Privacy Policy

1. Overview

Lazyapply ("we", "our", "us") is a Chrome browser extension and web application that helps founders draft product-aware replies on X and Reddit. This Privacy Policy explains what data we collect, why we collect it, who we share it with, and what rights you have.

By installing the extension or creating an account at lazyapply.xyz, you agree to this policy. If you do not agree, please uninstall the extension and do not use the service.

2. Who We Are

Company: Lazyapply

Country: India

Contact: hello@lazyapply.xyz

For any privacy-related questions or requests, email us at the address above.

3. What Data We Collect

3.1 Account Data

When you sign up, we store:

• Your email address and authentication credentials
• Your plan tier (free or pro) and usage quotas
• Session tokens to keep you logged in

3.2 Product Memory

When you set up a project, we store the product information you provide:

• Product name, one-liner, target user, and website URL
• Optional fields: pain points, core features, ideal use cases, objections, tone guidance, and words to avoid
• Reply examples you add to the memory

This data is stored in our database and is used solely to generate replies on your behalf.

3.3 Page Content Read by the Extension

When you open a reply composer on X or Reddit, the extension reads:

• The text of the post or comment you are replying to
• Nearby context on the page (surrounding post content, author handle) to improve reply relevance
• The platform URL to apply platform-specific formatting rules

This content is sent to our servers to generate a reply draft. We do not store the post content after the reply is generated. It is processed in memory and discarded.

3.4 Generated Replies

The reply text generated by the AI is returned to your browser. We do not persistently store the content of individual replies.

3.5 Usage and Analytics Data

We collect anonymised usage events to understand how the product is used and to improve it. This includes:

• Which features you use (reply generation, rewrite controls, Search Assistant)
• Which platform (X or Reddit) you are active on
• Quota usage counts per feature
• General session and page-view data via PostHog and Vubo Analytics

We do not collect the contents of your browsing history beyond the active tab context described in section 3.3.

4. How We Use Your Data

• To provide the service — generating product-aware reply drafts using your product memory and the post context
• To authenticate you — managing sessions and keeping you logged in securely
• To enforce quotas — tracking usage against your plan limits
• To improve the product — analysing aggregated, anonymised usage patterns
• To communicate with you — sending the install link when the Chrome extension is approved, or responding to support requests

We do not use your data for advertising, profiling, or any purpose beyond operating and improving Lazyapply.

5. Third Parties We Share Data With

We share data with the following third-party services to operate Lazyapply. We do not sell your data to any third party.

When post context is sent to OpenRouter for AI generation, it is subject to OpenRouter's Privacy Policy. We recommend not including sensitive personal information in posts you process through the extension.

6. Data Retention

• Account and product memory data — retained for as long as your account is active. Deleted within 30 days of account deletion.
• Post content sent for reply generation — not stored. Processed in memory and discarded after the response is returned.
• Usage/quota counters — retained to enforce plan limits and for billing purposes.
• Analytics events — retained per the policies of PostHog and Vubo Analytics (typically 1–2 years, anonymised).

7. Cookies and Local Storage

The web application (lazyapply.xyz) uses session cookies to keep you authenticated. We do not use tracking cookies for advertising.

The Chrome extension stores your session token and cached product memory locally in the browser using chrome.storage to avoid repeated network requests. This data stays on your device and is cleared when you sign out or uninstall the extension.

8. Chrome Extension Permissions

The Lazyapply extension requests the following permissions and uses them as described:

• activeTab / scripting — to read the active composer and nearby post context on X and Reddit when you click the extension icon. We only read the current tab, and only when you explicitly trigger the extension.
• storage — to cache your session and product memory locally so the popup loads instantly.
• host permissions for x.com and reddit.com — to detect the reply composer and inject the reply text after you click Insert.

We do not request permissions to read your browsing history, access other tabs, or run in the background without user action.

9. Your Rights

Regardless of your location, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request that we delete your account and associated data
• Portability — request your product memory in a machine-readable format
• Objection — object to processing of your data where we rely on legitimate interest

To exercise any of these rights, email hello@lazyapply.xyz. We will respond within 30 days.

10. Data Security

We take reasonable technical measures to protect your data:

• All data in transit is encrypted via HTTPS/TLS
• Session tokens are stored in secure, HTTP-only cookies
• Our database runs on Cloudflare D1 with access restricted to our application workers
• We do not store payment card details — billing is handled by our payment processor directly

No method of transmission or storage is 100% secure. If you become aware of a security issue, please contact us immediately at hello@lazyapply.xyz.

11. Children's Privacy

Lazyapply is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or via a notice in the extension. Continued use of Lazyapply after changes constitutes acceptance of the updated policy.

13. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes will be subject to the exclusive jurisdiction of the courts of India.