necessary cookies to run the site (for example, to keep you signed in and remember your preferences). Optional cookies and analytics — used to understand and improve the Service — are only set after you accept them via our consent banner, and you can decline or change your choice at any time. See our Cookies Policy for the categories and details.

9. Job listings and third-party sources

We surface roles from employers’ public careers pages and from public job aggregators. Where a listing comes from an aggregator, we show factual details with attribution and link you out to the original source rather than republishing its full text. Applying for a role happens on the employer’s or job board’s own site, under their terms and privacy practices — we encourage you to review them. We monitor politely: we respect published site rules (such as robots.txt), rate-limit our requests, and collect facts only.

10. How we secure it

Every record is isolated to your account using database row-level security, and data is encrypted in transit and at rest. Privileged keys are held only on our server tier and never shipped to the browser or the companion extension, which authenticates with a short-lived, account-scoped, revocable token. See our Security overview for more.

11. How long we keep it

We retain your personal information while your account is active and for as long as needed to provide the Service. We keep limited records for longer where necessary to meet legal, tax, billing or dispute-resolution obligations. When information is no longer needed, we delete or de-identify it. You can delete your data at any time (see below).

12. Your rights and choices

Under the Australian Privacy Principles you may:

  • access the personal information we hold about you;
  • correct information that is inaccurate, out of date or incomplete;
  • export your data — you can download all of your data as JSON from Settings → Privacy & data;
  • delete your account — from the same screen, a hard cascade removes your records and stored files and cancels monitoring, leaving no residual data;
  • withdraw consent for sensitive information or optional analytics at any time; and
  • make a complaint (see below).

You can exercise most of these directly in-app, or contact us at privacy@applybandit.com. We’ll respond within a reasonable time and may need to verify your identity first.

13. Children

ApplyBandit is intended for adults in the workforce and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we’ll delete it.

14. Changes to this policy

We may update this policy from time to time. We’ll post the updated version here with a new effective date, and where changes are material we’ll take reasonable steps to notify you.

15. Contact and complaints

Questions, requests or privacy complaints: privacy@applybandit.com. We take complaints seriously and will work with you to resolve them. If you’re not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.