ApplyPot Privacy Policy
Version 1.3. Effective September 9, 2026. Operated by Gigs Labs Inc., a Delaware corporation, at 335 George St, Ste 4, PMB 1095, New Brunswick, NJ 08901.
1. Who We Are & What This Covers
ApplyPot is operated by Gigs Labs Inc., a Delaware corporation (335 George St, Ste 4, PMB 1095, New Brunswick, NJ 08901). ApplyPot is offered to residents of the United States only; this policy is written for United States law. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It covers applypot.com, our member dashboard, our pre-launch waitlist, and our emails.
ApplyPot runs a free weekly sweepstakes for job seekers. Understanding one thing makes the rest of this policy make sense: our core feature works by detecting job-application confirmation emails in an email account you choose to connect. We designed the entire system to read as little as possible, keep as little as possible, and sell nothing, ever.
Effective date: September 9, 2026. This policy is versioned; material changes are announced before they take effect.
2. Information We Collect
Account information: your email address, display name or handle, timezone, password (hashed), and your acceptance of our Terms and the Official Rules (version, timestamp, and technical details of the acceptance request: a one-way-hashed IP address and browser type).
Connected email account data: if you connect a Gmail account, we process message data as described in Section 3; that section controls over anything else in this policy.
Verification records: when we detect a job-search event (an application, an employer reply, an interview invitation, an offer), we keep a structured record: the event type, our confidence level, the company and role names, the sending domain, timestamps, a one-way hash of the message ID, and a short redacted text snippet (500 characters maximum) retained as evidence for your benefit. We do not store full email messages.
Entry and activity data: your tickets, XP, badges, streaks, and free-entry submissions (which include the identifying information the Official Rules require).
Prize and tax data: if you win, we collect your legal name, mailing address, and prize-delivery email. If your cumulative winnings reach the level where tax law requires it, we collect a Form W-9, which includes your Social Security number. W-9s are stored in encrypted document storage, never in our operating database, and we will never ask for your SSN or password by email; tax forms are completed in-app only.
Fraud-prevention signals: device and browser characteristics and IP-derived signals, used solely to protect the integrity of the sweepstakes.
Referral data: if you invite someone by email, we process their address to send that one invitation (see Section 11). If someone invited you, we record the referral connection.
Analytics: pseudonymous product events (for example, 'a member earned a ticket') with no message content and no sensitive personal information in event properties.
Waitlist data: pre-launch, just your email address and referral position.
3. Google User Data: Our Limited Use Commitment
When you connect a Gmail account, you grant us read-only access. Here is exactly what we do with it, in plain language:
What we access: message headers and, only for messages our system identifies as likely job-search related, message content sufficient to classify the event. We process mail from your inbox and archive only, never your spam or trash folders.
What we do with it: detect and verify job-search events so we can credit your sweepstakes entries and related progress. That is the only use.
What we never do: we never store your full email messages; we never use your email data for advertising; we never sell it; we never share it except with the service providers listed in Section 5 acting on our instructions (including an AI classification service that receives only minimized excerpts of individual candidate messages); and no human reads your messages except (a) for security and abuse investigations, or (b) when you yourself submit a specific message for review through our appeals process.
ApplyPot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting: you can disconnect any connected account at any time from Settings with one click, or by revoking ApplyPot's access from your Google Account permissions page; both work. Disconnection stops all access immediately and deletes stored parse artifacts from that account.
4. How We Use Information
To run the sweepstakes: crediting entries, conducting drawings, verifying and paying winners, and enforcing the Official Rules. To protect integrity: detecting fraud, multiple accounts, and abuse. To meet legal obligations: tax reporting and records the law requires. To communicate: service emails about your account, entries, and results, and any marketing you have not opted out of. To improve the product: in aggregate, pseudonymous form.
A note on automation: initial crediting decisions are made by automated systems, with human review for high-value events and a human-only appeals path for anything you believe was missed (described in the Terms of Service). Account-integrity actions always come with a stated reason and an appeal route.
We do not use your information for third-party advertising, we do not build advertising profiles, and we do not sell personal information.
5. How We Share Information
Service providers acting on our instructions, each receiving only what its function requires: email delivery (our email service provider), prize fulfillment (our gift-card provider receives a winner's delivery email and prize amount), AI classification (minimized message excerpts only, as described in Section 3), hosting and database infrastructure, and pseudonymous analytics.
Sponsors: never receive personal information. Sponsors of a weekly pot receive aggregate statistics only (for example, total impressions and clicks).
Legal: we disclose information when the law requires it, including the winners list that sweepstakes law entitles anyone to request (first name, last initial, and state, consistent with your announcement preference where the law allows), tax filings, and valid legal process.
Business transfers: if ApplyPot is ever acquired or reorganized, information transfers under this policy's commitments, and we will provide notice.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
6. Disclosures That Are Part of the Product
Fairness you can verify requires publishing certain things, and we want you to understand them before you join:
The weekly drawing ledger: each week we publish an anonymized entry ledger listing a random-looking ID for each entrant and their ticket count. Your ID is derived with a cryptographic key, changes every week, and cannot be reversed into your identity. You can see your own ID in your dashboard to verify your entry; no one else can tell which ID is yours.
Winner announcements: published only according to the preference you choose at claim time (first name, last initial, and state; your community handle; or no announcement at all). We never publish winners' ticket counts, and we never publish the link between an announced name and a ledger ID.
Aggregate counters: totals like prizes paid to date.
7. Cookies, Analytics & Do Not Track
We use first-party cookies for signing you in and keeping your session secure, and first-party analytics cookies to understand product usage. We do not use third-party advertising cookies or ad-network trackers. Session-replay recording is disabled.
Because there is no common industry standard for browser Do Not Track signals, we do not respond to them; our practices are the same for all visitors and are described in this policy.
8. Data Retention
Verification event records: for the life of your account. Quarantined copies of messages under human review: until resolution, 30 days maximum. Drawing artifacts (the public fairness record): permanent. Prize claims and tax records: as tax and sweepstakes law require (generally seven years). Fraud and device signals: 13 months (fraud case records: life of the account). Referral click and affiliate click data: 13 months. Email logs: 12 months. Unsubscribe and suppression records: kept permanently, because honoring them requires remembering them.
When you delete your account, we delete your information promptly, except the narrow categories above that the law requires us to keep, and the already-published anonymous drawing artifacts, which contain no identity.
9. Security
Encryption in transit and at rest; tax documents in separately encrypted storage; access controls with two-factor authentication for administrative access; complete logging of administrative actions; and the commitment that we will notify affected members of any security incident involving their personal information as the law requires, promptly and plainly.
A standing promise worth repeating: we will never ask for your password or Social Security number by email. The only addresses we send from are listed at applypot.com/security.
10. Your Rights & Choices
Everyone: access and correct your account information in Settings; disconnect email accounts at any time; control marketing email through the one-click unsubscribe and the preference center; delete your account entirely (Settings, one click, no retention tricks).
California residents: the CCPA/CPRA gives you rights to know, delete, and correct, and the right not to be discriminated against for exercising them. Sensitive personal information: the only sensitive personal information we collect is the Social Security number on a legally required tax form, used solely for that purpose and never otherwise used or disclosed, a use for which the CPRA's right-to-limit does not apply. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front. To exercise rights, use Settings or contact support@applypot.com; we will verify your request through your account. Exercising privacy rights never affects your free-entry option or your odds.
Residents of other states with privacy laws have similar rights; contact us and we will honor them.
11. People Who Are Not Members
Invitees: if a member asks us to send you an invitation, we process your email address for that single purpose. Every invitation identifies the member who requested it and includes a one-click way to stop any future invitations from anyone; suppression is permanent unless you ask otherwise.
Waitlist signups: your email is used only for launch communications, with unsubscribe honored immediately.
Free-entry participants who never create accounts: the Official Rules describe the information the entry form requires; it is used only to administer the drawing.
12. Children
ApplyPot is for adults 18 and over. We do not knowingly collect information from anyone under 18, and we delete it if we learn we have.
13. Changes to This Policy
We version this policy and keep prior versions available. Material changes are announced by email or in-product notice before they take effect.
14. Contact
support@applypot.com · Gigs Labs Inc., 335 George St, Ste 4, PMB 1095, New Brunswick, NJ 08901.