Privacy Policy
Effective July 27, 2026
Who we are
RapidApply (“we”, “our”, “the Service”) is operated by Henriquez Holdings LLC. Our website is rapidapply.online.
What we collect and why
- Profile data — name, email, phone, work history, education, and saved screening answers you provide. Used solely to fill job applications on your behalf.
- Résumé files — PDFs you upload. Stored encrypted at rest; transmitted over TLS to fill file-input fields in the browser extension when you apply.
- Job queue & application outcomes — which roles you queued and whether they were submitted, skipped, or paused. Used to show you your pipeline and improve answer grounding.
- Pairing tokens — short-lived tokens that bind your web session to the browser extension. Expire after use; never stored in plaintext.
- Usage analytics — page views and error counts (no personally identifiable information). Used to improve the product.
What the browser extension stores
The RapidApply Chrome extension stores the following locally on your device in
chrome.storage.local:- Your profile and saved answers (synced from the web app via a Bearer token).
- Your current batch queue and run state.
- Workday employer credentials — AES-256-GCM encrypted, key derived from a random secret stored only on your device. We never receive these passwords.
rapidapply.online (or a custom API base you configure). It does not download or execute remote code.How we use your data
- To fill job application forms in the Chrome extension on your instruction.
- To generate and ground screening answers using your saved profile.
- To tailor résumés to specific job descriptions (Pro / Max plans).
- To send transactional emails (account, billing, feature updates).
- We do not sell your data. We do not use it to train AI models.
Third-party services
- Anthropic Claude — generates screening answers and résumé tailoring. Your profile excerpt and the job description are sent per request; not retained by Anthropic for training under our API agreement.
- Stripe — handles subscription payments. We store only your Stripe customer ID; card numbers never touch our servers.
- Vercel / Render — host the web app and API. Data remains in US regions.
Data retention
Your profile and application history are retained while your account is active. You may delete your account and all associated data at any time from Settings → Account → Delete account. Deletion is permanent and processed within 30 days.
Your rights
Depending on your jurisdiction you may have rights to access, correct, export, or erase your personal data. Contact us at privacy@rapidapply.online to exercise any of these rights.
Cookies
We use a single session cookie to keep you signed in. No third-party advertising cookies are used.
Changes to this policy
We will post updates here and notify you by email for material changes. Continued use of the Service after the effective date constitutes acceptance.
Contact
Henriquez Holdings LLC
privacy@rapidapply.online