What APPTIV keeps
Your account, language and search preferences, self-declared work authorisations, opportunity files, CV references, follow-up actions, and the technical logs needed for security and operation.
PRIVACY NOTICE · VERSION 2026-09-13 · INVITATION SUPPLEMENT 2026-09-26
Understand what stays here — and what may leave.
This notice describes APPTIV processing by Emmanuel Smadja.
Default: manual mode, no AI call and no in-app payment.
Personal API keys
Your DeepSeek and OpenAI text keys are encrypted separately before storage, are never returned in plain text by the API, and are not logged in plain text. Disconnecting erases the secret held by APPTIV; it does not revoke the provider key.
Why
These data organise your search, apply your settings, check each file’s readiness and secure your access. APPTIV does not sell your data.
Job searches through public sources
When you explicitly start a search or request the next page, APPTIV sends your keywords and technical pagination parameters to the selected sources: Himalayas, Jobicy or JobTech / Arbetsförmedlingen. Your CV, account email, private files and AI keys are not attached to these requests. APPTIV caches keywords and received pages in memory to reduce repeated requests. A response can be reused for 24 hours for Himalayas and one hour for Jobicy and JobTech, with its original retrieval date. Expired entries are removed during new requests or when the service restarts, without a guaranteed deletion time. Opening an original listing or a Google/Bing search takes you directly to the external website, where its privacy rules apply.
Account emails · supplement of 20 September 2026
When account email delivery is enabled, APPTIV temporarily stores the submitted address in a request queue before checking the account and, if eligible, sending an activation or recovery link. A completed request is detached from the address; pending or claimed requests become eligible for batched cleanup after 24 hours. Cleanup depends on the server running and is not guaranteed at an exact time. Resend receives the recipient’s address, subject and content of a sent message, including the single-use link. No CV or application file is included. Resend may process these data outside Israel under its own privacy policy.
Private invitations · supplement of 26 September 2026
The administrator enters the invited address. APPTIV keeps that address, the administrator-beneficiary relationship, invitation status, chosen limits and dates, a token hash, your acceptance choices and technical usage counters. Resend receives the address, subject and invitation content including its link; no CV or application file is attached. The invitation address and audit records remain after expiry or revocation for identity, allowance and security checks. They do not follow the activation/recovery-link queue cleanup, and no automatic deletion after seven days is implemented. Direct retention or deletion requests to the support contact below.
Sponsored-access visibility
The administrator sees the invited address, status, chosen limits, expiry, email status and usage counts. This invitation does not open your private files to them or give you their key. A confirmed AI request is sent to DeepSeek using the administrator’s key; the provider’s rules also apply to sponsored access. You can return to manual mode or select your own AI connection.
Pending accounts and deletion requests
An unactivated account retains the submitted address and a time-limited activation link. After seven days, accounts that remain inactive with no valid link, consent or session become eligible for batched cleanup when new registrations arrive; deletion is therefore not guaranteed on day seven. To request deletion of data or ask about retention, email smadja99@gmail.com.
Optional AI · supplement of 10 September 2026
Without an AI connection or sponsored access selected, no data is sent to an AI provider. With a personal key, you select DeepSeek or OpenAI. You may also accept and select sponsored DeepSeek access when available. APPTIV shows the provider and intended non-secret body, then requires your confirmation before each send. There is no automatic fallback to the other provider. Do not insert a key or other credential into content you enter.
OpenAI · supplement of 10 September 2026
OpenAI bills API usage separately from a ChatGPT subscription. APPTIV sends requests with store:false; this does not guarantee zero OpenAI retention, including for security controls. Review OpenAI’s data-retention documentation and the official links shown in the connection before enabling your key.
Local image prompt · supplement of 11 September 2026
APPTIV no longer generates images or transmits image requests to a provider. The prompt is built locally so you can review it and copy it to a service of your choice under your own responsibility.
Payments
APPTIV does not collect payments. Your chosen provider bills you directly for your own AI key. Sponsored DeepSeek usage belongs to the administrator’s provider account; APPTIV does not rebill it to the invitee.