Privacy Policy

This Privacy Policy (“Policy”) explains how KEYBOARD GROUP LLC (“we,” “us,” or “our”), doing business as ApplyRyt, collects, uses, discloses, and protects the personal information of users (“you,” “your,” or “User”) who access or use the ApplyRyt platform, website, mobile and desktop applications, and related services (collectively, the “Service”).

By creating an account, making a payment, or using ApplyRyt in any way, you consent to the practices described in this Policy. This Policy should be read together with our Terms and Conditions and Refund and Cancellation Policy.

1. Information We Collect

We collect personal and non-personal information that you voluntarily provide or that is automatically collected when you use the Service. The scope of information collected depends on your account type (student/job seeker or recruiter/employer) and how you use the platform.

1.1. Information You Provide (Students/Job Seekers)

When creating an account, completing onboarding, or using ApplyRyt features, you may provide:

• Account Information: name, email address, and password (via Google OAuth or credentials-based registration);
• Contact Information: phone number, WhatsApp number (including country code) for communication and support;
• Call Recordings: where a call is recorded, the video and audio of that call, including anything you choose to say or show during it. You are told before recording begins;
• Professional Information: work experience, education history, skills, certifications, and uploaded resumes;
• Location Information: city, state/province, country, work authorization status, and visa sponsorship needs;
• Job Application Details: information necessary to complete job applications, which may include personal identifiers, work authorization details (e.g., visa status, OPT/EAD information), educational history, and employment history;
• Assignment Submissions: code files, documents, PDFs, images, and other deliverables submitted as part of take-home assignments through the Jobs Portal;
• Screening Answers: responses to recruiter-defined screening questions submitted with job applications;
• Equal Employment Opportunity (EEO) Data: voluntary self-identification data including gender, race/ethnicity, veteran status, and disability status. This data is collected for compliance purposes only and is never shared with recruiters;
• Account Credentials: job portal login credentials (e.g., LinkedIn, Indeed) and, when necessary, email account access for OTP verification;
• Payment Information: payment details when purchasing a subscription (handled securely and exclusively by Stripe — ApplyRyt does not store or access your full credit card numbers);
• Communications & Team Chat: messages, shared files, and voice/video calls you send or receive through the ApplyRyt team chat (available in our website and mobile/desktop apps), as well as messages sent to our support team via email.

1.2. Information You Provide (Recruiters/Employers)

When registering as a recruiter, you may provide:

• Account Information: contact name, email address, password, company name, and company website;
• Company Verification Data: email domain, company website URL, and LinkedIn profile used for identity verification;
• Job Posting Content: job titles, descriptions, requirements, screening questions, assignment specifications, and evaluation criteria;
• Recruiter Actions: candidate evaluations, notes, status changes, and communications sent through the platform.

1.3. Automatically Collected Information

When you visit our site or use our platform, we may automatically collect:

• Device information (browser type, operating system, IP address, and, in our mobile/desktop apps, device type and app version);
• Push notification tokens and device identifiers, used solely to deliver message and call notifications to your mobile or desktop app;
• Usage data (pages visited, actions taken, time spent on site);
• Cookies and similar technologies, used to keep you logged in, to remember which page or ad brought you to us, and, on our public pages only, for analytics and advertising, as described in Section 8.

1.4. AI Data Processing

ApplyRyt uses artificial intelligence, including third-party AI services, to power various features:

• Resume Generation (RezRyt™): Your profile and resume data are processed by OpenAI to generate customized, job-specific application materials;
• Candidate Matching: Your professional profile may be processed by Anthropic (Claude) and OpenAI (GPT) to match you with relevant job postings and evaluate your fit;
• Assignment Evaluation: If you submit a take-home assignment, your code, documents, and other deliverables are processed by Anthropic (Claude) for multi-pass quality evaluation, plagiarism detection, and scoring;
• Pre-Filtering: Your location, visa status, certifications, and other profile data may be processed by OpenAI (GPT) to determine initial eligibility for job postings.

All AI processing is performed solely for the purposes described above. We do not sell your data to AI providers, and processing is subject to their respective privacy and security policies.

2. How We Use Your Information

We use collected information to:

• Operate, maintain, and deliver the ApplyRyt service, including submitting job applications on your behalf;
• Generate and deliver AI-customized resumes and application materials through RezRyt™;
• Facilitate the recruitment process, including matching candidates to job postings, evaluating assignment submissions, and providing AI-powered scoring and analysis to recruiters;
• Perform automated screening and pre-qualification based on recruiter-defined criteria;
• Detect plagiarism and anti-gaming patterns in assignment submissions;
• Communicate with you via WhatsApp, email, and platform notifications regarding applications, evaluations, and service delivery;
• Facilitate communications between recruiters and candidates through the ApplyRyt platform;
• Verify recruiter identity through email domain matching and manual review;
• Provide customer support and respond to inquiries;
• Process payments and manage subscriptions;
• Improve and personalize the user experience and platform functionality;
• Monitor platform usage and prevent fraudulent or unauthorized activity;
• Measure and improve our advertising, including through our marketing agency (see Sections 3 and 8);
• Comply with legal obligations.

We do not sell, rent, or trade your personal information for money. Advertising partners see limited activity on our public pages and on payments, as described in Sections 3 and 8. Section 11 explains what this means under California law.

3. How We Share Information

We share your data only as necessary to provide and operate the Service:

• Recruiters/Employers: When you apply to a job posting through the Jobs Portal, the following information is shared with the recruiting organization: your name, city, state, country, education history, work experience (excluding details), work authorization status, visa sponsorship needs, screening question answers, and assignment submission content. Your email address and phone number are masked (e.g., “j***@gmail.com”, “***-2246”). Your EEO data (gender, race, veteran status, disability) is never shared with recruiters.
• Candidates/Job Seekers: When recruiters post jobs, the company name, job title, description, requirements, and assignment details are visible to registered users. Recruiter personal contact information is not exposed.
• Job Appliers (Service Team): Your assigned ApplyRyt team member (“Job Applier”) will have access to your profile, resume, job preferences, and, when necessary, your job portal and email credentials solely for the purpose of submitting job applications on your behalf. Job Appliers are bound by confidentiality obligations.
• AI Service Providers: Your profile, resume, and submission data may be processed by third-party AI providers, specifically OpenAI (resume generation, pre-filtering) and Anthropic (candidate evaluation, assignment scoring). We do not sell your data to these providers. Processing is subject to their respective privacy and security policies.
• Cloud Hosting: We use Amazon Web Services (AWS) for secure cloud hosting and data storage. AWS is contractually obligated to protect your data.
• Payment Processing: We use Stripe for payment processing. ApplyRyt does not store or access your full payment information. Stripe handles your payment data in accordance with its Privacy Policy and PCI-DSS security standards.
• Email Services: We use Hostinger SMTP for sending transactional emails such as payment confirmations, onboarding instructions, and service notifications.
• App Infrastructure & Communications: To operate our chat, calls, and apps we use Render (application hosting), LiveKit (voice and video calls), Upstash (rate limiting and abuse prevention), and Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) (delivering push notifications to your device). These providers process data only as necessary to provide the Service to us.
• Advertising Measurement (Meta): when you make a payment, create an account, or subscribe, our servers send a conversion event to Meta so we can measure which advertising works. Where we have them, your email address, phone number, name, city, state, ZIP code, country and customer ID are hashed (scrambled) before they leave our servers. Your IP address, browser type and Meta’s own cookie IDs are sent unhashed, so Meta can link the event to the right visit. Meta uses this information only to match the event to an existing Meta account. We do not send your resume, your profile, or any application detail;
• Google: we use Google Analytics and Google Ads, loaded through Google Tag Manager, to measure visits and advertising on our public pages (Section 8). Google processes this data under its own privacy policy;
• Marketing Agency: an independent marketing agency runs advertising for us on Meta and Google. Through tags on our public pages (Section 8), it receives page visits, how those pages are used, and completed payments. For a payment, that means the amount, the page you came from, and a payment reference. It does not receive your resume, profile, application details or card details, and it has no access to your account;
• Scheduling: we use Calendly to book calls. Your name, email address and appointment details are processed by Calendly under its own privacy policy;
• Call Recordings: certain calls — including success-story and refund-review sessions — are recorded to video and audio. You are notified before recording begins. Recordings are held by the video-conferencing provider we use at the time and in our own secure storage, and are retained under Section 7. Where your agreement also grants a media release, its scope is set out in our Refund Policy;
• WhatsApp Communication: We may use WhatsApp (owned by Meta) as one channel for coordination and support. Our primary team communication now takes place through the ApplyRyt team chat in our website and apps. Any messages you send via WhatsApp are subject to WhatsApp/Meta’s own privacy policy and data practices; ApplyRyt is not responsible for how WhatsApp handles message data on its platform.
• Correcting Materially False Public Statements: If you publicly describe your own application volume, delivery, or service history in a way that is materially false and contradicted by your dashboard record, we may disclose the portion of that record reasonably necessary to correct it, as described in Section 30 of our Terms and Conditions. We will disclose no more than is necessary for that purpose, and we will never disclose your resume or application content, credentials, contact information, payment details, or EEO data for this purpose. Where practicable, we will contact you first and give you a reasonable opportunity to correct the statement yourself.
• Legal Compliance: We may disclose information when required by law, court order, or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred under strict confidentiality agreements.

4. Data Storage and Security

ApplyRyt stores all user information, resumes, application records, job postings, assignment submissions, AI evaluation results, and related data securely on Amazon Web Services (AWS), including Amazon S3 for file storage and Amazon DynamoDB for database storage. We employ industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS);
• Access controls and authentication safeguards (including rate limiting, CSRF protection, and secure session management);
• Stripe webhook signature verification for payment security;
• Regular security monitoring.

While we strive to protect your data, no internet-based system can be guaranteed 100% secure. You use the Service at your own risk and acknowledge that credential sharing with your assigned team member carries inherent risks as described in our Terms and Conditions.

5. Data Breach Notification

In the event of a data breach that compromises your personal information, ApplyRyt will:

• Notify affected users via email within 72 hours of becoming aware of the breach;
• Provide a description of the nature of the breach, the types of data affected, and the approximate number of users impacted;
• Describe the measures taken or proposed to address the breach, including steps to mitigate potential harm;
• Provide recommendations for users to protect themselves (e.g., changing passwords on shared job portal accounts);
• Report the breach to relevant regulatory authorities as required by applicable law.

We maintain incident response procedures designed to detect, contain, and remediate security incidents promptly.

6. Payments and Financial Data

All payments are processed through Stripe, a PCI-DSS compliant third-party payment processor. ApplyRyt does not store or access your full payment information such as credit card numbers.

Your payment data is handled directly by Stripe in accordance with its Privacy Policy and security standards. Billing receipts are sent by Stripe directly to your email address.

7. Data Retention

We retain personal and professional data as follows:

• Active accounts: Data is retained for as long as your account remains active and your subscription is in effect.
• After subscription ends (students): We retain your data, including resumes and application records, for 12 months after your subscription ends. This is because employers and job portals may respond to applications weeks or months after submission. After 12 months of inactivity, your data will be deleted or anonymized.
• Applicants who did not subscribe: If you applied through our Profile Evaluation or Free Trial and did not go on to subscribe, we retain your submitted profile for 12 months from your last activity, so that you can return without starting again. After that it is deleted or anonymized.
• Job postings and submissions (recruiters): Posting data, including candidate submissions, evaluation results, and associated records, is retained for 45 days after a posting is closed. After this period, submission files (ZIPs, resumes) may be permanently deleted from storage. Recruiter account data is retained as long as the account is active.
• Assignment submissions (candidates): Your submitted code, documents, and evaluation results are retained for the duration of the posting plus 45 days. After this period, your submission files may be permanently deleted.
• AI evaluation results: Scores, analysis, and evaluation metadata are retained alongside the associated posting data and follow the same retention schedule.
• Early deletion requests: You may request deletion of your data at any time by contacting legal@applyryt.com. We will process deletion requests within 30 days. Please note that if you request early deletion, we will no longer be able to provide resumes, submissions, or records for past applications.
• Legal retention: We may retain certain data beyond these periods where required by law or for legitimate business purposes such as fraud prevention, dispute resolution, or compliance with legal obligations.

8. Cookies and Tracking Technologies

ApplyRyt uses cookies and similar technologies for three purposes.

Essential. These keep you logged in and keep the Service secure. They cannot be switched off.

Our own analytics. Our own cookies record which page you first arrived on and which ad or link brought you, for up to 90 days, so we can tell which marketing works. This information stays with us.

Advertising and analytics partners, on public pages only. Our public pages are our home page, landing pages, sign-up and payment pages, the confirmation pages you see right after paying, and our policy pages. On these pages, we and our marketing agency run:

• Meta Pixel: our own, plus a separate one operated by our marketing agency. Each reports page visits and completed payments to Meta;
• Google Tag Manager, which loads Google Analytics and Google Ads. These report page visits, how the page is used (such as scrolling and clicks), and completed payments to Google.

These tags set their own cookies. They may also read and hash contact details you type into forms on those pages, so the platform can match your visit to an account you have with it.

None of these tags run inside your account. Your dashboard, applications, profile, onboarding and team chat pages do not load them.

Your choices. You can:

• block or delete cookies in your browser;
• use your device’s tracking controls;
• turn on Global Privacy Control (Section 13);
• adjust your Meta ad preferences or Google’s My Ad Center;
• install Google’s Analytics opt-out browser add-on.

Blocking essential cookies may stop parts of the Service from working.

9. Google Authentication

ApplyRyt offers sign-in via Google OAuth. When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password. We use this information solely for account creation and authentication purposes.

10. User Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access and review your personal data;
• Correct inaccurate information;
• Request deletion of your data (subject to the retention terms described in Section 7);
• Withdraw consent for certain processing activities;
• Request a copy of your data in a portable format.

To exercise these rights, contact legal@applyryt.com. We may verify your identity before processing your request. We will respond to all valid requests within 30 days.

Account Deletion. You can delete your account yourself from your account settings. Deletion is immediate, permanent and irreversible — we cannot recover your account, profile, resumes or application records afterwards.

Two cases work differently. If you have an active plan, or a cancelled plan that is still running, end it first — we keep your records for as long as service is still owed to you. If your account is managed by your employer because you are a member of our team, contact your administrator instead. In either case you may also email legal@applyryt.com from your registered address and we will handle it within 30 days. Some records may be retained where the law requires it or for fraud prevention, as described in Section 7.

11. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Sale and Sharing: We do not sell your personal information for money. The advertising tags described in Section 8 let Meta and Google see visits and payments on our public pages. California law may treat this as “sharing” for cross-context behavioral advertising. You can opt out by turning on Global Privacy Control in your browser (we honor it as described in Section 13) or by blocking cookies.

To exercise your CCPA rights, contact legal@applyryt.com.

12. European Economic Area, United Kingdom, and Other International Users

ApplyRyt serves job seekers in many countries. If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with comparable data protection law, the following additional terms apply to you and supplement the rest of this Policy.

A. Legal Bases for Processing

We process your personal data on the following legal bases:

• Performance of a contract — to deliver the Service you signed up for, including submitting job applications on your behalf, generating resumes through RezRyt™, operating the Jobs Portal, and managing your subscription and billing;
• Legitimate interests — to secure the platform, prevent fraud and abuse, detect plagiarism and gaming of evaluations, resolve disputes, defend legal claims, and improve the Service, in each case balanced against your rights and freedoms;
• Consent — for optional processing, including voluntary EEO self-identification and any marketing use of your name, image, voice, likeness, or recordings. You may withdraw consent at any time, which does not affect processing already carried out;
• Legal obligation — where retention or disclosure is required by applicable law, court order, or regulatory process.

B. Your Additional Rights

In addition to the rights described in Section 10, you have the right to object to processing carried out on the basis of legitimate interests, to request restriction of processing, to receive your data in a portable format, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. We will not discriminate against you for exercising any of these rights.

C. Automated Decision-Making

As described in Sections 1.4 and 15, ApplyRyt uses automated screening and pre-qualification to filter candidates against recruiter-defined criteria such as experience, education, location, and work authorization. You have the right not to be subject to a decision based solely on automated processing where that decision produces legal or similarly significant effects. Accordingly: automated screening results are advisory; a recruiter may review your submission even where automated screening would disqualify you; and you may request human review of any automated screening or pre-qualification outcome, express your point of view, or contest the outcome, by contacting legal@applyryt.com.

D. International Transfers

ApplyRyt is based in the United States, and your data is processed there and in other countries where our service providers operate (see Section 14). Where we transfer personal data out of the EEA or the United Kingdom, we rely on appropriate safeguards — including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable, together with supplementary technical and organisational measures. You may request further information about the safeguards applied to your data by contacting legal@applyryt.com.

E. Retention and Contact

Retention periods are set out in Section 7. For any question relating to this Section, or to exercise any right described in it, contact legal@applyryt.com. We respond to all valid requests within 30 days and may first take reasonable steps to verify your identity.

13. Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” (DNT) signal. There is no industry standard for it, so we do not respond to it.

We do honor Global Privacy Control (GPC). When your browser sends a GPC signal, our pages do not load the Meta Pixel, Google Tag Manager, or any of our marketing agency’s tags for that visit.

GPC does not affect the conversion events our servers send when you pay, create an account or subscribe (Section 3).

14. International Data Transfers

ApplyRyt is based in the United States. Your data may be processed in other countries where our service providers operate (e.g., AWS data centers, OpenAI and Anthropic processing servers, and Meta and Google advertising systems). By using the Service, you consent to such international data transfers, which will be handled in compliance with applicable data protection laws.

15. AI-Generated Content, Evaluations, and Privacy

Your data is processed by AI systems (including OpenAI and Anthropic Claude) for multiple purposes. Key points:

• AI processing occurs on secure servers operated by ApplyRyt and its AI service providers;
• Your data is not used to train third-party AI models without your explicit consent;
• We may use anonymized and aggregated data to improve our own algorithms and service performance;
• Assignment submissions (code, documents, PDFs, images) are sent to Anthropic Claude for evaluation. This includes multi-pass analysis of code quality, document quality, cross-referencing, and plagiarism detection;
• AI evaluation scores and recommendations are advisory only. They are provided to assist recruiters in decision-making and do not constitute employment decisions by ApplyRyt;
• AI-generated content, scores, and analyses may not always be perfectly accurate. Recruiters are responsible for making final hiring decisions.

16. Data of Minors

ApplyRyt is intended for individuals aged 18 and older. We do not knowingly collect or maintain information from anyone under 18. If we discover that we have inadvertently collected data from a minor, we will promptly delete it. If you believe a minor has created an account, please contact legal@applyryt.com.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any modifications will be posted on this page with a revised “Last Updated” date. For material changes, we will notify active subscribers and recruiter accounts via email. Your continued use of the Service after such updates constitutes acceptance of the revised Policy.

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

KEYBOARD GROUP LLC (ApplyRyt)

30 N Gould St Ste R, Sheridan, WY 82801, United States

Email: legal@applyryt.com