Privacy Policy
Controller
DeDo Studios UG
Kruskastraße 2
38855 Wernigerode, Germany
Email: info@applyfast.io
What data we process
To provide the service we process the CV you upload, the text of the job advertisement you paste, and any reference letters or certificates you voluntarily add. These documents typically contain sensitive personal data (name, career history, possibly date of birth or photo). References are used solely as a factual basis for your CV and cover letter; they are not shared with third parties and are deleted on the same schedule as the associated application.
Purpose and legal basis
Processing is carried out solely to tailor your CV to the job and convert it into a machine-readable format (performance of a contract, Art. 6(1)(b) GDPR). Sensitive data is processed on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by uploading the documents.
Processing by AI providers
We use an AI language model for the content revision. In the production configuration this processing takes place in a data centre within the EU, and the transmitted data is not used to train the models. Data processing agreements (Art. 28 GDPR) are in place with all processors involved.
Storage period / deletion
We follow the principle of data minimisation: uploaded and generated files are deleted automatically after a short retention period (configurable, default 24 hours). On request we delete your data immediately. An account and its data can be deleted by you at any time.
Encryption
All data is encrypted in transit and at rest.
Reach measurement
We measure anonymously where users leave the flow in order to improve the product. This server-side funnel tracking is cookie-free and contains no personal data.
Affiliate links
Some pages contain links to third-party learning platforms marked as advertising. We do not pass any personal data to these providers; a connection is only established when you actively click such a link, at which point the provider's own privacy policy applies.
Usage analysis with Microsoft Clarity
With your consent we use Microsoft Clarity, a service of Microsoft Corporation. Clarity helps us understand how the site is used (e.g. session recordings as well as heatmaps of click and scroll behaviour) in order to improve it. Cookies are set and usage data is transmitted to Microsoft; a transfer to the USA is possible (Microsoft is certified under the EU-US Data Privacy Framework). Input fields are masked by Clarity by default.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the cookie notice. You can withdraw it at any time with effect for the future by opening “Cookie settings” in the footer and changing your selection. Without consent, Clarity is not loaded. Further information can be found in the Microsoft privacy statement.
Web analytics with Google Analytics
With your consent we use Google Analytics 4, a service of Google Ireland Limited (Google). It helps us understand how the site is used (e.g. pages visited, device type, approximate region) in order to improve it. Cookies are set and usage data is transmitted to Google; your IP address is anonymised and a transfer to the USA is possible (Google is certified under the EU-US Data Privacy Framework).
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the cookie notice. You can withdraw it at any time with effect for the future by opening “Cookie settings” in the footer and changing your selection. Without consent, Google Analytics is not loaded. Further information can be found in the Google privacy policy.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.