Privacy Policy
Last updated: 13 October 2026
Snapply is a browser extension and online service that helps you fill job applications. This policy explains what personal data we process, why, and your rights under the UK GDPR and the Data Protection Act 2018.
Who we are
Snapply is operated by Tolga Oy, a sole trader in the United Kingdom, who is the data controller. Contact: hello@snapply.co.uk.
What we process and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Google account email, name and account id (when you sign in) | Create and secure your account | Contract |
| Your CV file and the profile built from it (work history, education, skills, contact details) | Fill application forms and draft answers for you | Contract |
| Answers you choose to remember (e.g. notice period, salary expectation) | Fill the same question on later applications | Contract |
| Text of the job advert and the application question you are working on | Match your experience and draft answers or cover letters | Contract |
| Plan, subscription status and number of AI drafts used | Provide the plan you chose and enforce allowances | Contract |
| Payment details | Handled by Stripe; we never see or store your card number | Contract |
What never reaches our servers
Answers that Snapply classifies as legal declarations (such as right to work, sponsorship, criminal convictions, barring lists and consents), personal or equality information (such as date of birth, ethnicity, disability, religion, sexual orientation, gender identity, nationality) and referee details are stored only in your browser’s extension storage on your own device. Our servers reject them. These answers are suggested to you and only filled after you confirm them each time.
AI processing
When you ask for an AI draft or cover letter, the relevant parts of your CV, the job advert and the question are sent to our AI provider, OpenAI, to generate the text. OpenAI processes this data on our behalf, does not use API data to train its models by default, and may process it in the United States; this transfer is protected by the UK International Data Transfer Addendum to the standard contractual clauses. Nothing is sent to the AI provider unless you press a drafting button.
Who we share data with
Only service providers who process data on our instructions: Fly.io (hosting, London region), OpenAI (AI drafting), Stripe (payments) and Google (sign-in). We do not sell your data and do not use it for advertising.
How long we keep it
We keep your account data until you delete your account. Deleting your account (Snapply panel → Delete account, or by emailing us) removes your profile, CV and saved answers from our servers immediately; backups are overwritten within 7 days. Stripe keeps payment records as required by law. Data in your browser is removed when you uninstall the extension or clear its storage.
Security
Data is encrypted in transit (HTTPS). Each account’s data is stored separately and can only be accessed with that account’s signed session.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent where it applies. Email hello@snapply.co.uk; we reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Changes
If we change this policy we will update the date above and, for significant changes, tell you in the extension.