Privacy Policy

Aptare Global (“Aptare,” “we,” “us”) operates this application to help job seekers find relevant roles, tailor their resumes, and reach out for referrals through their own professional network. This policy explains what information we collect, how we use it, and — most importantly — the hard limits on how it’s shared.

You provide most of this directly:

• Account information: your name, email address, and password (stored as a salted hash, never in plain text).
• Resume content: your header (name, email, phone, profile links) and body (experience, skills, education) are stored as two separate fields — the header is never sent to any AI feature.
• Your LinkedIn connections export, if you upload one: names, companies, job titles, and profile URLs of people in your own professional network. This is third-party personal data you choose to bring into the app — see “How we share information” below for the hard limits on what happens to it.
• Job search activity: target companies and roles you add, jobs you save or apply to, your tracker board status, and outreach messages you draft or mark as sent.
• Career goal information: a free-text summary, your location, work-type preference, and target salary, if you choose to set one.
• Connected accounts, if you choose to connect them: Google (used only to detect replies from people you’ve reached out to and create calendar reminders) and LinkedIn (used only to show your real name, email, and profile picture — never your connections). Access tokens for connected accounts are encrypted at rest.
• Recruiter/client relationship data, if you use that feature: if you become a client of a recruiter on the platform, they can set weekly activity targets for you and leave you notes — this data flows only between you and that specific recruiter.
• Career Assessment, if a recruiter sends you one: your answers to its two questionnaires, the context you give about your career (such as your current role, goals, timeframe, and how you’d like to be referred to), and the scores calculated from your answers.
• If you’re a recruiter: the profile details you enter (company, phone, short bio).
• If your school or institution invites you: its coordinator gives us your email address so we can email you your personal invitation, and may add your name as a note that only coordinators see. Once you join, we keep the dates your access starts and ends.
• Billing information, if you pay for a plan, client seats or student seats: your card is entered directly with our payment processor, Stripe, and we never see or store its full number. We keep the status and renewal dates of your plan or client subscriptions and, for recruiters, the card’s brand and last four digits. For an institution’s seat purchase, the billing name, address and optional tax ID entered at checkout are kept by Stripe and printed on the invoice.
• Cookies: a language-preference cookie, a session cookie that keeps you logged in, and short-lived (10-minute) security cookies used only during a Google/LinkedIn connection attempt. We do not use advertising or third-party tracking cookies.

• To match your uploaded connections against your target companies and roles, and score how relevant each match is.
• To search public job postings against your resume and preferences.
• To draft referral-ask messages and tailor your resume for a specific job posting, using an AI service — see the next section for exactly what we send it.
• To write your Career Assessment report with an AI service. Your recruiter reviews it, and may edit it, before it's shared with you.
• If you connect a Google account: to check for replies from people you've messaged and create calendar follow-up reminders. We never read your inbox generally, and we never send email on your behalf.
• To charge for plans and for the client seats recruiters activate.
• To keep your account secure and to email you about your account, such as sign-up codes, invitations, and notifications.

Several features (drafting referral messages, tailoring your resume, extracting resume/job keywords, analyzing skill gaps, writing Career Assessment reports) use a third-party AI service to generate text. We deliberately minimize what reaches it:

• Your resume header (name, email, phone, profile links) is never sent to any AI call — only the body content.
• A referral contact's name is never sent to the AI when drafting a message on your behalf.
• Connections data (names, companies) from other users' networks is never sent to the AI.
• Career Assessment reports are written from your resume body, your answers and their scores, and the context you gave — never your name or contact details.
• AI-generated resume content is explicitly instructed not to invent skills, employers, dates, or achievements you don't actually have — but you should always review AI-generated content before sending or submitting it, and you remain responsible for its accuracy.

This is the part we want to be unambiguous about:

• We never sell your personal information.
• We never share your raw connections list with other users of this app — under any circumstance, including if you asked us to. If another user has a potential referral path through your network, they only ever see a count (e.g. “1 friend has a connection here”), never a name or any detail, unless and until you personally choose to act on a specific request and share what you decide to share.
• If you become a recruiter’s client: they can see your Summary and career goal, your resume, the jobs you’ve saved and applied to, your target companies and roles and career-fit results, the jobs matched to you, and how many networking contacts you have at each stage, and they can leave you notes. They can edit your resume, add companies for you to target, and suggest jobs to you, and your Summary shows a note when they change your resume. If they send you the Career Assessment, they also see your answers, your scores, and the report written from them and from your resume. They can’t see your uploaded connections, who you’ve contacted, or your private messages.
• If you joined through your institution: its coordinators can see your name, email address, and when your access started and ends. They can’t see your resume, your job search or anything else you do in the app.
• Service providers who process data on our behalf to make the app work, each only receiving what’s necessary for their specific function: our AI provider (drafting/tailoring text and Career Assessment reports), our payment processor (Stripe, for recruiters’ card payments), our email delivery provider (sign-up codes, invitations, and notifications), our database and hosting providers, and — only if you connect them — Google and LinkedIn. Public job-board search services receive only your search terms (e.g. a job title or location), never your identity.
• If required by law, or to protect the rights, safety, or property of Aptare Global or our users.

Passwords are hashed, never stored in plain text. OAuth tokens for connected accounts are encrypted at rest. No online service can guarantee perfect security, but we design every new feature with your data’s isolation from other users as a hard requirement, not an afterthought.

If we become aware of a security incident affecting your personal data, we’ll notify you, and any regulator required by applicable law, within a reasonable time.

• You can view, edit, or delete most of your data (resume, target companies, tracker, connections, goal) directly in the app at any time.
• You can disconnect a connected Google or LinkedIn account at any time from your Account settings.
• You can delete your account entirely — this permanently removes your resume, connections, matches, drafts, saved jobs, and pending referral requests, and cannot be undone.

We keep your data for as long as your account exists, so the app can keep working the way you’d expect. Deleting your account permanently removes it. Payment records kept by our payment processor may be retained as required for accounting and legal purposes.

This app is intended for working-age adults conducting a job search and is not directed at children under 16. We do not knowingly collect information from children.

If we make a real change to how we handle your data, we’ll update the effective date above and, for a significant change, make reasonable efforts to let you know.

If you’re located in Brazil, Lei Geral de Proteção de Dados (LGPD) applies to our processing of your personal data. Our legal basis for processing is your consent, and — for the parts of the app that are the whole reason you signed up — the necessity of processing to actually provide the service to you.

You have the right to:

• Confirm whether we process your data, and access it.
• Correct incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed without a valid legal basis.
• Request portability of your data to another provider.
• Be informed about the entities we share your data with (see "How we share information" above).
• Withdraw consent at any time, and be informed of the consequences of doing so.

Some of our infrastructure providers (database and hosting) are located outside Brazil, meaning some data is processed internationally as a normal part of running the app. To exercise any of these rights, email privacy@aptarecareer.com.

The California Consumer Privacy Act (CCPA) formally applies only to businesses meeting certain size thresholds, which — honestly — we don’t currently meet. We describe your rights here anyway, because we already follow these practices as a matter of how we’ve built the app, not just when a law requires it:

• The right to know what personal information we've collected about you and how it's used.
• The right to delete your personal information (see "Your rights and choices" above).
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of your personal information — not applicable here, since we never sell or share personal information for cross-context behavioral advertising in the first place.
• The right not to be discriminated against for exercising any of these rights.

To exercise any of these rights, email privacy@aptarecareer.com.

This section serves as our Aviso de Privacidad under Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). The party responsible for your personal data is Aptare Global, reachable at privacy@aptarecareer.com. The purposes of processing are exactly as described throughout this policy: matching your network to target companies and roles, searching job postings, generating AI-assisted drafts, tailored resumes, and Career Assessment reports, billing for plans and for the client seats recruiters activate, and (if you connect one) detecting replies through your Google account.

You have ARCO rights — you may:

• Access the personal data we hold about you.
• Rectify data that’s inaccurate or incomplete.
• Cancel (delete) your data — see “Your rights and choices” above for self-service account deletion.
• Oppose a specific use of your data.

Some of our infrastructure providers are located outside Mexico, meaning some data is transferred internationally as a normal part of running the app. To exercise any ARCO right, email the address above.

Questions about this policy or your data? Email privacy@aptarecareer.com.