NeatApply Request access

Legal

Privacy Policy

Last updated: 2026-09-17

This Privacy Policy explains how Beyond Tech Touch (Pty) Ltd, trading as NeatApply (" NeatApply", "we", "us"), collects, uses, discloses and protects personal information — both on this website and through the NeatApply software subscription once you become a customer.

1. Who we are

NeatApply is operated by Beyond Tech Touch (Pty) Ltd , registration number 2024/076042/07, a company registered in South Africa at 309 Eaton Square, 167 Main Road, Diep River, Cape Town, 7800, South Africa. We are the "responsible party" under South Africa's Protection of Personal Information Act (POPIA) and, for users in the European Economic Area or United Kingdom, a "controller" under the GDPR / UK GDPR.

2. This website

This website does not currently accept CV or document uploads and does not run analytics or advertising trackers by default. When you visit, our hosting infrastructure records standard technical request information (such as IP address, browser type and request timestamps) for security and operational purposes, for a limited retention period set by our hosting provider. If you email us, we retain that correspondence to respond to you and for our own record-keeping.

3. Information we collect if you become a subscriber

Once you create a NeatApply account, we collect the following categories of personal information, only as needed to provide the software to you:

  • Account information — name, email address, and authentication details.
  • Professional information you provide — CV/résumé content, employment history, education, skills, and similar information you supply so the software can evaluate opportunities and prepare materials on your behalf.
  • Opportunity information — job descriptions or postings you provide for evaluation.
  • Generated materials — application documents and other content the software prepares for you.
  • Billing information — subscription and transaction identifiers from our payment provider. We do not collect or store your full payment card details ourselves — see section 8.
  • Technical and security logs — information needed to operate, secure and troubleshoot the service.

NeatApply is designed to generate Materials from the information you provide — your CV, employment history and the opportunity you are evaluating — rather than from invented facts about you. As with any AI-generated output, you must review every draft yourself and verify its accuracy before you rely on or use it; see our Terms, section 7.

A note on sensitive information: a CV or employment history can incidentally include information that some laws treat as sensitive — for example, details from which health status, union membership, or similar characteristics could be inferred. Please only include what is genuinely relevant to your application materials, and avoid adding sensitive details that are not necessary for that purpose. We process any such information you do include solely to provide the software to you, on the same basis described in section 5, and you can ask us to remove it at any time — see section 11.

4. How we use your information

  • To provide, maintain and improve the software you subscribe to;
  • To evaluate opportunities and prepare application materials at your request;
  • To process billing and manage your subscription;
  • To communicate with you about your account or in response to your enquiries;
  • To maintain the security and integrity of the service and prevent abuse;
  • To comply with our legal obligations.

We do not sell your personal information, we do not use it for advertising, and we do not share it with employers, recruiters or job boards.

5. Legal basis for processing (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we process your personal information on the basis of: performance of a contract with you (providing the subscription you have purchased or are trialling), our legitimate interests in operating and securing the service, and, where applicable, your consent.

6. Sharing and subprocessors

We use a limited, named set of third-party service providers to operate NeatApply, each acting under contractual data-protection terms and only to the extent needed to provide the service to you:

  • Cloudflare, Inc. — DNS for both NeatApply domains, and hosting, content delivery and DNS for this public website (neatapply.com).
  • Netlify, Inc. — hosting for the authenticated application (app.neatapply.com), where your account, profile and application data is processed.
  • Google LLC — sign-in to your account (OAuth). If you choose to connect an optional integration, Google also processes the specific additional data that integration requires.
  • Turso (Chiselstrike, Inc.) — our production database provider, storing your account, profile and application data.
  • Paddle.com Market Ltd — our payment provider and Merchant of Record, once billing is live. Paddle processes your billing information as an independent controller for payment, tax and fraud-prevention purposes under its own privacy policy.
  • Zoho Corporation — email hosting for our support and account mailboxes at our own domain (for example, when you email us). Zoho processes the content of messages you send us in order to deliver them to our team.
  • An AI infrastructure provider — see section 7 for what is sent, why, and on what terms.
  • Railway Corp. — planned host for a background process supporting optional integrations (for example, WhatsApp notifications, if you choose to enable them). Not yet in production use; named here in advance of that, not after.
  • Twilio Inc. — only if you choose to enable optional WhatsApp notifications; Twilio delivers those messages on our behalf. You are never required to enable this to use the core product.

We do not use your information for any purpose unrelated to providing the service to you, and we do not sell it. This list reflects the services actually in use or architecturally committed to as of the "Last updated" date above; any further addition is made before that provider processes any customer data, not after.

7. AI processing

Preparing your Generated Materials involves sending relevant parts of your professional information and the opportunity you are evaluating to Anthropic PBC, whose Claude models we use to generate the draft content you asked for. Under Anthropic's published commercial API terms, data submitted through its API is not used to train its models by default. This reflects Anthropic's stated policy as we understand it, rather than a certification we have independently audited against the specific contract in place at any given time — see our internal commercial-facts record for the current status of that confirmation. AI-generated output is a draft: see our Terms, section 7, for why you must review it before use.

8. Payments

Once billing is live, payment processing is provided through Paddle, our Merchant of Record. NeatApply does not store your full card number or card security code — that information is handled entirely by Paddle.

9. International data transfers

NeatApply is available to users worldwide. As described in section 6, this public website (neatapply.com) is served from Cloudflare's global edge network; the authenticated application (app.neatapply.com), where your account, profile and application data is processed, is intended to run on Netlify once live. Our production database provider is Turso. We have not yet confirmed or published a specific primary data region for any of these providers, and we do not assert one here until it is confirmed — this section will be updated with that detail before the product accepts real customer accounts. Where your personal information is transferred outside your country of residence, we take the steps required by applicable law (such as POPIA's cross-border transfer conditions or the GDPR's standard contractual clauses or other approved transfer mechanism) to protect it, to the extent those mechanisms are confirmed to be in place with the relevant provider — we do not claim a specific mechanism is contractually or operationally confirmed unless it is.

10. Data retention

We retain personal information for the following target periods, by category:

  • Account and profile information — for as long as your account is active, and for 90 days after cancellation in case you choose to reactivate, after which it is deleted or anonymised.
  • Billing and transaction records — 5 years after the transaction, to meet South African tax record-keeping requirements under the Tax Administration Act 28 of 2011.
  • Technical and security logs — up to 12 months, for security and troubleshooting purposes.
  • Support correspondence — for as long as reasonably needed to resolve your query and for our own record-keeping, generally no longer than 24 months.

These are our current target retention periods, confirmed before this policy governs live customer accounts; we will update this section first if they change.

11. Your rights

Subject to applicable law, you have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of your personal information;
  • Object to or restrict certain processing;
  • Request a copy of your information in a portable format;
  • Withdraw consent, where processing is based on consent.

To exercise any of these rights, contact us via our Contact page. We will respond within the timeframe required by applicable law, and we may need to verify your identity first so we do not act on someone else's request about your account.

To request deletion specifically: email us via the Contact page with the subject "Data deletion request". We will verify your identity, then delete or anonymise your personal information within 30 days, except where we are required or permitted by law to retain specific records (for example, billing records for tax purposes — see section 10), and confirm once complete. Automated self-service deletion from within the product is a planned enhancement, not yet available.

12. Complaints

If you are not satisfied with how we have handled your personal information, you can contact us directly, or lodge a complaint with your local data-protection authority. In South Africa, that is the Information Regulator (South Africa) (https://inforegulator.org.za, POPIAComplaints@inforegulator.org.za).

13. Children

NeatApply is intended for use by individuals who are legally permitted to enter into a subscription agreement in their jurisdiction. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and, where required by law, we will notify you directly.

15. Contact

Questions about this policy or your personal information can be sent via our Contact page. Our Information Officer is the Head of Beyond Tech Touch (Pty) Ltd, in accordance with POPIA's default rule (section 1, read with the Promotion of Access to Information Act) in the absence of a specific appointment. Beyond Tech Touch (Pty) Ltd's Information Officer is registered with the Information Regulator of South Africa. NeatApply is a product operated by Beyond Tech Touch (Pty) Ltd; it does not have a separate Information Officer registration of its own.