Privacy & Cookie Policy

1. Who we are; contact

PickUp Inc. is the controller for most processing described here.

Contact: support@pickupjs.com

2. Scope

This Policy covers personal data processed via:

• The Website and web applications
• AutoApply (job search automation and submissions)
• Marketing communications (including PickUp updates and newsletters)

3. Data we collect

• Account & contact data: name, email, country, preferences.
• Job-search materials: CVs/résumés, cover letters, job descriptions, role preferences.
• AutoApply data: prompts, drafts, submissions, application content.
• Technical/usage data: device/browser, IP address, event logs, diagnostics.
• Marketing preferences: opt-ins, unsubscribes.

4. How we use data; legal bases

• Provide and secure the Services: contractual necessity; legitimate interests.
• AutoApply automation: automated ranking, selection and form-filling at your direction.
• Improve reliability & abuse-prevention: we may use aggregated/de-identified telemetry (e.g., error rates, provider responsiveness, anonymized prompt patterns).
• Marketing: consent or where permitted by law.
• Compliance, security and fraud prevention: including detecting, investigating and preventing misuse of the Services, identity misrepresentation, suspicious activity and security incidents.

5. AI processing

When you request AI-generated text (e.g., a cover letter or resume optimization), we send the minimum necessary prompt data to our model provider(s). We instruct them not to use prompts or outputs to train their models. Returned text is stored in your account only as long as you keep it or as needed to deliver the feature.

6. Automated decision-making & profiling (AutoApply)

If you enable Auto-Submit (or approve a queued submission), we perform automated ranking, selection and form-filling at your request to execute your instructions. This does not produce legal or similarly significant effects about you by us; it automates tasks you would otherwise perform. To avoid automated decisions, keep Review Mode enabled and decline submissions you do not want sent.

7. "As-provided" transmission; restricted data

Application data is transmitted to third-party platforms as provided by you; we do not redact or mask fields on your behalf. Avoid including payment-card data, bank details, government ID numbers, health/biometric data or other sensitive data unless a form explicitly requests it and you choose to provide it.

8. Sharing

We do not sell or rent personal data. We share personal data with:

• Service providers acting on our instructions (including hosting, analytics, email delivery, and security providers)
• Third-party platforms where you direct us to submit applications
• Authorities where required by law or where we reasonably believe it is necessary to comply with legal or regulatory obligations
• Parties necessary to protect rights, enforce our terms or detect, investigate and prevent security issues, fraud or abuse

9. Cookies & similar technologies

We use cookies and similar technologies to operate and improve the Services (e.g., session authentication, preferences, analytics). Manage preferences via our cookie banner or your browser settings.

10. Marketing

We only send marketing to individuals with consent. We maintain records of consent (who, when, how, what you were told). You can unsubscribe at any time via the link in any marketing email.

11. Data retention

• Account data: life of the account; key logs up to 12 months; security logs up to 24 months.
• Application data: until you delete them or close your account.
• Backups: deleted within +30 days after primary deletion unless required by law.

12. Your rights (US)

Depending on your state of residence, you may have rights under state privacy laws (such as the California Consumer Privacy Act). These may include the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt-out of the sale or sharing of your personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@pickupjs.com.

13. Security

We implement reasonable technical and organizational measures (access controls, network protections, encryption where appropriate). No method is infallible; we cannot guarantee absolute security.

14. Children

The Services are not directed to children under 13. If you believe a child has provided us with personal data, email support@pickupjs.com so we can immediately delete it.

15. Changes to this Policy

We may update this Policy; we will post changes with a new "Last updated" date. Where required by law, material changes will be accompanied by additional notice or consent.

16. Third-party links

We are not responsible for the content or privacy practices of external sites we link to.

17. Contact us

If you have any questions about this Privacy Policy, please contact us at support@pickupjs.com.