Privacy Policy

Overview

ApexHunt is an AI-powered job search tool built for senior professionals in Australia. This Privacy Policy explains what personal information we collect, why we collect it, how we use and store it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using ApexHunt at apexhunt.ai, you agree to the collection and use of information as described in this policy. Questions or concerns: [email protected]

1. What information we collect

Account information. Your name and email address, collected via Clerk when you create an account. If you sign in with Google or LinkedIn, we receive your name and email address from that provider.

Profile information. Your target job title, seniority level, target salary range, preferred companies and industries, and location.

CV and career information. The text of your CV, career achievements, and metrics you enter in the Achievements section. This is sensitive personal information and is treated with particular care.

Job application information. Job descriptions you import, application status, cover letters generated for you, and tracking data you add.

Usage information. Monthly feature usage counts, for enforcing free tier limits.

Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We do not store credit card numbers. We store only your Stripe customer ID and subscription status.

Waitlist information. If you submit your email address on our landing page, we store that email address.

2. Why we collect it and how we use it

We collect personal information only to provide the ApexHunt service:

• To personalise AI outputs. Your CV, achievements, profile, and target role are sent to Anthropic's AI API to generate tailored cover letters, CV rewrites, interview preparation, and salary negotiation strategies.
• To authenticate you. Your email and account information allow you to sign in and access your data securely.
• To manage your subscription. Payment and subscription data determines which features you can access.
• To enforce usage limits. We track monthly feature usage to apply free tier limits.
• To communicate with you. We may email you about your account or service updates.
• For product research, only with your explicit consent. If you opt in, anonymised copies of your CV, the documents ApexHunt generated for you and the job ad they were written for may be shown to independent recruiters we engage to check the accuracy of our scoring. Your name, contact details, LinkedIn address and employer names are replaced with placeholders first; the recruiters never see your score or your identity. Only aggregate results are ever published. You can withdraw at any time by emailing [email protected], and your documents are removed from the study.

We do not sell your personal information. We do not use your information for advertising. We do not use your CV or career data to train AI models.

3. Who we share your information with

We share personal information only with the following third-party service providers:

Under APP 8 of the Privacy Act, we take reasonable steps to ensure each overseas recipient handles personal information consistently with the Australian Privacy Principles.

4. How we store and protect your information

• All data is encrypted at rest using AES-256 encryption.
• All data is encrypted in transit using TLS 1.2 or higher (HTTPS).
• Row Level Security (RLS) is enforced at the database level, so you can only access your own data.
• API keys and credentials are stored as environment variables, never in source code.
• Passwords are never stored by ApexHunt. Authentication is managed entirely by Clerk.

If you believe your account has been compromised, contact us immediately at [email protected].

5. Data retention

• Account and profile data is retained until you delete your account.
• CV and career data is retained until you delete it or delete your account.
• Waitlist emails are retained until you request removal.
• Payment records may be retained for up to 7 years for tax and accounting purposes.

6. Your rights under Australian Privacy Principles

• Access your data. You can view all data in your dashboard. To request a full copy, email [email protected].
• Correct your data. You can update your profile, CV, and achievements directly in the dashboard at any time.
• Delete your data. Delete your account yourself from Settings. Your account and all associated data are permanently removed after a seven-day grace period, during which you can cancel the deletion by signing in. If you would rather we do it, email [email protected] and we will start the same process within 30 days.
• Opt out of communications. You can unsubscribe from any marketing emails at any time.

7. Notifiable Data Breaches

ApexHunt complies with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth). If we suspect a data breach, we will contain it and assess whether it is likely to result in serious harm; the scheme allows up to 30 days for that assessment and we aim to finish well inside it. Once we have reasonable grounds to believe an eligible breach has occurred, we will notify affected individuals and the OAIC as soon as practicable.

8. Cookies and tracking

ApexHunt itself sets only essential cookies, required for authentication and session management (provided by Clerk).

We use PostHog, a product analytics service, to understand how the product is used and to find and fix problems. This includes page views, feature interactions, and session replays of in-app activity, linked to your account. Input fields are masked in replays, and so are your CV and the documents ApexHunt writes for you wherever they are displayed. Other content on screen, such as a job ad you have pasted, your scores and the gap analysis, may appear in them. This data is used only by us, only to improve the product, and is hosted on PostHog's US infrastructure.

Our public pages use LinkedIn, Google and Meta (Facebook) advertising tags so we can measure whether our own advertising works and show our ads to people who have visited our site. These tags set cookies and receive standard technical data such as pages visited and browser type. They do not receive your CV, profile, or career data. The LinkedIn and Meta tags run only on our public pages and at signup or purchase completion, never on pages containing your CV or payment details. The Google tag also records signup and feature-use events inside the app for conversion measurement, and we use Google Analytics (GA4) to measure site traffic in aggregate: pages viewed, browser type and rough location, never your CV, profile, or career data. If you reach us from an ad shown in ChatGPT, we tell OpenAI from our server when that visit leads to a signup, a first role score or a purchase, so we can measure the ad. OpenAI runs no script on our pages, and what it receives is the click identifier from the ad, a hashed form of your email address and the amount paid, never your CV, profile, or career data.

9. Children

ApexHunt is intended for professionals aged 18 and over. We do not knowingly collect personal information from anyone under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. If changes are material, we will notify you by email.

11. How to make a complaint

If you believe we have breached the Australian Privacy Principles, please contact us first at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Contact

Email: [email protected]
Website: apexhunt.ai