Privacy Policy

Last updated: November 11, 2026

Straight Apply (“we”, “us”) is a job application service run by OAKTREEUNI. It finds open jobs on employers’ own career sites in Canada and the United States, prepares applications from your resume, and, on your rules, applies for you. This policy explains what personal data we collect, why, who we share it with, how long we keep it and the choices you have.

Straight Apply helps you apply. It is not an employer, a recruiter or a staffing agency, and it does not promise interviews, offers or income.

1. Who this policy covers

This policy covers the website at straightapply.ai and its subdomains, the Straight Apply app, and email between you and us. Employers’ career sites and the job systems they use have their own privacy policies; this one does not cover them.

2. What we collect

You give us:

Account details. When you sign in with Google we receive your Google account identifier, name and email address. We do not ask you to create a separate password.
Your resume and the facts drawn from it. Work history, education, skills and anything else in the files you upload, and facts you add or edit.
Your job search settings. Names you give your profiles, roles, places, job types, companies to avoid, words to include or exclude, minimum fit, daily limit, schedule, and whether we apply for you or save jobs for your review.
Answers to application questions. Including optional demographic or diversity questions, which you may always leave unanswered.
Feedback and reviews. Ratings and comments you send us. If you agree, a review may be shown on our website with the display name, role and city you choose.
Messages to support.

Created as you use the service:

Applications. For every application: the job posting as it appeared, the resume version, the letter and the answers sent, and the date.
Employer replies. If you connect Gmail, the subject, sender, date and text of emails from employers, recruiters and job systems you applied through (see section 4).
Billing status. Your plan, its state and renewal date. Card details are entered on our payment provider’s form and never reach our servers.
Usage data. Pages and screens viewed, buttons used, plan chosen, the page you came from and campaign tags, linked to a random identifier that does not contain your name or email.
Security logs. When one of our staff opens your account to give support, we record who, when and why.

We never collect: passwords for employers’ career sites, or your full card number.

3. How we use it

To run the service: find jobs that fit your settings, write letters using only facts from your resume, fill and submit applications as you have told us to, and track replies.
To take payment and manage your plan.
To keep the service secure and to fix problems.
To improve the service, using usage data and feedback.
To contact you about your account, applications and billing. Marketing email is only sent if you agree, and every marketing email has an unsubscribe link.
To meet legal obligations.

Letters and answers are written by language models we run on our own servers. Your resume is not sent to an outside AI company to write them.

4. Gmail

Connecting Gmail is optional. If you connect it, we ask Google for read-only access. We look only for emails from employers, recruiters and job systems you applied through, so replies and interview invitations appear next to the right application. We cannot send, delete or change any email, and we do not read your personal mail.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Gmail data for advertising, we do not sell it, we do not let people read it unless you ask us to for support, for security or because the law requires it, and we do not use it to train general AI models.

You can disconnect Gmail at any time in Settings or in your Google account’s security settings.

Employers. When an application is sent, the employer (and the job system it uses) receives the resume, letter and answers in that application. Nothing else.
Service providers who work for us under contract and only on our instructions:
- Google (sign-in and, if you connect it, Gmail)
- Helcim (card payments)
- Cloudflare (website hosting, security and network)
- our database and server hosts
- our email delivery provider
Analytics and advertising partners, only with your consent. If you accept on our cookie banner, Google (Analytics and Tag Manager) and Meta measure visits and ad results. If you decline, only our own first-party counting runs.
When the law requires it, or to protect people, our users or the service.
In a sale or merger of the business, under this policy.

We do not sell your personal data, and we do not share it with employers beyond what you send them.

6. Cookies and similar tools

Our website stores your cookie choice in your browser (sa_consent). The app stores small settings in your browser so we do not show the same prompt twice.
Google and Meta cookies are set only after you accept on the banner. You can change your choice at any time from the link in the footer.
The website loads fonts from Google Fonts, which receives your IP address when the page loads.

7. How long we keep it

Resumes, facts and saved answers: until you delete them or your account.
Applications and employer replies: two years from the application date, then deleted.
After a plan ends or is locked for non-payment: 90 days, then the account and its data are deleted.
When you delete your account: deleted for good after 7 days. You can cancel the deletion during those 7 days.
Billing records: as long as tax and accounting law requires.
Support access logs: kept for security and not changed.

8. Your choices and rights

From Settings you can see and edit your data, export it (resumes, facts, answers, applications and replies, as JSON and CSV), disconnect Gmail, cancel your plan and delete your account. You can also email privacy@straightapply.ai to:

access or get a copy of your personal data
correct it
delete it
withdraw a consent you gave
ask how we handled it

We reply within 30 days. We may need to confirm your identity first. Depending on where you live, privacy law (such as Canada’s PIPEDA, Quebec’s Law 25 or US state laws like California’s CCPA) may give you further rights; we honour them. If you are unhappy with our answer you may complain to your privacy regulator.

9. Security

We use encryption in transit, access controls and logged staff access. No service is perfectly secure; if a breach affects your data we will tell you and the regulators as the law requires.

10. Where data is stored

We and our providers may process data in Canada, the United States and other countries where they operate. We require the same protection wherever it is processed.

11. Age

Straight Apply is for people 18 and over. We do not knowingly collect data from anyone younger.

12. Links to other sites

Job postings link to employers’ own sites. Their privacy practices are their own.

13. Changes

We will post any change here with a new date. If a change is significant, we will email you before it takes effect.

14. Contact

Privacy questions: privacy@straightapply.ai Everything else: support@straightapply.ai