Data Privacy Policy
Last updated: June 2026 | Corporate Protocol for the Safeguarding of Professional Information
01.Security Architecture & Data Flow
Our technological ecosystem is engineered under advanced security paradigms to ensure that the processing of your professional data meets the most stringent international standards:
Federated Identity and Secure Authentication (OAuth 2.0)
We implement industry-standard OAuth 2.0 protocols provided by Google for secure registration and authentication. This verification is managed via short-lived, signed cryptographic tokens, completely preventing our servers from ever accessing or storing your raw credentials.
Persistent Data Infrastructure (Encrypted Database)
All professional profiles, resumes, and system activity logs are stored in corporate-grade PostgreSQL databases. Data is always encrypted in transit via HTTPS/TLS and stored using the at-rest encryption provided by our database infrastructure, with logical per-user data isolation to keep each account separate.
Cognitive Resume Processing via Secure APIs
Profile parsing for ATS (Applicant Tracking Systems) matching and custom question solving are processed through paid API plans from our AI providers (such as OpenAI, Gemini, and DeepSeek). We send only the minimum data required to process each request and never sell your professional information. Processing is governed by each provider's privacy policy and API terms of use.
PCI-DSS Certified Billing
Payment processing is delegated directly and exclusively to Culqi, a PCI-DSS certified Peruvian payment gateway. Your sensitive financial details are encrypted end-to-end and handled securely by Culqi, never transiting or being stored on our application servers.
Local Autofill Modules (Web Extension)
The browser extension stores data locally using the browser's own storage (chrome.storage.local), keeping only what is needed for the application session: the job queue, the active profile, and the process state. This data is synced over HTTPS with your account, and you can remove it at any time by uninstalling the extension or clearing the site's data.
02.No Intrusive Monitoring
Cherry Apply operates solely under transparent SaaS subscriptions. We never monetize, sell, or share your professional profile with data brokers, ad networks, or third-party recruiters.
- •Zero Tracking Cookies: We do not deploy ad pixels or intrusive user behavioral tracking scripts.
- •Minimized Telemetry: We only log essential diagnostic server-side technical events necessary to guarantee service speed and agent reliability.
03.User Sovereignty & Global Privacy Rights (GDPR / CCPA)
You maintain absolute sovereignty over your professional details. In compliance with international data privacy laws, you hold the following rights:
- •Access and Portability: Export and download a structured copy of all your professional profile data at any time from your settings panel.
- •Dynamic Rectification: Edit, update, and immediately adjust your customized CV parameters and screening options.
- •Right to be Forgotten: Request the complete and permanent deletion of your account and database records, terminating any active job application payloads with a single click.