Privacy Policy

1. Data controller

OZ Apply (“we” or the “Service”), operated by Paul PICART, sole trader (ABN 68 940 925 221, Australia — see the Legal Notice for the full identity), is the controller of your personal data under the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés) for users located in the European Union.

Contact: contact@ozapply.io

2. Data we collect

We collect the following data when you use the Service:

3. Purposes of processing

Your data is used to:

• Provide the Service: AI processing of your resume to generate an optimised resume
• Manage your account: authentication, plan limit tracking, generation history
• Billing: managing subscriptions and payments through Stripe
• Improve the Service: aggregated, anonymised analysis of usage (popular sectors, average scores)
• Support: answering your requests

4. Legal basis for processing

5. Sharing data with third parties

We never sell your data. We share some data with the technical providers strictly necessary to run the Service:

6. Browser extension (OZ Apply for Chrome)

The OZ Apply browser extension lets you browse job offers, generate an application and have an application form filled in for you, in Chrome's side panel. It only acts on applications that you start yourself. This section completes the rest of this policy for the extension.

Data the extension handles

• Your account session: the extension asks ozapply.io, using your signed-in session, for a short-lived access token. It keeps it in memory only. Your refresh token never leaves the website's cookies.
• Your profile and resume data (name, contact details, address, work experience, licences and tickets, skills, generated resume and cover letter): retrieved from your OZ Apply account only to fill in the applications you start.
• Content of application pages: the questions and answer options shown on an application form are sent to our servers so that suggested answers can be drafted from your profile. This drafting is carried out by our AI provider (see “Sharing data with third parties”).
• Technical data kept on your device: settings, the state of the application in progress (including the resume file and the details being filled in) and a technical log are stored in the extension's local storage, in your browser. They are not sent to us unless you choose to copy and share the diagnostic yourself.

What the extension does not do

It does not collect or transmit your browsing history. On SEEK pages its script stays inactive unless an application started from OZ Apply is in progress. It does not read, store or transmit your SEEK password: password fields are only detected so that the extension can wait for you to sign in. The extension contains no advertising and no analytics.

Where the data goes

Only to OZ Apply's servers and to the providers described in this policy (database and AI processing), and to the application page you are using, where the information is entered on your behalf. We do not sell this data and do not use it for advertising, profiling or credit decisions. Our use of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Retention

Data held on our servers follows the retention rules of this policy. Data stored by the extension in your browser stays there until you remove it; uninstalling the extension deletes it.

Legal basis and your control

The legal basis is the performance of the contract (providing the feature you request), as set out in the legal basis section above. You choose when an application starts, you can stop it at any time, you can keep the default “ask me first” mode (the extension stops before sending), and you can uninstall the extension at any time. Your rights over the data held by OZ Apply are described below.

7. Data retention

8. Your rights

Under the GDPR, you have the following rights over your personal data:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: delete your account and all your data from the Dashboard
• Right to data portability: receive your data in a structured format
• Right to object: object to processing based on legitimate interest
• Right to restriction: temporarily restrict a processing activity

To exercise your rights, contact us at contact@ozapply.io. We will reply within 30 days.

If a complaint remains unresolved, you can contact the CNIL, the French data protection authority: www.cnil.fr

9. Security

We put appropriate security measures in place to protect your data:

• HTTPS encryption of all communications
• Hashed passwords (bcrypt via Supabase Auth), never stored in plain text
• Data access restricted to team members with a legitimate need
• Your resume and generation data are accessible only through your account

10. Cookies

We use two categories of cookies:

• Strictly necessary cookies (no consent required): Supabase authentication session (lasts for the session, or 7 days if you choose “Stay signed in”), interface preferences — no personal data.
• Analytics cookies (subject to your consent): PostHog, to understand how the Service is used in aggregate (page views, features used, errors) and to improve it. No data is shared with advertising third parties or used for targeted advertising.

On your first visit, a banner lets you accept or decline analytics cookies. Until you accept, no PostHog event is sent. You can change your mind at any time: Change my cookie preferences

11. International transfers

Some of our processors (Supabase, Anthropic, Stripe) are based in the United States. These transfers are covered by standard contractual clauses (SCCs) approved by the European Commission, in accordance with the GDPR. Hosting (Hostinger) and usage analytics (PostHog) are operated from within the European Union.

12. Minors

The Service is intended for people aged 18 or over. We do not knowingly collect data about minors. If you believe a minor has created an account, contact us at contact@ozapply.io.

13. Contact

For any question about this policy or about exercising your rights:

contact@ozapply.io