Privacy Policy

Last updated: October 13, 2026

JobSeekerAI helps users review job-related emails, evaluate job opportunities, tailor resumes, and prepare job-search communications. This Privacy Policy explains what information we collect, how we use it, and the choices available to users.

1. Information We Collect

We may collect account information, resume/profile information, job descriptions, job-related messages, Gmail data needed for enabled features, usage/billing status, and technical logs such as request IDs and error metadata. Google sign-in provides your account email address and authentication information; we do not request access to your contacts, Drive files, or Calendar.

2. Gmail Data

If you connect Gmail, JobSeekerAI uses Gmail access only to provide job-search features you request. Inbox Scan searches for possible job messages and checks their sender, subject, snippets, and message text on our backend. Scan content is not sent to AI providers, and message bodies are not stored by the scan. Auto-Engage reads full message content only for Gmail conversations you explicitly choose to track. The application does not sell Gmail data.

Gmail access can include message and thread identifiers, senders and recipients, subjects, timestamps, labels, snippets, and message text, including quoted conversation history. Chat and resume tailoring may read the job conversation you select. Compose access is used to inspect existing drafts, create reply drafts, and send authorized replies and resume attachments. We do not use these permissions to delete inbox messages, change inbox labels, or send unsolicited marketing campaigns.

When you start your Job Search Agent, it may send routine replies from your Gmail account without prior review, but only in recruiter conversations you choose for it to handle. You may provide agent preferences such as compensation expectations, work arrangement, engagement type, total experience, current and preferred locations, relocation, work authorization, start timing, a phone number, and preferred call times. The agent may use those approved preferences and resume-grounded experience summaries in replies. It pauses for proposed appointments, missing preferences, sensitive information, documents, assessments, offers, changed senders, and uncertain requests. It stores the tracked Gmail thread and message identifiers, sender, subject, consent version, and workflow state; it does not store conversation bodies in the Auto-Engage tracking record. You may stop tracking a conversation or revoke Gmail access at any time.

3. How We Use Information

  • To authenticate users and maintain account sessions.
  • To scan job-related emails and display job opportunities.
  • To tailor resumes and generate job-search assistance.
  • To send routine replies in recruiter conversations you choose for your agent to handle.
  • To answer straightforward recruiter questions using preferences you supplied.
  • To pause a conversation when scheduling, missing information, sensitive information, or a user decision is required.
  • To manage subscription status, billing access, and usage limits.
  • To debug errors, prevent abuse, and improve reliability.

4. AI Processing

JobSeekerAI uses OpenAI for AI processing. Model selection may vary by feature and configuration. OpenAI may process user-provided resumes, job descriptions, and job-search content to generate summaries, match scores, tailored resume text, job chat responses, safety classifications, and recruiter communications. When you track a recruiter conversation, relevant conversation content, resume information, and applicable agent preferences may be sent to OpenAI for those purposes. Google remains the provider of Gmail access and Google sign-in, but Gmail content is not sent to Google's Gemini AI service.

We do not use raw Gmail content or information derived from it, including aggregated or anonymized data, to train, fine-tune, or improve general-purpose AI or machine-learning models. We do not authorize AI providers to use this information for model training. OpenAI API data is not used for training by default; our production API account must keep optional training and data-sharing programs disabled.

Requests use OpenAI's Chat Completions API with response storage disabled. This is not a promise of zero retention: OpenAI may retain prompts, responses, and derived metadata in abuse-monitoring logs for up to 30 days by default, with longer retention for legal or safety exceptions. See OpenAI's API data controls.

5. Payments

Payments and subscription management are processed through Stripe. JobSeekerAI does not store full payment card numbers.

6. Data Sharing

We do not sell personal information. Google provides sign-in and Gmail access. Our Render backend and Agent worker process connected-account information and job-related content; Vercel hosts the website; Supabase/Postgres stores saved account, resume, preference, and workflow information. OpenAI receives relevant selected conversation content, resumes, and preferences for the AI features described above. Authorized replies and attachments are transmitted through Gmail to the recruiter in the selected conversation. Stripe receives information needed to process payments and subscriptions, not Gmail message content from JobSeekerAI.

These providers process information as necessary to supply their services. Transfers of Google user data are limited to consented, visible user-facing features, necessary security investigations, legal requirements, or a business transfer with the user's prior consent. Raw or derived Google user data is not shared with advertisers, data brokers, or information resellers, or used for targeted advertising, credit scoring, or lending. Human access is limited to specific data you consent to share for support, necessary security or abuse investigations, legal obligations, or permitted aggregated, anonymized internal operational analysis. The same restrictions apply to our staff and service providers.

7. Data Retention and Choices

Saved resumes, approved tailored resumes, agent preferences, and connected-account credentials are retained to provide your saved workspace until replaced, removed, or deleted following an account/data deletion request. Tracking records, reply history, and activity records include message identifiers, senders, subjects, decisions, and sometimes content-derived explanations. Stopping tracking prevents future Agent processing of that conversation but does not automatically erase existing history. Scan does not persist message bodies. Browser sessions and the extension may keep local resume, preview, and workflow copies until cleared or replaced.

Feature counts, token counts, model names, costs, and success/error statistics are retained for usage limits, billing, and reliability. These usage records do not contain complete email bodies, resumes, or AI prompts. Operational records may include your email address, message metadata, and content-derived decisions. We do not use these records for unrelated profiling or model training.

To request deletion of your connected-account data, resumes, preferences, or workflow history, email jobseeker.ai712@gmail.com from your account address and identify the information to delete. We verify ownership before removing account data. Revoking Google access does not itself delete data already held by JobSeekerAI. Account deletion does not remove messages or attachments from your Gmail mailbox or a recruiter's mailbox. You can clear local browser/extension copies separately. Backups and infrastructure logs expire under their provider retention schedules rather than instantly; legally required billing, security, or compliance records may be retained for those obligations. Provider retention details are available from support.

8. Security

Production Gmail credentials stored by the backend are encrypted using an application encryption key kept separately in service configuration. Account-scoped access checks restrict access to saved resumes and recruiter workflows; production browser session cookies use Secure and HttpOnly flags. Google and OpenAI API requests use HTTPS. Hosting and database services provide infrastructure security controls. No system is perfectly secure, and users should avoid uploading unnecessary sensitive information.

9. Google Limited Use

JobSeekerAI's use and transfer of information received from Google APIs, including raw Google Workspace data and aggregated, anonymized, or otherwise derived data, complies with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements. Google user data is used only for the job-search features you choose and the narrowly permitted purposes described above.

10. Contact

Questions about this Privacy Policy can be sent to jobseeker.ai712@gmail.com.

HomeTerms of ServiceSupport