Privacy Policy

1. What we collect

When you sign in, we collect your name and email address via Google OAuth (provided by Supabase Auth). We also store content you provide: your CV, target roles, salary preferences, location, work preferences, phone number, LinkedIn URL, and demographic fields you complete during onboarding. Job descriptions you submit for evaluation are processed by Google Vertex AI (Gemini) and stored with your evaluation report. If you use the Mock Interview feature, your answers and AI-generated scores and feedback are stored against your account. We do not store credentials for your email, LinkedIn, or any employer job portal. We do not store payment card details - all payment processing is handled by DodoPayments.

2. How we use your data

Your CV and profile are processed by Google Vertex AI (Gemini) to generate job evaluations, tailored CV drafts, cover letters, and LinkedIn profile audits. Per Vertex AI's paid-tier terms, your data is not used to train Google's models. Your email is used to send your daily concierge report (via Resend) and other transactional notifications. We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-party services

Zipply uses the following third-party data processors, each with their own privacy policies:

• Supabase - authentication and session management
• Neon - managed PostgreSQL database hosting
• Google Vertex AI (Gemini) - AI evaluation, CV tailoring, cover letter and audit generation; your data is not used for Google's model training under Vertex's paid-tier terms
• DodoPayments - subscription billing
• Resend - transactional email delivery (your daily concierge report)
• Vercel - application hosting
• Serper.dev - Google job-search results used by the scanner
• Bluedoor.sh - aggregated public job-posting metadata used by the scanner

4. How applications are submitted

For supported job boards (Greenhouse, Lever, Ashby), our Chrome extension submits applications using your own browser session - we do not store, request, or transmit any portal passwords. For boards we cannot auto-submit (e.g. Workday), we share the tailored CV and cover letter with you so you can submit the application directly. Your email and LinkedIn accounts remain entirely yours - we do not access either.

5. Cookies

We use cookies strictly for authentication and to track onboarding completion. We do not use tracking cookies or third-party advertising cookies.

6. Data retention and deletion

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time under GDPR Article 17 (Right to Erasure) by emailing abhimanyu@tryzipply.com. We action deletion requests same-day in the vast majority of cases, and within 30 days at the latest.

7. Contact

Questions about this policy? Email abhimanyu@tryzipply.com.