Privacy Policy

This Privacy Policy explains how Oppli("we", "us") handles personal information when you use our website and web application. By using Oppli, you agree to this policy.

Information we collect

• Account data: name, email address, profile photo (if provided via OAuth), and authentication credentials when you sign up or sign in (email/password and/or Google or GitHub if enabled).
• Job search data: applications, statuses, notes, job descriptions, follow-up dates, salary/location fields, and related information you enter in the app.
• Usage and technical data: IP address, browser type, device information, session identifiers, and server logs needed to operate, secure, and debug the service.
• Preferences: notification, appearance, and onboarding settings you choose in the app.
• Billing data (Pro subscribers): subscription status, plan, billing period, and payment-related identifiers from our payment processor (Paddle). We do not store full payment card numbers on our servers.
• Analytics (optional): if enabled, privacy-friendly page-view analytics (no advertising profiles) to understand how the marketing site is used.

How we use your information

• Provide, maintain, and personalize your account and dashboard.
• Send transactional emails (password reset, optional follow-up reminders for Pro users, and support replies).
• Enforce plan limits, prevent abuse, and protect account security.
• Improve reliability, performance, and product experience.
• Process optional AI features only when you explicitly request them — interview prep per application and a weekly analytics coach (see below).
• Manage subscriptions and billing when you purchase or manage a Pro plan.
• Comply with legal obligations and respond to lawful requests.

Legal bases (EEA/UK users)

Where GDPR applies, we process personal data on these bases:

• Contract: to provide the service you signed up for.
• Legitimate interests: security, fraud prevention, product improvement, and support — balanced against your rights.
• Consent: optional browser notifications and optional AI generation you initiate.
• Legal obligation: where required by applicable law.

AI features & Google Gemini

Interview prep (Pro)

When you generate AI interview prep, Oppli sends that application's company name, role title, job description, notes (if any), and your profile context (target role, seniority, tech stack) to Google Gemini. We only send this when you click Generate or Regenerate — not automatically.

Generated prep is stored on your application so you can view it again without re-sending data when nothing has changed.

Weekly search coach (Pro)

When you generate your weekly search coach, Oppli sends aggregate analytics only — response rates, pipeline counts, funnel breakdown, monthly activity, and follow-up stats. No company names, job descriptions, or notes are included. We only send this when you click Generate — not automatically.

Generated coach reports are stored on your account for the current week.

Google's handling of data sent to Gemini is governed by Google's Privacy Policy. Do not include sensitive personal data in job descriptions or notes if you do not want it processed by Google.

Cookies and similar technologies

We use essential cookies and local storage for authentication sessions, security, and appearance preferences. These are necessary to run the service. We do not use advertising or cross-site tracking cookies. If we enable privacy-friendly analytics on the public site, that provider may set a first-party cookie to count visits without personal profiling.

Third-party service providers

We use trusted subprocessors to operate Oppli, including providers for hosting, database, transactional email (Resend), optional OAuth (Google, GitHub), AI (Google Gemini), error monitoring (Sentry, if configured), optional analytics (e.g. Plausible), and payment processing for Pro subscriptions (Paddle). These providers process data only as needed to deliver the service and under contractual confidentiality and security obligations.

International data transfers

Your data may be processed in countries other than your own, including the United States, where our infrastructure and subprocessors operate. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

Data retention and deletion

We keep your data while your account is active. You can export your application data as CSV from the dashboard and delete your account from Settings, which removes your profile and associated application data, subject to short backup retention and legal hold requirements.

Security

We use industry-standard measures including HTTPS encryption in transit, access controls, secure session handling, and rate limiting on sensitive actions. No method of transmission or storage is 100% secure; please use a strong, unique password and protect your login credentials.

Children

Oppli is not directed at children under 16. We do not knowingly collect personal information from children under 16. Contact us at support@oppli.xyz if you believe a child has provided data and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, email support@oppli.xyz. You may also lodge a complaint with your local data protection authority.

Free and Pro plans

The Free plan includes up to 100 applications and core pipeline features. Pro ($9/month) adds unlimited applications, full analytics, AI features, and email reminders. Plan details on our pricing page describe what is included; we do not sell your job search data.

Changes to this policy

We may update this policy as Opplievolves. We will revise the "Last updated" date when we do. Material changes may be communicated by email or in-app notice where appropriate.

Contact

Data controller: David Rakic, Brcanska 51, Bijeljina, Bosnia and Herzegovina.

Email: support@oppli.xyz.