Privacy policy

Last updated: 2 July 2026

letsapply.now helps you build and tailor CVs. That means you trust us with career data — this page explains plainly what we store, why, where it goes, and how you stay in control. We follow the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Who is responsible

NC Labs, Zürich, Switzerland (“we”) is the data controller for letsapply.now. Contact: klaus@nclabs.ch.

What we store, and why

• Account data — name, email, username, a hashed password (never the password itself) or your social-login identifier (GitHub, Google or LinkedIn). Basis: performing our contract with you.
• Profile & CV data — experiences, education, skills, photos, documents and anything you type or import (from GitHub, LinkedIn exports, Google Scholar or uploaded files). You choose what goes in. Basis: performing our contract.
• Job & application data — jobs you save, applications you track, notes and contacts you add. Basis: performing our contract.
• Billing data — if you subscribe, Stripe processes your payment details; we store only your plan, subscription status and Stripe customer reference. Basis: performing our contract, legal obligations.
• Technical logs — standard server logs (IP address, timestamps) kept briefly for security and debugging. Basis: legitimate interest in running a secure service.

AI processing — transparent by design

When you use an AI feature (CV extraction, tailoring, the hiring panel, match scores, cover letters), the relevant CV text and job description are sent to Anthropic’s Claude API to generate the result. API inputs and outputs are not used to train Anthropic’s models. AI output is a draft for you to review — always check it before sending a CV to an employer.

Where your data lives

Application data is stored in our database and file storage hosted in the EU; our compute runs in Frankfurt, Germany (Vercel). Some processors operate from the US under appropriate safeguards (EU Standard Contractual Clauses / the EU–US and Swiss–US Data Privacy Framework).

Processors we use

• Vercel — hosting, compute and file storage.
• Supabase — Postgres database (EU region).
• Anthropic — AI processing (only when you use an AI feature).
• OpenAI — speech-to-text, only if you use voice input.
• Stripe — payments (only if you subscribe).
• Google — sign-in with Google (optional), city autocomplete (Places API), and — if you arrived via a Google ad — conversion measurement (see below).
• GitHub / LinkedIn — sign-in and profile imports you initiate.
• SerpAPI — Google Scholar import you initiate.
• Resend — transactional email.
• Vercel Analytics — privacy-friendly, cookieless page statistics (no cross-site tracking, no advertising profiles).

We never sell your data.

Advertising & conversion measurement

If you reach letsapply.now by clicking a Google ad, Google appends a click identifier to the link, which we store briefly in a cookie (la_click). If you then subscribe, we send Google that click identifier together with the purchase amount and currency so we can measure which ads led to sign-ups. We do not send your name, email or any CV content to Google, and we do not build advertising profiles. This runs only for visitors arriving from a Google ad.

Cookies

We use only what the service needs: your session (aa_session), your language choice, a short-lived token during social login, and — for visitors arriving from a Google ad — the la_click measurement cookie described above. We set no cross-site advertising or profiling cookies.

Public CV pages

Your CV is private by default. If you explicitly publish it, it becomes a public web page at a link you can share, until you unpublish it in your dashboard.

How long we keep data

For as long as you have an account. Delete your account in Profile → Danger zone and your profile, CVs, documents, photos, applications and files are permanently removed. Billing records are retained as required by tax law.

Your rights

You can access, correct, export and delete your data — export and deletion are built into your profile page, no support ticket needed. You also have the right to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Switzerland: the FDPIC; in the EU: your national data protection authority). For anything else, email klaus@nclabs.ch.