Privacy Policy

Last updated 28 October 2026

This policy explains what personal data QuickApplyPilot ("we", "us") collects when you use quickapplypilot.com, why we collect it, and the choices you have. QuickApplyPilot is operated by an individual sole proprietor based in Nigeria, who is the data controller for your personal data. You can contact us about privacy at support@quickapplypilot.com.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where they apply to you, the data protection laws of the country you live in.

1. Data we collect

• Account data: name, email address and a password, which is stored only as a secure one-way hash. We never store plaintext passwords.
• Profile and career data you choose to provide: preferred job titles, career level, skills, experience and education summaries, preferred countries and work preferences.
• Content you create or upload: CVs, uploaded documents (PDF/DOCX), cover letters, CV check reports, job descriptions you paste, application records, interview practice answers and support requests.
• Billing data: your plan, subscription status and payment-provider customer/subscription identifiers. Card details are handled by our payment provider; we never receive or store full card numbers.
• Usage and technical data: feature usage counts, AI usage metadata (feature, model, token counts, status — not your CV text), IP address for security and rate limiting, and essential cookies used to keep you signed in.

We do not ask for sensitive information such as passport numbers, national identity numbers (including NIN or BVN) or bank details, and you should not include them in your CV or messages.

2. Why we use your data, and our lawful basis

• To provide the service you signed up for (performance of our contract with you): storing your CVs, running CV checks and the AI features you request, tracking your applications, and managing your subscription.
• To keep the service secure and prevent abuse (our legitimate interests): rate limiting, fraud prevention, enforcing plan limits and fixing problems.
• To send transactional emails (contract): account confirmation, password reset, billing notices and reminders you set.
• Marketing emails (your consent): only if you opt in under Settings. You can withdraw consent at any time.
• To meet legal obligations, such as tax and accounting records for payments.

3. AI processing

When — and only when — you run an AI feature (for example improving a CV section, an AI-assisted CV analysis, generating a cover letter or interview feedback), the text needed for that request is sent to our AI provider (currently Anthropic) to generate the result. We send only the minimum data required and never send passwords, payment details or other users' information.

• We do not use your CVs, documents or answers to train AI models. Any future use for model improvement would require your separate, explicit opt-in.
• AI output can be inaccurate. You decide whether to accept, edit or reject every suggestion.
• No decision that legally or significantly affects you is made by automated means; CV check scores are guidance only.

4. We do not sell your data

We do not sell or rent your personal data or the contents of your CV to anyone, and we do not share it with employers unless you send it yourself.

5. Service providers

We use the following providers to run QuickApplyPilot. They process data only on our instructions:

• Cloudflare — website hosting, database, account sign-in and private file storage.
• Resend — transactional email delivery.
• Anthropic — AI processing for features you run.
• Stripe or Paystack — payment processing and subscription management.
• Job-data providers (where configured) — receive only the search terms you enter.

6. International transfers

Some of these providers store or process data outside Nigeria, including in the United States and the European Union. Where we transfer personal data outside Nigeria, we rely on the safeguards permitted by the NDPA, such as the provider's contractual data protection commitments, and we transfer only what is needed to provide the service.

7. Storage and security

Uploaded documents are kept in private storage that is never publicly accessible; files are read only by our servers after checking that they belong to your account. Every request for your records is restricted to your account, connections are encrypted, and passwords are hashed. No system is perfectly secure, but we work to protect your data and will notify you and the Nigeria Data Protection Commission of a breach where the law requires.

8. How long we keep data

• Your account and content are kept while your account is active, so you can return to them.
• When you delete your account, your profile, CVs, documents, cover letters, reports, applications and interview sessions are deleted from our live systems immediately, and from backups within 30 days.
• AI usage records and email delivery logs are deleted after 12 months.
• Resolved support requests are deleted 24 months after they were last updated.
• Payment and invoice records are kept by us and our payment provider for as long as tax and accounting law requires.

9. Your rights

Under the NDPA you have the right to:

• Access and portability: download your data from Settings at any time.
• Correction: edit your profile and content at any time.
• Deletion: delete individual items or your whole account from Settings.
• Object, restrict or withdraw consent for processing based on legitimate interests or consent.
• Complain: to us at support@quickapplypilot.com, or to the Nigeria Data Protection Commission (ndpc.gov.ng). If you live elsewhere, you can also contact your local data protection authority.

We reply to rights requests within 30 days. You can also use our contact form.

10. Cookies

We use essential cookies to keep you signed in and secure. We store your light/dark theme preference in your browser. We do not use advertising or tracking cookies. If we add analytics that require consent, we will ask first.

11. Age

QuickApplyPilot is for people aged 18 and over. We do not knowingly collect data from anyone younger; if you believe a child has created an account, contact us and we will delete it.

12. Changes

We will post updates to this policy here, change the date at the top, and email you about significant changes.