SnapplyPrivacy Policy
Last updated: 19 October 2026
Snapply is a browser extension and online service that helps you fill job applications. This policy explains what personal data we process, why, and your rights under the UK GDPR and the Data Protection Act 2018.
Who we are
Snapply is operated by Tolga Oy, a sole trader in the United Kingdom, who is the data controller. Contact: hello@snapply.co.uk.
What we process and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Google account email, name and account id (when you sign in) | Create and secure your account | Contract |
| Your CV file and the profile built from it (work history, education, skills, contact details) | Fill application forms and draft answers for you | Contract |
| Answers you choose to remember (e.g. notice period, salary expectation) | Fill the same question on later applications | Contract |
| Text of the job advert and the application question you are working on | Match your experience and draft answers or cover letters | Contract |
| Plan, subscription status, number of AI drafts used and the web addresses of the job applications you fill (to count your monthly applications) | Provide the plan you chose and enforce allowances | Contract |
| The wording of application forms you use Snapply on (field labels, field types and option texts — never your answers) | Recognise unfamiliar form fields so they can be filled, and fix sites you report as not filling correctly; shared across users as site maps, containing no personal data | Legitimate interests |
| Anonymous counts of visits and clicks on our website (for example “a visit from reddit.com”, “Add to Chrome clicked”) — no cookies, no identifiers, no IP addresses stored | Understand which channels bring people to Snapply | Legitimate interests |
| Who invited you (when you sign up through a friend’s invite link) | Give you and your friend the free 15 days of Pro | Contract |
| Email address you leave on our website to be told when Snapply is available | Send you the install link once; deleted on request | Consent |
| Payment details | Handled by Stripe; we never see or store your card number | Contract |
What never reaches our servers
Answers that Snapply classifies as legal declarations (such as right to work, sponsorship, criminal convictions, barring lists and consents), personal or equality information (such as date of birth, ethnicity, disability, religion, sexual orientation, gender identity, nationality) and referee details are stored only in your browser’s extension storage on your own device. Documents you add under “My documents” (such as qualification certificates or membership certificates) are also kept only in your browser and are attached to applications only on your own device. Our servers reject them. To match an application form to its job advert, Snapply keeps the text of the last 15 job adverts you opened, also only in your browser; only adverts opened in the last six hours are used. These answers are suggested to you and only filled after you confirm them each time.
AI processing
When you ask for an AI draft or cover letter, the relevant parts of your CV, the job advert and the question are sent to our AI provider, OpenAI, to generate the text. OpenAI processes this data on our behalf, does not use API data to train its models by default, and may process it in the United States; this transfer is protected by the UK International Data Transfer Addendum to the standard contractual clauses. Nothing is sent to the AI provider unless you press a drafting button.
Who we share data with
Only service providers who process data on our instructions: Fly.io (hosting, London region), OpenAI (AI drafting), Stripe (payments) and Google (sign-in). We do not sell your data and do not use it for advertising.
How long we keep it
We keep your account data until you delete your account. Deleting your account (Snapply panel → Delete account, or by emailing us) removes your profile, CV and saved answers from our servers immediately; backups are overwritten within 7 days. Stripe keeps payment records as required by law. Data in your browser is removed when you uninstall the extension or clear its storage.
Security
Data is encrypted in transit (HTTPS). Each account’s data is stored separately and can only be accessed with that account’s signed session.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent where it applies. Email hello@snapply.co.uk; we reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Changes
If we change this policy we will update the date above and, for significant changes, tell you in the extension.