Privacy Policy
Last updated: August 26, 2026
Useful Apply, operated by Karko AI Inc.
Karko AI Inc. ("Useful Apply", "we", "us" or "our") operates an AI-powered job application platform. This Privacy Policy describes how we process personal information through usefulapply.com, the logged-in product, our marketing pages and related emails (together, the "Service").
Useful Apply was previously known as Karko AI. This policy covers both names.
If you are in the European Economic Area or the United Kingdom, please also read the Notice to European users below.
1. Personal information we collect
Information you provide
- Account data: name, email address and a hashed password if you sign up with email.
- Google account data: if you continue with Google, we receive the name, email and profile image Google makes available to us.
- Career and application data: CVs and resumes you upload or paste, profile photos you add to a CV, job descriptions, job search preferences, career-profile answers, application tracker entries, chat messages and any screening-question answers you submit.
- Generated content: tailored CVs, cover letters, application emails, follow-up emails and related drafts we create for you.
- Communications: messages you send through the contact form or to support@usefulapply.com.
- Transactional data: plan, credit balance and purchase history. We do not store full payment-card numbers. Stripe collects those directly.
Please do not upload government ID numbers, bank-account numbers or other sensitive data we do not need. If a CV you upload contains that information, we will process it as part of the file you submitted.
Information from other sources
- Google, when you choose to sign in with Google.
- Stripe, for payment status, invoices and subscription state.
- Public job listings returned by our search provider (SerpAPI / Google Jobs) in response to queries we build from your career profile and search settings. Those listings are about employers, not about you.
Information collected automatically
- Device and log data such as IP address, browser type, device type, language and approximate location derived from IP.
- Usage data such as pages viewed, buttons clicked, feature use, referral URL and timestamps.
- For visitors who try a generation without an account, a hash of the IP address so we can apply the anonymous-use limit.
We do not collect precise GPS location and we do not have a mobile app.
2. Cookies, analytics and AI processing
Cookies and similar technologies are described in our Cookie Notice.
Your CV, job descriptions, chat prompts and related content are processed by AI providers so we can generate application materials, rank roles, synthesize a career profile and run in-product chat. Today that includes Anthropic Claude via Amazon Bedrock and Cloudflare Workers AI. Those providers process the content you submit in order to return a result. We do not use your CV or application materials to train our own models. We instruct providers not to use that content to train their general models, subject to each provider's published terms.
We use PostHog for product analytics, error tracking and session replay. Session replay records how you use the Service (clicks, mouse movement, scrolling and on-screen content). Input fields are masked in recordings. We do this to find bugs and improve the product, not to sell a profile of you.
3. How we use personal information
- Create and secure your account, including email verification and password reset.
- Provide the Service: parse CVs, run fit analysis, generate application materials, power chat, build a job feed, track applications and manage credits.
- Process subscriptions, credit packs and related billing through Stripe.
- Send service emails (security, receipts, account deletion confirmations) and founder onboarding emails (a welcome message and a short check-in). You can ask us to stop non-essential emails at any time.
- Respond to support requests and contact-form messages.
- Measure usage, fix bugs, prevent abuse and improve the Service.
- Comply with law, enforce our Terms and protect users, the Service and our rights.
- Create aggregated or de-identified statistics that no longer identify you. We do not try to re-identify that data except to test that the de-identification worked.
We do not sell your personal information. We do not use it for interest-based advertising. We do not run automated decisions that produce legal or similarly significant effects. Fit scores and ranked jobs are informational. You decide whether to apply.
4. How we share personal information
We share personal information with the companies that help us run the Service:
- Cloudflare (hosting, database, file storage, cache, email delivery and Workers AI).
- Amazon Web Services / Amazon Bedrock (Claude for writing, parsing and fit analysis).
- Stripe (payments). See Stripe's privacy policy.
- PostHog (analytics, errors and session replay).
- Google (optional sign-in).
- SerpAPI (job-search queries derived from your search settings, not your full CV file).
We may also share information with professional advisors, with authorities when the law requires it, or with a buyer or successor if we are involved in a merger, financing or sale of assets. We do not share your CV with other users or with employers. You choose what to send to an employer.
5. Retention
- Account and application data: kept while your account is open.
- After you confirm account deletion: we delete stored account data and files, generally within 30 days.
- Backups and logs: purged within 90 days where reasonably practicable.
- Billing records: kept as long as tax and accounting rules require.
- Anonymous-use IP hashes: used to enforce the free-generation limit for about 30 days.
6. Your choices
- You can review and update account details in Settings.
- You can request access, correction, a copy of your data or deletion by emailing support@usefulapply.com. You can also start account deletion in Settings. If a subscription would keep billing after deletion, cancel it first.
- You can opt out of founder check-in and similar non-essential emails by replying or emailing us. Transactional mail (security, billing, deletion confirmations) will continue.
- Cookie and recording controls are described in the Cookie Notice.
- Some browsers send a "Do Not Track" signal. We do not respond to it at this time.
7. Security
We use HTTPS, store files and database content with encryption at rest on Cloudflare, hash passwords and restrict access to production systems. No internet service is completely secure. Please use a strong unique password and keep your login to yourself.
8. International transfers
Karko AI Inc. is a Delaware corporation. The Service is hosted in the United States and our providers also process data in the United States and other countries. Privacy laws there may differ from the laws where you live. See the Notice to European users for more on transfers out of Europe.
9. Children
The Service is not intended for anyone under 16. We do not knowingly collect personal information from children under 16. If you believe we have, contact us and we will delete it.
10. Other sites
The Service may link to employer career pages, Trustpilot, payment pages and other third-party sites. Their privacy practices are their own. Job listings come from public sources and may be incomplete or out of date.
11. Changes
We may update this policy. We will change the date at the top and, for material changes, notify you by email when we have an address on file, or by a notice in the Service. Continued use after the effective date means the updated policy applies to that later use.
12. Contact
Email: support@usefulapply.com
Mail: Karko AI Inc., 1207 Delaware Ave #412, Wilmington, DE 19806, USA
We do not currently publish a phone number or maintain a separate EU or UK representative. Contact us directly at the email above.
13. State privacy rights notice (United States)
Some U.S. state laws give residents rights to know, access, correct, delete and opt out of certain processing, and to appeal a refusal. Those rights are not absolute. We may need to verify your identity before we act. You may use an authorized agent where the law allows. We will not discriminate against you for exercising these rights.
We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising. We do not process personal information for targeted advertising. We do not use sensitive personal information to infer characteristics about you. We do not have actual knowledge that we collect, sell or share the personal information of consumers under 16.
| Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email, IP, cookie IDs, Google account ID | Service providers listed above |
| Customer records | Account profile, support messages | Cloudflare, email delivery |
| Commercial information | Plan, credits, purchase history | Stripe, Cloudflare |
| Internet activity | Pages viewed, feature use, session replay | PostHog, Cloudflare |
| Approximate geolocation | IP-based region; job-search locations you enter | Cloudflare, PostHog, SerpAPI (search location only) |
| Professional information | CV content, work history, job preferences | AI providers, Cloudflare storage |
| Inferences | Career profile, fit notes, ranked roles | AI providers, stored on Cloudflare |
We do not sell or share any of the categories above for advertising. To exercise state privacy rights, email support@usefulapply.com. Nevada residents may use the same address to opt out of any future sale of covered information (we do not sell it today). California residents may send a "Shine the Light" request to the same address. We do not disclose personal information to third parties for their own direct marketing.
14. Notice to European users
This section applies to individuals in the EEA and the UK. "Personal information" includes "personal data" under the GDPR and UK GDPR. Karko AI Inc. is the controller. Contact details are in section 12. We have not appointed a separate data protection officer.
Legal bases
| Purpose | Legal basis |
|---|---|
| Account, generations, job feed, tracker, credits | Contract (our Terms) |
| Payments via Stripe | Contract |
| Security, fraud and abuse prevention | Legitimate interests and, where required, legal obligation |
| Product analytics and session replay | Legitimate interests in running a reliable product. Where consent is required for non-essential cookies, we rely on consent. |
| Welcome and check-in emails | Legitimate interests in onboarding new users, or consent where the law requires it |
| Legal compliance and defending claims | Legal obligation and legitimate interests |
Your GDPR rights
You may request access, correction, deletion, restriction, objection (including to processing based on legitimate interests or to direct marketing) and portability, and you may withdraw consent where we rely on it. Email support@usefulapply.com. We may need to verify your identity. You also have the right to lodge a complaint with your local supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
Transfers outside Europe
Using the Service means your personal data is processed in the United States. The U.S. is not treated as offering an equivalent GDPR adequacy regime on its own. Where we share data with providers outside Europe, we rely on their standard contractual clauses or comparable transfer tools where they offer them, and on limited GDPR derogations where those tools do not apply and the transfer is still necessary to provide the Service you requested. You can ask us for more detail at support@usefulapply.com.
Related: Terms of Service, Cookie Notice and Imprint. Useful Apply, operated by Karko AI Inc.