PREVIEW RELEASE · 13 OCTOBER 2026

Privacy Notice

Service operator

MAFSAN GLOBAL SOLUTIONS FZC-LLC
CWS-2V-226580
26th Floor, Amber Gem Tower
Ajman, United Arab Emirates.

Privacy and support contact: mafsanglobal@gmail.com. Do not include CV text, sensitive identifiers or payment credentials in your initial request.

Current release

This is a preview release. The local CV comparison runs in your browser. We do not automatically send your pasted CV or job description to an AI provider. You can clear the text at any time; the preview does not save it to browser storage.

When you choose AI preparation

AI preparation is disabled until our provider data-processing and transfer review is complete. If enabled, we ask for separate consent before sending your supplied CV and job-description text to our server and DeepSeek. Remove your name, address, contact details, government identifiers, health information and other sensitive details first. Automated removal of email addresses, links and number-like strings is an additional precaution, not anonymisation. Remaining work history can still identify you.

Purpose and storage

We use the supplied text only to prepare your selected application review and provide its preview and download. The implementation stores the prepared package in encrypted private storage for up to 24 hours after preparation. An hourly cleanup removes expired package content. We do not use your CV for marketing or sell it to employers. The deletion control removes the prepared package and preview from our active storage. Copies already downloaded to your device or held by a processor are outside that control.

Payments and security

Stripe handles payment details. ApplyPilot does not receive your full card number. An essential secure browser cookie authorises your package; an opaque order ID is kept in session storage to return from checkout. Access requires both browser authorisation and verified payment. Use the same browser to download within 24 hours of preparation. Hosting security logs may contain your IP address; our abuse control stores an HMAC of it in short-lived hourly buckets.

Provider transfers and retention

DeepSeek and Hostinger are external processors; Stripe provides payment processing. Their specific API, hosting, retention and international-transfer arrangements must be confirmed before real applicant AI processing is enabled. Consent alone is not treated as sufficient to resolve every transfer requirement. We will update this notice with the applicable processors, locations, lawful basis, transfer safeguards and contact details before commercial launch.

Analytics and records

The implementation keeps daily aggregate counts for previews, searches, verified payments and downloads. It sends no CV text or applicant identity to an analytics service. Minimal order, consent, Stripe-reference and refund records are separate from package content and retained for applicable accounting, consumer and dispute obligations; the final record-retention schedule and backup policy must be confirmed before launch.

Your rights and contact

You may request access, correction, deletion and information about processing, subject to applicable law and lawful retention duties. For privacy requests, contact mafsanglobal@gmail.com. We will verify your request before disclosing or changing personal data. During this preview, keep CV analysis local and use the clear-text control. The service is intended for adults aged 18 and over.