HyperApply AI-assisted supercharged applications
Contact support

Privacy & data policy

This page explains what data HyperApply collects, how it is used, and what choices you have. It applies to the HyperApply Chrome extension, the backend API service, and the static website.

1. Who we are

HyperApply is a tool that helps individual job seekers create tailored CVs based on job listings they are already viewing.

Data controller / service provider:
Musa Atlihan
YALI BLV. 386 NO: 2
KARŞIYAKA / İzmir, Turkey

Contact email: msatlihan@gmail.com

2. What data HyperApply collects

2.1 Account and subscription data

When you create an account, HyperApply stores:

  • Your email address.
  • A hashed version of your password (not the plain text password).
  • Basic plan and subscription information (for example, whether you are on a free or paid plan).

2.2 CV and profile data

To generate tailored CVs, HyperApply processes:

  • The base CV you upload (for example, as a PDF).
  • A parsed representation of your CV (skills, experience, education and similar fields extracted from your CV).
  • Any edits you make to your active CV profile inside the app.
  • Generated CV versions and, where applicable, generated cover letters.

This data is stored in a database and private file storage so that you can reuse your CV information and regenerate documents later.

2.3 Job and application metadata

When you generate a tailored CV for a job, HyperApply stores only minimal metadata about that job and application, such as:

  • Job title.
  • Company name.
  • A link (URL) to the original job listing (for example, on LinkedIn).
  • The date the tailored CV was generated and which writing mode/template you used.
  • Links to the generated CV/cover letter files.

This metadata is used to show a history of your applications inside the HyperApply extension and to let you re-download created documents.

2.4 Job listing content (processed, not stored)

When you use the HyperApply Chrome extension on a job listing page, the extension reads the job description content that is visible to you in your browser. This content is sent to the backend service and to the AI provider to:

  • Suggest skills and requirements for that particular job.
  • Generate a tailored CV and/or cover letter for that job.

The full job description text is not stored in the database as part of your history. It is processed transiently to generate outputs for your personal use, and then discarded. HyperApply only keeps the job metadata described in section 2.3.

2.5 Usage and diagnostic data

HyperApply may collect basic usage and diagnostic information, such as:

  • Which major features are used (for example, “generate CV”, “generate cover letter”).
  • Timestamps of requests, response times and error codes.
  • Aggregated counts of how many documents have been generated.

This information is used to monitor system health, enforce fair usage limits and improve the product. It does not include full copies of your CVs or job descriptions.

2.6 Billing data

If you purchase a paid plan, payments are processed by Lemon Squeezy. Lemon Squeezy receives billing information such as your email, billing address and payment method details. HyperApply itself does not store full card numbers or other sensitive payment instrument data.

3. How your data is used

HyperApply uses your data only for the purposes described here:

  • To provide the service – creating and maintaining your account, letting you sign in, and keeping track of your plan and usage.
  • To generate tailored CVs and cover letters – using your CV and job listing content to produce documents for your personal use.
  • To show your application history – using job metadata and document links so you can review and re-download what you created.
  • To process payments – using basic account and billing data so Lemon Squeezy can charge for subscriptions and handle VAT/invoices.
  • To monitor and improve the product – using aggregated, anonymised or pseudonymised usage information to understand performance and reliability.

Where applicable, the main legal basis for processing your personal data is the performance of a contract (providing the HyperApply service you sign up for), and in some cases legitimate interests (for basic analytics and service improvement).

HyperApply does not sell your personal data to third parties.

4. AI and third-party services

4.1 OpenAI (AI processing)

HyperApply uses models provided by OpenAI to:

  • Parse your base CV into a structured representation.
  • Extract skills and requirements from job listings.
  • Generate tailored CVs and cover letters based on your CV and the job listing.

For these purposes, the relevant text (your CV content and the job listing content) is sent to OpenAI via secure API calls. OpenAI acts as a data processor on behalf of HyperApply. HyperApply does not grant OpenAI permission to use this data for advertising or unrelated profiling.

OpenAI's API terms state that customer API data is not used to train their models by default, but may be retained for a limited period (for example up to 30 days) for abuse monitoring and security.

4.2 Supabase (database and storage)

HyperApply uses Supabase to host the database and private file storage in production. Your account, CV profile, application history and generated documents are stored there, in line with the purposes described in this policy.

4.3 Lemon Squeezy (payments)

HyperApply uses Lemon Squeezy as the payment provider for subscriptions and purchases. Lemon Squeezy acts as the merchant of record and is responsible for securely processing your payment information and handling VAT and invoicing where required.

5. Data retention

In general, HyperApply keeps your data for as long as your account is active and for a reasonable period afterwards, unless you request deletion sooner.

  • Account, CV and application history data are kept while your account is active so you can continue to use the service.
  • Generated documents (CVs and cover letters) are stored so you can re-download them from the History view.
  • Logs and diagnostic data are kept for a limited time to monitor system health and may be aggregated or anonymised over time.

You can request account deletion, which will remove or anonymise associated personal data, subject to technical and legal constraints (for example, records required for accounting or fraud prevention).

6. Security

HyperApply takes reasonable measures to protect your data, including:

  • Storing passwords using secure hashing algorithms.
  • Keeping files in private storage locations that are not publicly exposed.
  • Restricting access to production databases and secrets to the backend environment.

No online service can guarantee perfect security, but effort is made to follow good practices and promptly address issues when they arise.

7. Your rights and choices

Depending on your location, you may have certain rights over your personal data, such as the right to access, correct, or delete it. You can exercise these rights by emailing msatlihan@gmail.com.

You can also choose to stop using HyperApply at any time and uninstall the Chrome extension. If you cancel a paid plan, please refer to the Legal & refunds page for details on cancellations and refunds.

8. LinkedIn and other third-party sites

When you use the HyperApply extension on a LinkedIn job listing, the extension reads the job listing content that is already visible to you in your browser to generate tailored CVs. HyperApply is an independent product and is not affiliated with or endorsed by LinkedIn or any other job platform.

Your use of LinkedIn and any other job platform remains subject to their own terms and privacy policies.

9. Changes to this policy

This privacy policy may be updated from time to time as HyperApply evolves or as legal requirements change. When significant changes are made, the “Last updated” date will be revised and a reasonable effort will be made to notify active users (for example, by email or in-product notice).

Last updated: 12 December 2025