Skip to main content

Legal

Privacy policy

What we collect, why, who processes it, and how deletion works.

Last reviewed: 4 Oct 2026

What we collect and why

Account data (email, display name) to create and secure your account.

Candidate profile facts you confirm, and resume files you optionally upload, to ground AI drafts in your real experience.

Draft content you write or generate, recipients you choose, and pipeline entries you track, to run the workspace.

Operational records (credit ledger, payments, deliveries, security audit events) to keep the service correct and auditable.

AI processing

When you generate a draft, the confirmed profile facts, relevant company evidence, and any job description you paste are sent to our model provider (Google Gemini API) to produce the draft. Draft bodies and resumes are not used to train models under our commercial terms.

Manual writing, templates, and copying never call the model provider.

Gmail access

If you connect Gmail, we request the gmail.compose scope from a dedicated OAuth project. Google documents this scope as permitting managing drafts and sending email. Apply Bee uses it only to create drafts you explicitly approved; we do not read your inbox or send messages automatically.

We store the minimum tokens needed, encrypted (AES-256-GCM), and you can disconnect at any time from Settings → Integrations.

Retention and deletion

Drafts, profiles, and resumes persist until you delete them or close your account.

Quarantined/failed uploads are removed within 24 hours. Operational logs are kept 14–30 days without private content. Financial records are retained as required by law, pseudonymized where lawful.

Account deletion blocks new work immediately and removes files and derived content; existing Gmail drafts already created in your mailbox remain there — we cannot remove external copies.

Processors

Neon (database), Upstash (rate limiting), Razorpay (payments), Google (model API and Gmail API), and our hosting provider. Contact directory data is licensed from verified sources only; see the Contact data policy.