Security

• In transit. Everything travels over encrypted connections (HTTPS/TLS).
• At rest. Sensitive data — including any credentials you give NeverApply — is encrypted where it’s stored.
• Passwords. Stored hashed, never in plain text. We can’t read your password, and neither can anyone else.
• Access. Limited to authorized team members on a need-to-know basis, and logged.

NeverApply applies to jobs — and, where relevant, spends — for you. That carries a higher bar, so:

• Any credentials you give it are encrypted and used only to perform the actions you authorized.
• Every action is logged with a receipt: the posting, what was sent, and when.
• Spending happens only within the cap you set, itemized — never silently.
• One switch pauses everything, instantly. You can export or delete your data at any time.

Payments are handled by a PCI-DSS–compliant payment provider. We never see or store your full card number — only the itemized record of what was charged.

Security is shared. Please use a strong, unique password and keep it private, review your logs and receipts, and tell us straight away if anything looks wrong — a charge you don’t recognize, an application you didn’t expect, or a login you don’t remember.

Found a weakness? Tell us privately at hello@kasovy.com — we read these first. Please give us a reasonable chance to fix it before sharing it publicly. We won’t pursue legal action against good-faith research that respects people’s data and doesn’t disrupt the service.

If there’s an incident that affects your data, we’ll tell affected users promptly and in plain words — what happened, what we’re doing about it, and what, if anything, you should do.

Security reports and anything else: hello@kasovy.com. Kasovy LLC — 30 N Gould St, STE R, Sheridan, WY 82801, USA.