Privacy Policy

Information we handle

Account information: your Google account identifier and verified email address, account role and status, and session information. Google sign-in requests your basic profile and email permissions. We do not receive your Google password.

Information you provide: CVs, employment and education history, contact details included in documents, job postings and URLs, applications, notes, interview updates, preferences, and feedback. Generated documents, matches, and other AI results may be saved with your account. Avoid uploading identity documents, financial details, health information, or other sensitive information that is unnecessary for your job search.

Optional Gmail information: if you connect Gmail, we handle authorization tokens, mailbox address, message and thread identifiers, sender information, subjects, snippets, timestamps, and job-related classifications or links to applications. Sync fetches message bodies for processing; the imported email records store metadata and snippets rather than complete message bodies.

Operational information: essential cookies, request and error information, and AI request metadata such as model, operation, token counts, and usage limits. Hosting and network infrastructure may process IP addresses and request information to deliver and protect the service. This application does not include advertising trackers.

How and why we use information

We use information to authenticate you, maintain your private workspace, track applications, create requested documents and analyses, operate optional integrations, respond to support and privacy requests, prevent abuse, troubleshoot failures, and meet applicable legal duties. We process information as needed to provide the service you request, with consent for optional access where required, and for other purposes only where applicable law permits. We do not sell personal information or use Google user data for advertising.

Gmail is optional

You can use manual tracking without connecting Gmail. If you connect it, sync can fetch messages across your mailbox since the sync cursor before identifying application-related messages; access is not limited to emails already labeled as job applications. The connection currently requests permission to read email and to send email. The implemented sync reads messages; requesting send permission does not mean the current sync sends messages.

Disconnecting Gmail removes the saved connection credentials and stops future sync through that connection. JobTracker also attempts to revoke its Google token. You can revoke access directly in your Google Account at any time. Disconnecting or revoking access does not delete records already imported into JobTracker. Request deletion separately using the contact details below.

AI processing and service providers

AI features can send the content needed for a task to the configured API provider, OpenAI or Anthropic. Depending on the feature, this can include CV content, job descriptions, prompts, and relevant email sender, subject, and body text. Gmail classification may use AI during sync without a separate click for each message. The selected provider can change through the service configuration. You can contact us to ask which provider is currently configured before using AI features or connecting Gmail.

Providers process submitted information under their applicable API terms and data-handling arrangements; separate retention or security-monitoring rules may apply. We do not promise that API requests are never retained by a provider. We do not use information obtained through Google Workspace APIs to train, improve, or develop generalized or non-personalized AI or machine-learning models, and we do not authorize providers to use that information for those purposes.

Google handles identity and optional Gmail authorization. If we send you invitations or service messages through Resend, it processes recipient addresses, message content, and delivery information. Replies to our support email are handled through iCloud Mail. These providers receive information only for their relevant service functions. We may also disclose information when legally required or as necessary to address fraud, security threats, or protection of legal rights.

Google API Limited Use

JobTracker’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and the Google Workspace API user data and developer policy, including the Limited Use requirements. Google user data is used to provide the disclosed user-facing features, not for advertising, data brokerage, or unrelated profiling.

We do not allow people to read Google user data except with your affirmative agreement for specific information, where necessary for security, to comply with applicable law, or in other circumstances expressly permitted by Google’s policies. Any transfer to an AI provider must be limited to the disclosed feature and comply with these restrictions.

Hosting, international processing, and security

JobTracker runs on infrastructure self-hosted by the operator. We do not represent that all processing occurs in Indonesia: Google, AI providers, email providers, and network services may process information in other countries. Where required, we apply the safeguards and conditions applicable to those transfers.

The application separates account workspaces, uses protected session cookies, and encrypts stored Gmail refresh tokens. These controls do not mean all stored application data is encrypted or that the operator cannot access the underlying infrastructure. No system can guarantee absolute security. We restrict access to legitimate operational needs and handle incidents and required notifications in accordance with applicable law.

Retention and deletion

We keep account and application information while needed to provide your account and the functions you use, unless you request deletion or a shorter period is required by law. Deleting or archiving an individual item may not remove copies from backups. Disconnecting Google or Gmail alone is not an account deletion request.

To delete your account, email [email protected] from your account email address. We may ask for proportionate verification before taking action. We will delete your account data from active systems within 30 days of a verified request. Backup copies expire within 90 days of the verified request; if restored before expiry, deletion requests must be reapplied. We will not use pending-deletion backup data for ordinary product operations.

Information that must be retained to comply with law or resolve a specific legal claim may be retained only for that purpose and for as long as necessary. Records held independently by providers, including support correspondence or legally required records, are also subject to their applicable obligations. We will explain any relevant exception when responding to your request.

Your choices and rights

You can choose whether to connect Gmail, revoke Google access, and request access to, correction of, a copy of, or deletion of your personal information. You may also withdraw consent or request restriction or objection to processing where applicable. Withdrawal does not affect lawful processing that happened before it. Contact [email protected]; we respond within the time required by applicable law. You may raise concerns with the competent authority where available. These rights are subject to applicable law, including Indonesia’s personal data protection requirements.

JobTracker is intended for people who can lawfully agree to its Terms of Service. We do not knowingly offer it to children who require parental consent. Contact us if you believe a child has provided personal information without the required authorization.

Changes and contact

We update the date on this page when the policy changes. For material changes, we will provide appropriate notice through the service or your account email and obtain new consent where required before using information for a new purpose. Privacy, access, security, and deletion requests can be sent to Victor at [email protected].