FastestApplicant is operated by Rock Hard Consulting LLC, a New Mexico limited liability company doing business as FastestApplicant (“FastestApplicant,” “we,” “us,” or “our”).

For personal information that we process to operate the Service, Rock Hard Consulting LLC is generally the controller or business responsible for deciding how and why that information is processed. Some providers, including Paddle, may act as independent controllers for their own processing.

Privacy questions and requests may be sent to privacy@fastestapplicant.com.

This Policy applies to personal information processed through the Service and related support, waitlist, notification, security, and billing operations.

It does not govern third-party websites, employer application systems, job-listing sources, or services that control their own processing. Those parties’ privacy notices apply to their activities.

We may process:

• email address;
• Clerk user identifier;
• name and profile information made available through Clerk for account display;
• authentication, verification, session, cookie, token, sign-in, device, IP-address, and security information processed by Clerk; and
• account creation and update timestamps.

We store your email address and Clerk user identifier in our application database. General Clerk profile information may be displayed by the Service without being copied into our primary application database.

We may store:

• an internal numeric account identifier;
• account role;
• onboarding status;
• plan and membership status;
• credit balance and credit-refill timestamps;
• optional light- or dark-theme preference; and
• account creation and update timestamps.

We may store jobs discovered or processed for your watchers, including:

• job title and description;
• employer or company information;
• listing and application URLs;
• country, location, and remote or hybrid status;
• posting and discovery dates;
• salary information when available;
• technologies and other listing attributes;
• matching words or phrases;
• delivery, exclusion, or processing information when available;
• notification or delivery-claim timestamps; and
• internal user, watcher, and job identifiers.

This information is usually obtained from TheirStack or underlying third-party job sources. Although much of the listing data is public or business-related, its association with your account, watcher, or activity may make the resulting record personal information about you.

Paddle processes payment and transaction information as merchant of record. We may receive and store:

• Paddle customer, subscription, transaction, price, and event identifiers;
• selected plan and plan history;
• subscription status and billing-period dates;
• scheduled-cancellation information;
• transaction amounts and plan or credit-package information;
• automatic top-up settings and charge history;
• credit grants, deductions, reason codes, idempotency identifiers, optional event metadata, and timestamps;
• event types and processing timestamps; and
• complete Paddle webhook payloads, which may include customer, transaction, amount, plan, and transaction-metadata information.

Paddle, not FastestApplicant, handles complete payment-card numbers and card security codes. We do not intentionally store complete card numbers or card security codes in our application database.

Cloudflare and other infrastructure providers may process ordinary internet and browser information, including:

• IP address;
• user agent, browser type, device characteristics, operating system, and language;
• referring URL, request headers, cookies, tokens, and session information;
• dates, times, routes, request and response metadata;
• security, access, authentication, and bot-detection signals;
• internal user, watcher, job, notification, and billing identifiers;
• operational actions and queue or scheduled-task activity; and
• error messages, stack information, and debugging context.

Cloudflare Worker and observability logs may temporarily contain email addresses, watcher names and criteria, notification destinations, Telegram update data, Paddle event data, or other information involved in the relevant code path.

We do not intentionally store IP addresses or a browser or device profile in our D1 application database. The contact form sends the request IP address and a verification token to Cloudflare Turnstile for bot and abuse detection.

As of the effective date, the deployed Service does not currently collect or use:

• telephone numbers for SMS notifications;
• WhatsApp identifiers;
• SMS delivery or opt-out records;
• resume files or extracted resume text;
• structured employment history, education, or skills from a resume;
• custom AI instructions;
• generated cover letters; or
• customer data sent to a production AI provider.

The database may contain unused nullable fields intended for possible future features. An unused field does not mean that information is currently collected.

We will update this Policy before enabling features that materially change the personal information we collect or the providers with which it is shared. This includes production resume processing, cover-letter generation, SMS, WhatsApp, and AI-provider processing.

We may use personal information to:

• create, authenticate, secure, and administer accounts;
• configure and run job watchers;
• retrieve, deduplicate, process, filter, and display job information;
• deliver requested email or Telegram notifications;
• maintain notification and job-processing history;
• provide plans, credits, subscriptions, purchases, and automatic top-ups;
• reconcile Paddle events and prevent duplicate billing-event processing;
• provide customer support and respond to privacy or legal requests;
• personalize account settings and remember preferences;
• detect abuse, fraud, unauthorized access, security incidents, and technical failures;
• debug, maintain, monitor, and improve Service reliability;
• enforce our Terms and protect users, providers, FastestApplicant, and third parties;
• comply with tax, accounting, legal, regulatory, and contractual obligations; and
• evaluate or complete a merger, financing, acquisition, reorganization, asset transfer, or similar business transaction.

We do not use your account information to submit applications or make employment decisions for employers.

Where a law such as the European Union or United Kingdom GDPR requires a legal basis, we generally rely on one or more of the following:

• Contract: processing necessary to provide the Service you request, administer your account, deliver notifications, manage credits, and support purchases.
• Legitimate interests: operating, securing, debugging, preventing abuse, improving, and administering the Service; maintaining transaction integrity; and protecting legal rights, provided those interests are not overridden by your rights.
• Consent: optional communications, connected notification channels, cookies or technologies requiring consent, and other processing for which we specifically request consent. You may withdraw consent, but withdrawal does not affect prior lawful processing.
• Legal obligation: tax, accounting, fraud prevention, sanctions, regulatory, law-enforcement, and other legal requirements.
• Protection of rights and safety: establishing, exercising, or defending legal claims and protecting users, the public, or the Service where permitted by law.

Legal bases may differ by jurisdiction. In places where consent is the primary basis, we rely on express or implied consent as permitted by local law.

FastestApplicant does not sell personal information. We do not disclose personal information to advertising networks for cross-context behavioral advertising, and we do not currently run targeted or behavioral advertising.

We do not send your FastestApplicant account profile or contact information to employers merely because their job listing is processed or displayed.

The Service may use automated rules or analysis to organize, filter, prioritize, explain, or score job opportunities for the user’s own use.

FastestApplicant does not make decisions that produce legal or similarly significant effects about you. It does not decide whether an employer will consider, interview, reject, or hire you.

Automated outputs may be inaccurate and should be reviewed against the original job listing. More information is provided in the Terms of Service.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining transaction integrity, resolving disputes, enforcing agreements, preventing fraud and abuse, and complying with legal, tax, accounting, and regulatory requirements.

We do not use one fixed retention period for every category. Retention depends on the type of record, its purpose, sensitivity, legal requirements, and technical systems involved. In general:

• active account and watcher information is retained while the account is open or as needed to provide the Service;
• plan, billing, transaction, Paddle-event, credit-ledger, and automatic-top-up records may be retained longer for accounting, reconciliation, fraud prevention, disputes, and legal compliance;
• support and legal correspondence is retained as needed to handle the request, maintain records, and protect legal rights;
• Cloudflare request, Worker, security, and error logs are retained according to configured and provider-controlled logging periods;
• notification providers may retain message and delivery records under their own policies;
• some historical discovered-job and delivery records may remain after account deletion and may continue to contain internal numeric user or watcher identifiers; and
• residual copies may remain in logs, caches, and backups until overwritten or deleted through normal retention cycles.

When information is no longer reasonably necessary, we may delete, aggregate, or de-identify it, subject to technical and legal limitations.

Depending on where you live, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion;
• request a portable copy of certain information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of sale, sharing for targeted advertising, or certain profiling where applicable;
• appeal a denied privacy request where applicable; and
• complain to a data-protection or privacy regulator.

FastestApplicant does not sell personal information or use it for cross-context behavioral advertising.

To exercise a right, email privacy@fastestapplicant.com. Describe your request and identify the account email involved. We may need to verify your identity or authority before acting. Authorized agents may be required to provide proof of authority.

Rights are subject to exceptions and limitations under applicable law. We will not discriminate against you for exercising a privacy right.

You may disable a watcher or notification channel in your account settings.

For email job notifications, use the unsubscribe method included in the message where available. For Telegram, use the supported opt-out command, such as STOP or /STOP, or disconnect the channel in your account.

If SMS or WhatsApp is introduced, we will provide the required consent and opt-out information before collecting telephone numbers or messaging identifiers.

Even after opting out of job notifications, we may send limited administrative, security, billing, legal, or account-service communications where permitted by law.

The Service is intended only for people age 18 or older. We do not knowingly collect personal information from children under 18 through the Service.

If you believe a person under 18 has provided personal information, contact privacy@fastestapplicant.com.

The Service may link to employer websites, job boards, application systems, and other third-party services. We do not control their privacy or security practices. Review their policies before providing personal information.

FastestApplicant
Rock Hard Consulting LLC, a New Mexico limited liability company

• Privacy requests: privacy@fastestapplicant.com
• General support: support@fastestapplicant.com
• Legal notices: legal@fastestapplicant.com