GDPR & Data Rights
Your rights under EU data protection law and how to exercise them on Applyd.ie.
This page is the rights-focused companion to our full Privacy Policy — read that page for the complete detail on what we collect, why, and who we share it with (including our named data partners: Anthropic, Zoho/ZeptoMail, Hetzner, Stripe, and — only if you connect an inbox — Google or Microsoft). This page focuses on your rights under the GDPR and exactly how to exercise them on Applyd.ie.
Applyd is Irish, EU-hosted by default, and built with GDPR compliance as a first-class product requirement rather than an afterthought — not just a policy statement. We minimise what we collect, keep AI providers to a single named partner (Anthropic), and give you working, self-serve export and deletion tools rather than a "contact us and wait" process.
Your rights, and how to exercise each one
- Access — get a full copy of everything we hold about you, instantly: Settings → Privacy → Export my data (or `GET /api/account`). You'll receive a structured JSON file covering your account, profile, CV/document history, applications, AI task history, inbox connections, and billing records.
- Rectification — fix inaccurate profile, CV, or account information yourself in Settings and your profile pages; changes take effect immediately.
- Erasure — delete your account and the personal data tied to it: Settings → Privacy → Delete my account (or `DELETE /api/account`). This immediately deletes your inbox connections and everything derived from them, your passkeys, interview-coaching session transcripts, and your university verification/module records, and anonymises your core account record. See our Privacy Policy for what's retained under a legal (financial record-keeping) obligation and for how long.
- Partial erasure of inbox data — you don't have to delete your whole account to remove inbox-derived data: disconnect a Gmail/Outlook connection in Settings to delete it and everything it produced, without touching the rest of your account.
- Restriction of processing — ask us to pause processing while you dispute something, by emailing privacy@applyd.ie.
- Data portability — the export above is structured JSON specifically so you can move your data to another service if you choose.
- Objection — object to processing based on our legitimate interests (for example, product analytics) by emailing us.
- Withdrawing consent — disconnect your inbox at any time in Settings, stop forwarding mail to your personal Applyd alias whenever you like, or unsubscribe from marketing email via the link in any marketing email we send.
- Lodging a complaint — if you're unhappy with how we've handled your data, you have the right to complain to the Irish Data Protection Commission (DPC): dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland. We'd appreciate the chance to put things right first — email privacy@applyd.ie.
None of the above requires a support ticket or a waiting period beyond what's needed for identity verification on sensitive requests — access and deletion are available directly in the product.
Data retention, in brief
We keep your data only as long as we need it for the purposes described in our Privacy Policy. In short: active-account data is kept while you use Applyd; uploaded CVs and generated documents are deleted when you remove them or delete your account; connected-inbox processing never stores full email bodies in the first place; and on account deletion, inbox data, passkeys, interview-coaching transcripts, and university/module records are deleted immediately, with only legally-required financial records (invoices/payments) retained in anonymised form for the period Irish law requires. Full detail: Privacy Policy — How long we keep your data.
Automated processing and AI
Applyd uses AI (from our named provider, Anthropic, using Claude models) to help you — scoring job fit, tailoring CVs and cover letters, drafting screening answers, coaching you for interviews and negotiations, and preparing outreach messages. Under GDPR Article 22, you have the right not to be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you. We've built Applyd so this is respected as a matter of course, not just policy: every AI output — a fit score, a generated document, a screening answer, an auto-apply draft — is shown to you for review before it's used, and the auto-apply agent operates review-first, requiring your explicit approval before a real application is submitted to an employer.
International transfers, in brief
Your core account, application, and document data stays on EU infrastructure (Hetzner, Germany) and EU-region email infrastructure (Zoho). Processing with Anthropic (AI), Stripe (payments), and — only if you opt in — Google or Microsoft (inbox connections) may involve a transfer of data outside the EEA, carried out under appropriate safeguards such as Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable. Full detail: Privacy Policy — International data transfers.
Contact
For data protection queries, email privacy@applyd.ie, or use the contact form at applyd.ie/contact. We aim to respond within 30 days as required by GDPR.
Last updated: 6 July 2026