Privacy policy

This policy describes personal information handled for Apply Coach by Allinta Rose, operating Apply Coach, ABN 25 656 421 718, of 5/56 McLay Street, Coorparoo QLD 4151, Australia. Allinta Rose is the founder. Privacy contact: hello@applycoach.com.au.

Our obligations under the Privacy Act 1988 and Australian Privacy Principles depend on the operator’s circumstances, including any applicable small-business exemption or exception. This draft does not claim certified compliance or determine that status. Any rights required by applicable law continue to apply.

• CV text, employment and education history, qualifications, skills and other details you choose to include; the file name and extracted text are submitted, rather than the original uploaded PDF or DOCX through the standard check flow.
• Job advertisements, application questions, revision notes, readiness scores, AI feedback and generated application materials.
• Account and contact details, sign-in and account identifiers, free-check email where provided, marketing preferences and support correspondence.
• Order references, payment and subscription status, credit use and agency-code redemption records when those features are used.
• Agency enquiries, staff membership details and usage records; internal customer-support and review notes maintained by authorised administrators.

We receive information from your submissions and interactions, from authorised agency users where relevant, and from providers delivering account, AI and payment services. Infrastructure may also process technical request and diagnostic information; the exact log fields and retention must be confirmed before publication.

A free check can be used without an account. An account is needed to keep account-linked packs and use paid entitlements. If required information is not supplied, we may be unable to deliver the requested service.

CVs may unintentionally contain health, disability, racial or ethnic background, union membership, criminal-record information or other sensitive details. Do not include these unless genuinely necessary and you are comfortable requesting their processing. We do not need passport numbers, bank details, identity documents or a complete home address to write a CV.

Remove referee details and other people’s information where possible, or obtain their permission. Agency users must have appropriate authority before submitting a client’s information. Where the law requires consent for sensitive information, a suitable consent process must be established before collection; this policy is not a substitute for that consent.

We use the information needed to run checks, prepare and review application materials, maintain accounts and credits, manage orders, respond to revision and support requests, investigate errors and misuse, and comply with legal obligations.

We do not sell personal information. We do not submit applications to employers on your behalf through the standard service. Any materially different use requires an appropriate lawful basis and notice, and consent where required.

CV text, job-ad text and relevant application questions are sent to Lovable AI, which routes requests to Anthropic’s Claude, to produce feedback and application drafts. Information in those inputs may also appear in the outputs. The readiness score also uses rule-based checks.

Lovable Cloud provides account and application-data services; hosting and delivery infrastructure supports the website. Authorised human reviewers and support administrators may access the material needed for their work. When payments are enabled, Stripe handles payment information and returns transaction and billing status to us.

Provider storage, logging, retention, model-training settings and contractual protections must be verified before publication. We do not make an unverified promise that submitted information is never retained or used for model improvement by every provider. Do not submit information you are not authorised to share through this processing chain.

We may disclose information where required by law or necessary to respond lawfully to a security incident or legal claim. We do not describe ordinary provider processing as “no sharing”.

AI, hosting, account and payment providers may process information outside Australia. Overseas recipients and countries depend on the actual provider arrangements, not simply the location of our business.

[BEFORE PUBLICATION: identify the relevant recipient locations and list the countries where practicable; verify applicable cross-border safeguards and accountability obligations, including APP 8 if it applies.] This draft does not claim all information stays in Australia or treat using the website as a waiver of privacy rights.

The intended retention arrangement removes the source CV text and job-ad text from check and pack records after they are more than 30 days old, through a periodic deletion routine. A database routine exists for those fields; its deployed schedule and successful operation must be verified before the timing is relied on.

This is not deletion of all personal information. Generated CVs and cover letters can contain the same details; scores, results, filenames, application questions, revision notes, review records, account details and order records are not erased by that source-text routine.

[BEFORE PUBLICATION: set and verify retention periods for generated content, support/CRM records, account information, financial records, provider logs and backups.] Retain information only as needed for stated purposes and lawful record-keeping, and securely delete or de-identify it when no longer required.

Contact hello@applycoach.com.au to request deletion. We will explain what can be deleted, any lawful reason for retaining particular records and any backup or provider-processing limitations. Requests are not represented as an instant, automated or complete erasure from every system.

Agencies use invitation codes and usage reporting to manage funded access. Authorised staff may see code redemption and usage information. This does not mean an agency owns your CV or is entitled to receive every generated pack.

Any additional sharing of application content must be separately explained and authorised or otherwise lawfully permitted. [BEFORE PUBLICATION: verify exactly which account identifiers and usage details agency staff can access and confirm the access rules.] Human reviewers and authorised administrators access relevant material for delivery and support.

The service uses browser storage and/or cookies for sign-in and session operation. Clearing essential storage or blocking it may sign you out or prevent account features from working. Optional tracking and marketing technologies, if introduced, must be disclosed with any required choices; this draft does not assert that all infrastructure is free of analytics.

We use account authentication and access restrictions to help protect information. No online service can guarantee absolute security. Before publication, verify practical access controls, staff procedures, provider safeguards and the incident-response process. Where a breach triggers legal notification duties, we will comply with them.

Account, service and billing messages are separate from optional marketing. The free-check form records a marketing preference. Send promotional communications only where permitted by law, including any required consent, identification and working unsubscribe mechanism.

You can withdraw marketing permission without losing consumer remedies or the service you purchased. [BEFORE PUBLICATION: confirm the unsubscribe and preference-handling process.] We do not promise that results are automatically emailed where that delivery flow has not been verified.

Contact hello@applycoach.com.au to request access, correction or deletion, withdraw a permission, or raise a privacy concern. Tell us which information or account is involved; do not send sensitive identity documents unless a proportionate identity check has been explained.

We will verify authority where necessary, investigate and respond, explaining any lawful refusal or limitation and available review options. Where a statutory right or time limit applies, we will follow it. This draft does not replace those rights with a discretionary process.

If the Privacy Act applies and a concern is not resolved, you may be able to complain to the Office of the Australian Information Commissioner (OAIC). Eligibility and the OAIC’s complaint process apply; this is not a claim that every business or dispute falls within its jurisdiction.

Publish the effective date and current version when this draft is approved. Material changes to how personal information is handled will be communicated appropriately before the new use, with fresh consent where required. An update does not retrospectively authorise an incompatible use of information already collected.