Privacy Policy

1. Introduction

This Privacy Policy explains how DestinyX Studios, LLC ("Oppli", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you access our websites, mobile applications, and related services (the "Service").

Oppli is a time‑saving job discovery and application assistant. We automate repetitive steps of job applications at your direction; we are not an employment agency or legal advisor and we do not guarantee outcomes.

2. Data Controller

For purposes of applicable data protection laws, Oppli is the controller of your personal information processed through the Service, except where we act as a processor on your behalf (e.g., when submitting your materials to third‑party platforms per your instructions).

Registered office for privacy inquiries: DestinyX Studios, LLC, San Jose, CA 95112, USA. Email: privacy@destinyxstudios.com. Legal notices: legal@destinyxstudios.com.

3. Information We Collect

Information You Provide

• Account & Identity: name, email, phone (optional), credentials.
• Profile & Resume Data: work history, education, skills, portfolio links, preferences, questionnaire responses.
• Application Materials: resumes, cover letters, answers to employer questions, attestations.
• Billing: subscription tier, payment method identifiers and transaction metadata processed by our payment processor.
• Support & Communications: messages, feedback, and correspondence.

Automatically Collected

• Usage & Diagnostics: feature interactions, session metadata, performance and error logs.
• Device & Network: IP address, device identifiers, OS, browser, app version, language, timezone.
• Event Data: queue processing status, submission timestamps, third‑party flow steps completed.

Derived Data

• PlugScore™ & Matches: model outputs and heuristics derived from your inputs and job data.
• Risk & Abuse Signals: indicators to detect fraud, spam, or misuse.

We do not knowingly collect sensitive categories (e.g., health, biometric templates) unless you provide them voluntarily in your materials. Do not submit information you are not comfortable sharing for application purposes.

4. Purposes & Lawful Bases

We process personal information for the following purposes and, where applicable (EEA/UK), lawful bases:

• Service delivery (create account, generate matches, prepare and submit applications) — performance of a contract.
• Personalization & recommendations — legitimate interests to improve relevance; you can object at any time.
• Communications (transactional emails, support) — performance of a contract; marketing where applicable is based on consent or legitimate interests with opt‑out.
• Security & fraud prevention — legitimate interests and legal obligations.
• Payments & billing — performance of a contract and legal obligations.
• Compliance & enforcement (terms, policies, legal requests) — legal obligations and legitimate interests.
• R&D and service improvement (analytics, model evaluation) — legitimate interests; outputs are aggregated or de‑identified where feasible.

5. AI Processing & Outputs

Our Service uses machine learning to summarize job descriptions, score matches, and draft materials. Outputs may be inaccurate or incomplete; you are responsible for reviewing and editing prior to use. We do not use your application content to train public models; where third‑party model providers are used to generate outputs, processing is governed by our agreements with those providers.

By enabling auto‑apply or similar features, you instruct us to process and transmit your materials to third‑party sites as your agent solely for completing application flows.

6. Disclosures to Third Parties

We disclose personal information to:

• Service providers / processors that host, store, analyze, or support the Service (e.g., cloud hosting, databases, analytics, messaging, payments, AI inference providers) under contracts requiring confidentiality and use restrictions.
• Employers and platforms when you direct us to submit applications or share materials.
• Professional advisors and authorities where necessary for compliance, dispute resolution, or to protect rights and safety.
• Business transfers in connection with mergers, acquisitions, or financing, subject to this Policy or successor safeguards.

We do not sell your personal information or share it for cross‑context behavioral advertising as those terms are defined under California law.

7. Security & Safeguards

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, role‑based access controls, logging and monitoring, and vulnerability management. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If we become aware of a breach affecting your personal information, we will notify you and regulators as required by law and our contractual commitments.

8. Data Retention

• Account data — retained for the life of your account and for a reasonable period thereafter for backup, audit, and legal purposes.
• Application artifacts — retained to support your History tab and audit logs, then archived or deleted per policy.
• Backups — overwritten on a rolling schedule; deletions propagate from backups within ~30 days.

9. Your Rights

Depending on your location, you may have the right to request access, correction, deletion, restriction, portability, or to object to certain processing. You may also withdraw consent where processing is based on consent.

To exercise rights, contact privacy@destinyxstudios.com. We will verify your request and respond within applicable timelines. Authorized agent requests (where permitted) must include proof of authorization.

10. Cookies & Tracking

We use essential cookies to operate the Service and optional analytics/performance cookies to understand usage. You can control cookies through your browser or system settings. Some features may not function without certain cookies.

11. International Transfers

We are based in the United States and may transfer personal information to countries where we or our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.

12. Automated Decision‑Making

PlugScore™ and match ranking assist with prioritization but do not make legal or similarly significant decisions about you. You can review and edit application materials and disable automation features at any time.

13. Children’s Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided information, contact us and we will delete it.

14. U.S. State Disclosures (CA/VA/CO/CT/UT)

Residents of certain U.S. states have additional rights under local laws (e.g., CPRA, VCDPA). We do not sell personal information or share it for cross‑context behavioral advertising. You may exercise applicable rights as described in Section 9.

15. Do Not Track

Some browsers transmit "Do Not Track" signals. The Service does not respond to such signals because no common industry standard has been adopted. You can manage tracking via cookie controls described above.

16. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via the Service or email, and the "Last updated" date above will be revised. Your continued use of the Service after changes become effective constitutes acceptance.

17. Contact

Questions or requests about this Policy or our data practices: