Privacy Policy

Three Tech Consulting("we," "our," or "us") is the data controller responsible for your personal data when you use Easy AIpply.

Contact: contact@threetech.consulting

This Privacy Policy (version 2026-07-19) explains how we collect, use, store, and share personal data when you visit our website, use our web application, or use our Chrome extension (collectively, the "Services").

We collect the following categories of personal data:

• Account information: Name, email address, and profile data received from OAuth providers (Google, LinkedIn), including authentication tokens required to maintain your session.
• Profile and resume data: Work history, skills, education, resumes or CVs you upload, cover letters, job preferences, and other information you provide in your dashboard.
• Chrome extension: When you use the Chrome extension, job titles, company names, job descriptions, and application form questions from your active browser tab, only when you click Scan or Rescan in the side panel.
• Billing information: Subscription status, billing history, and limited payment metadata processed by Stripe. We do not store full payment card numbers.
• Contact form data (marketing site): Name, email, company, phone number, and message content when you contact us through easy-aipply.com.
• Technical and usage data: IP address, browser type, device information, pages visited, cookie consent preferences, and analytics data (when you consent to analytics cookies).

We use your personal data to:

• Provide, operate, and maintain the Services:
• Generate AI-powered resumes, cover letters, and application answers: based on your profile and job context.
• Process payments and manage your subscription: through Stripe.
• Communicate with you: about your account, security alerts, support requests, and service updates.
• Improve the Services: through aggregated, de-identified usage analysis. We do not use your personal resume content to train third-party foundation models without your explicit consent.
• Detect, prevent, and address fraud, abuse, and security issues:
• Comply with legal obligations:

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under Article 6 of the GDPR:

• Contract (Art. 6(1)(b)): Processing necessary to provide the Services you request, including account management, AI generation, and subscription billing.
• Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, service improvement, and analytics (where permitted), balanced against your rights and freedoms.
• Consent (Art. 6(1)(a)): Non-essential cookies, marketing communications, and any optional features that require your explicit consent. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Retention of billing and tax records as required by applicable law.

The Chrome extension is designed with a strict user-initiated architecture:

• Read-only scanning: On supported job sites, content scripts read page content only when you click Scan or Rescan in the side panel. The extension does not autofill forms or submit applications.
• Side panel suggestions: AI-generated answers are shown in the side panel for you to review, copy, and paste. We do not insert answers into third-party forms automatically.
• Transient processing: Job board data (company name, job title, form questions) is sent to our backend to generate responses and is not sold or shared with advertisers.
• Minimal retention: Application context from the extension is retained only as long as needed to provide the requested feature and for a limited period for support and quality purposes.

To generate tailored application content, we send relevant portions of your profile data (such as work history and skills), uploaded resumes, and job context to third-party large language model (LLM) providers. These providers process data on our behalf under data processing agreements.

AI outputs are returned to you for review. You should verify all AI-generated content before submitting it to employers. We do not guarantee the accuracy of AI outputs.

Prompts and generated responses may be stored temporarily to provide the Services, improve response quality, and resolve support issues. See Section 10 for retention periods.

We use cookies and similar technologies to operate the Services and, with your consent, to analyze usage:

• Cookie consent: We display a cookie consent banner that stores your preference (accept or decline) in a browser cookie for up to 150 days.
• Google Analytics (if enabled): Collects page views and usage events. Analytics cookies are only activated after you accept cookies. IP addresses are anonymized when consent has not been given.
• Vercel Speed Insights (if enabled): Collects performance metrics to help us improve site speed.
• Google reCAPTCHA (if enabled): Used on our contact form to prevent spam. Subject to Google's Privacy Policy and Terms of Service.

You can withdraw cookie consent at any time by clearing your browser cookies or using your browser settings. Declining non-essential cookies may limit analytics but will not prevent core Service functionality.

We use the following categories of subprocessors to operate the Services. Each processes data on our behalf under contractual obligations to protect your data:

Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

We do not sell, rent, or trade your personal information. We may share your data only:

• Service providers: With subprocessors listed in Section 8, who process data on our behalf under strict confidentiality and data protection obligations.
• Legal compliance: If required by law, court order, or governmental request, or to protect the rights, property, and safety of Easy AIpply, our users, or others.
• Business transfers: In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to the acquirer honoring this Privacy Policy.

We retain personal data only as long as necessary:

• Account and profile data: Until you delete your account, plus up to 30 days for backup deletion.
• Extension data: Transient processing with limited retention (typically up to 90 days) unless needed for support or legal purposes.
• AI prompts and responses: Retained as needed to provide the Services and for up to 12 months for quality and support purposes, unless deleted earlier upon account deletion.
• Billing records: Up to 7 years as required for tax and accounting obligations.
• Contact form: Up to 2 years unless you request earlier deletion.
• Analytics data: According to each provider's default retention settings, typically 14 to 26 months.

We implement technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, and secure cloud infrastructure.

No method of transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit how we use your data.
• Portability: Request a machine-readable copy of data you provided, where technically feasible.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Lodge a complaint: File a complaint with your local data protection supervisory authority.

To exercise these rights, use your account dashboard or contact us at contact@threetech.consulting. We will respond within 30 days.

You may delete your account at any time through your account dashboard. Upon deletion:

• Profile data deletion: Your profile data, uploaded resumes, and application history will be deleted or anonymized within 30 days.
• Session revocation: Active OAuth sessions and extension authentication tokens will be revoked.
• Legal retention: Billing records required for tax and legal compliance may be retained as described in Section 10.

You may also request deletion by emailing contact@threetech.consulting.

Easy AIpply is operated from the United States. Your personal data may be transferred to and processed in the United States and other countries. These countries may have data protection laws that differ from those in your jurisdiction.

For transfers from the EEA, UK, or Switzerland, we use appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

The Services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page, update the version identifier, and notify you by email or in-app notice where appropriate.

We encourage you to review this page periodically. Your continued use of the Services after the effective date of an updated policy constitutes acceptance of the changes, except where your consent is required by law.