Privacy policy

Last updated: 2 July 2026

letsapply.now helps you build and tailor CVs. That means you trust us with career data — this page explains plainly what we store, why, where it goes, and how you stay in control. We follow the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Who is responsible

NC Labs, Zürich, Switzerland (“we”) is the data controller for letsapply.now. Contact: klaus@nclabs.ch.

What we store, and why

• Account data — name, email, username, a hashed password (never the password itself) or your social-login identifier (GitHub, Google or LinkedIn). Basis: performing our contract with you.
• Profile & CV data — experiences, education, skills, photos, documents and anything you type or import (from GitHub, LinkedIn exports, Google Scholar or uploaded files). You choose what goes in. Basis: performing our contract.
• Job & application data — jobs you save, applications you track, notes and contacts you add. Basis: performing our contract.
• Billing data — if you subscribe, Stripe processes your payment details; we store only your plan, subscription status and Stripe customer reference. Basis: performing our contract, legal obligations.
• Technical logs — standard server logs (IP address, timestamps) kept briefly for security and debugging. Basis: legitimate interest in running a secure service.

AI processing — transparent by design

When you use an AI feature (CV extraction, tailoring, the hiring panel, match scores, cover letters), the relevant CV text and job description are sent to Anthropic’s Claude API to generate the result. API inputs and outputs are not used to train Anthropic’s models. AI output is a draft for you to review — always check it before sending a CV to an employer.

Where your data lives

Application data is stored in our database and file storage hosted in the EU; our compute runs in Frankfurt, Germany (Vercel). Some processors operate from the US under appropriate safeguards (EU Standard Contractual Clauses / the EU–US and Swiss–US Data Privacy Framework).

Processors we use

• Vercel — hosting, compute and file storage.
• Neon — Postgres database.
• Anthropic — AI processing (only when you use an AI feature).
• Stripe — payments (only if you subscribe).
• Google — sign-in with Google (optional) and city autocomplete (Places API).
• GitHub / LinkedIn — sign-in and profile imports you initiate.
• SerpAPI — Google Scholar import you initiate.
• Resend — transactional email.
• Vercel Analytics — privacy-friendly, cookieless page statistics (no cross-site tracking, no advertising profiles).

We never sell your data. There is no ad tracking on letsapply.now.

Cookies

We use essential cookies only: your session (aa_session), your language choice, and a short-lived token during social login. No advertising or cross-site tracking cookies — which is why you don’t see a cookie banner.

Public CV pages

Your CV is private by default. If you explicitly publish it, it becomes a public web page at a link you can share, until you unpublish it in your dashboard.

How long we keep data

For as long as you have an account. Delete your account in Profile → Danger zone and your profile, CVs, documents, photos, applications and files are permanently removed. Billing records are retained as required by tax law.

Your rights

You can access, correct, export and delete your data — export and deletion are built into your profile page, no support ticket needed. You also have the right to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Switzerland: the FDPIC; in the EU: your national data protection authority). For anything else, email klaus@nclabs.ch.