Privacy Policy

Last updated: 30 July 2025

1. Who We Are

Apply Orbit ("we", "our", "us") is operated by Apply Orbit SAS, a company registered in France (RCS 919 845 321) with offices at 24 Rue Oberkampf, 75011 Paris, France. We act as the Data Controllerfor personal data processed via Apply Orbit.app.

2. What Data We Collect

Account Data – e‑mail, hashed password, name, country.
Application Data – résumé/CV files, cover letters, job preferences, application history.
Usage Data – IP address, browser/device information, log files, cookies.
Payment Data – transaction IDs and card metadata handled by Stripe (PCI‑DSS compliant). We never store full card numbers.

3. Legal Bases (Art. 6 GDPR)

Purpose	Legal Basis
Provision of the Apply Orbit service	Art. 6 (1) b – Contract
Payment processing	Art. 6 (1) b – Contract
Product improvement & analytics	Art. 6 (1) f – Legitimate Interest (opt‑out)
Marketing e‑mails	Art. 6 (1) a – Consent
Compliance with legal obligations	Art. 6 (1) c – Legal Obligation

4. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. You may withdraw consent at any time by contacting privacy@Apply Orbit.app.

5. Data Retention

We keep account data while your account is active and erase it 30 days after deletion. Tax‑relevant records are stored for 10 years, per French law.

6. International Transfers

Data is hosted in AWS eu‑west‑3 (Paris). Transfers outside the EEA rely on EU Standard Contractual Clauses.

7. Security Measures

AES‑256 encryption at rest
TLS 1.3 in transit
Least‑privilege access controls
Annual ISO 27001 audits & regular penetration tests

8. Cookies & Consent

See our Cookie Policy for details on cookies and how to manage your preferences.

9. Supervisory Authority

You may lodge a complaint with CNIL(Commission Nationale de l’Informatique et des Libertés).

10. Changes

We will notify you via e‑mail and in‑app banner at least 14 days before material changes take effect.