Privacy Policy

Who is responsible for your data

G3 Apply is a service of G3 Infotech, the controller of the personal data processed in the product under Brazil’s General Data Protection Law (Law 13,709/2018, LGPD).

For any privacy matter, including requests about your data, write to rodrigoaraujo990@gmail.com.

What data we collect

We only collect what the service needs to work:

• Account: name, email, password (stored only as a hash, never in plain text), language and time zone. If you sign in with Google, we receive the name, email and photo of your Google profile.
• Résumé and professional profile: the files you upload and the information taken from them, such as experience, education, skills and contact details.
• Screening answers and preferences: your answers to job questions and what you set up in the copilot, such as roles, locations, salary range and companies to avoid.
• Applications: the jobs found, the forms prepared, what was submitted, when, and the status of each application.
• Usage data: pages visited and actions in the product, device and browser type, IP address and technical security logs.
• Payment: plan, billing history and subscription status. Card details stay with Stripe and never touch our servers.

How we use your data

We use your data to:

• Find jobs that match your profile and prepare and submit the applications you authorize, the way you chose: reviewing each one or letting the copilot submit.
• Send transactional emails, such as account verification, password resets, application notices and billing. You can turn notices off with the link in the email itself.
• Process payments and manage your plan.
• Protect your account and the service, prevent abuse and fraud, and meet legal obligations.
• Understand how the product is used so we can improve it: browser analytics (cookies and identifier) only runs if you allow it, and the usage events our servers record (internal id, plan and actions in the product, without your e-mail) and technical logs are used to run and improve the service.

Under the LGPD, the legal bases for these uses are performing our contract with you, consent (for browser analytics), legitimate interest (for security, for the usage events and technical logs from our servers and for improving the service) and compliance with legal obligations. We do not sell your data or use it for advertising.

Who we share data with

We only share data with those who need it for the service to work:

• Applicant tracking systems (ATS) of the jobs you apply to, such as Greenhouse, Lever, Ashby, Workable and Gupy: they receive the application you authorized, with its résumé and answers, and handle it under the policy of the company that posted the job.
• Large language model (LLM) providers, such as OpenRouter and OpenAI: they receive excerpts of your résumé, your answers and the job only to prepare application answers and documents.
• Resend: sends G3 Apply’s emails.
• PostHog: measures product usage. It receives browser analytics only with your consent and, under legitimate interest, the usage events from our servers, keyed by your internal id and without your e-mail, and the technical logs we use to run the service.
• Stripe: processes payments for paid plans.

Some of these providers are located outside Brazil, mainly in the United States. These international transfers happen to perform our contract with you and follow the safeguards set by the LGPD. We may also share data when required by law or a court order.

Use of Google user data

If you sign in with Google, G3 Apply receives only your name, your email and your profile photo, through the openid, email and profile scopes, and uses this data to create your account, sign you in and operate the account features you use. We do not request access to Gmail, Calendar, Contacts or any other data in your Google Account.

Data received from Google is never sold or used for advertising, and it is transferred to third parties only when needed to provide the service, as described in Who we share data with, or when required by law.

G3 Apply’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove G3 Apply’s access to your Google Account at any time at myaccount.google.com/permissions.

How long we keep data

We keep your data for as long as your account exists. Application drafts prepared by the copilot that you never touched are deleted 30 days after their last activity.

When you delete your account, we erase your profile, résumés, answers and applications and ask Stripe to delete your customer record. Backups are overwritten in the normal backup cycle, and we keep only what the law requires, such as billing records.

Your rights under the LGPD

Under the LGPD, you can at any time:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate or outdated data.
• Export your data: on the Account page, under Export my data, you download a file with everything.
• Delete your account and data: on the Account page, under Delete account.
• Withdraw consent for browser analytics in Measurement preferences, in the site footer, and object to the usage events from our servers through the contact e-mail.
• Ask who we share your data with, request anonymization, blocking or deletion of unnecessary data, and object to processing.

For requests the product does not handle on its own, write to rodrigoaraujo990@gmail.com. We reply within 15 days. You can also file a complaint with Brazil’s National Data Protection Authority (ANPD).

Cookies and consent

We use essential cookies to keep you signed in and remember your language. Analytics cookies and storage are only used with your consent, which you can change at any time in Measurement preferences, in the site footer.

Security

We use encrypted connections (HTTPS), passwords stored only as hashes, restricted access to data and security logs. If a security incident may affect you, we will notify you and the ANPD as the law requires.

Changes to this policy

When this policy changes, we update the date at the top of the page. If the change is significant, we will email you before it takes effect.