Privacy Policy

ApplyWorthy is operated by Liao Hung-Kai, an individual sole proprietor based in Taiwan, who is the data controller for this site. Because the Service is a directory of people, handling personal data carefully and only with consent is the core of how it works. This page explains exactly what is processed, for whom, and where.

Two kinds of users

Professionals voluntarily create a record about themselves to be listed. Business subscribers pay for software access to search records and reveal contact details. We process data differently for each, described below.

Professionals: what we store

When you list yourself, you provide two kinds of information. Anonymized professional details (such as headline, skills, experience level, rate range, and availability) are shown in the public directory. Your identifying contact details (such as name, email, phone, and social or portfolio links) are stored separately in a locked vault and are never shown publicly. Your contact details are only revealed to a paying subscriber after you have given explicit consent to be revealed, and they are revealed only when a subscriber chooses to unlock your specific record. Every reveal is logged.

Your lawful basis for this processing is your consent. You can withdraw consent, pause your listing, or delete your record at any time, which removes you from the directory. Only list information you are comfortable sharing with prospective employers, and do not include sensitive data (for example, government ID numbers).

Business subscribers: what we store

If you subscribe, you sign in with Google, and we receive your email address and basic profile to identify your account; we never see your Google password. We store your subscription status and, for audit and abuse-prevention, a log of which records your account has revealed and when. Revealed contact data must be used only as described in our terms (lawful, legitimate recruiting outreach; no resale, scraping, or spam).

Where the data lives

Accounts, authentication, records, the locked contact vault, and reveal logs are hosted on Supabase, our database provider. Access to contact details is enforced server-side: subscribers cannot read the contact vault directly, only through a logged reveal that checks for an active subscription and the professional’s consent.

Payments

Checkout and recurring billing are handled entirely by Paddle.com, our merchant of record. Your card details and billing information go to Paddle, never to us. See Paddle’s privacy policy.

Analytics

We use Vercel Web Analytics, which is cookie-less and aggregates page views without building visitor profiles. We also keep standard server logs (timestamps, anonymized usage events) to operate the service.

Your rights

You can access, correct, export, or delete your record and the data tied to your account at any time, and a professional can withdraw consent so their contact details are no longer revealable. To exercise any right, or for any privacy question, email willisrain04@gmail.com and we’ll resolve it within 30 days. If you are a professional and ask to be removed, we delete your record and contact details from the live directory promptly.