Skip to main content
Start free

1. Introduction

ApplyRaft ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at applyraft.com and our free CV builder service.

2. Information We Collect

Information you provide:

  • CV content you enter into the builder (name, email, work history, education, skills, etc.)
  • A photo, if you choose to add one to your CV or your account
  • Account information if you register (name, email address, password)
  • If you sign in with Google: your name, email address and profile picture, as supplied by Google
  • Contact form submissions

Information collected automatically:

  • IP address, and the country it belongs to
  • Browser type, operating system, and device type
  • Pages visited and referrer URL
  • Session data

3. How We Use Your Information

  • To provide the CV builder service and generate PDF downloads
  • To save your CV if you create an account
  • To improve the website and understand how it is used
  • To respond to contact form enquiries
  • To send service-related emails (e.g. account verification, password reset)

We never sell your personal data to third parties. We never share your CV content with employers or recruiters.

4. Data Retention

  • Guest CVs: A CV built without an account is deleted automatically 7 days after it is created, together with any photo uploaded to it. Create a free account if you want to keep a CV for longer.
  • Registered user CVs: Retained until you delete them or close your account.
  • Account data: Retained until account deletion. You can delete your account at any time from your dashboard.
  • Analytics data (site visits): Retained for up to 12 months, then deleted automatically.
  • Records of emails we send: Retained for 90 days.
  • Backups: We back up the site every day so that we can recover from a failure. Something you delete disappears from the live site straight away, but a copy can remain in our backups for up to 30 days before it is overwritten. Backups are encrypted and are not used for anything except recovery.

5. Cookies

We use only the cookies the site needs in order to work:

  • A session cookie, which remembers the CV you are working on and keeps you signed in while you use the site.
  • A security cookie, which protects forms against forged requests.
  • A "remember me" cookie, only if you tick that box when signing in.

We do not use advertising cookies or third-party analytics cookies. Your browser's local storage records that you have dismissed the cookie notice or an announcement, so that they are not shown to you again. Blocking the essential cookies will stop the CV builder and sign-in from working.

6. Your Rights (GDPR)

If you are in the European Union or UK, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Export your data in a portable format
  • Object to processing of your personal data

To exercise these rights, contact us.

7. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Passwords are hashed using bcrypt. Connections between your browser and ApplyRaft are encrypted with HTTPS.

8. Third-Party Services

Fonts, scripts and images are served from our own servers. We do not load them from third parties, and we do not use third-party analytics or advertising tools. Visit statistics are recorded by ApplyRaft itself.

The following third parties receive limited data so that the service can work:

  • Google sign-in: only if you choose "Continue with Google". Google confirms your identity to us and supplies your name, email address and profile picture.
  • Email delivery: the provider that sends our account emails receives your email address and the content of the message.
  • Hosting: the company that hosts our servers stores the data described in this policy on our behalf.

Each has its own privacy policy, which we encourage you to review.

The country for an IP address is worked out on our own server, from a database file. Your IP address is not sent to anyone for this. The file is IP Geolocation by DB-IP.

9. Children's Privacy

ApplyRaft is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries, contact us at: applyraft.com/contact or email: hello@applyraft.com