Privacy policy

Account details: your name, email address and a password hash. We never store your password itself, and we verify your email with a six-digit code. There is no social sign-in.

Your phone number. Recruiters often call, so it is required before we show jobs or send any application. LinkedIn, GitHub and portfolio links are optional.

Your resume and the profile built from it: skills, titles, experience, education, preferences, and the answers you add to your answer bank (such as notice period or expected CTC).

Mailbox access, if you connect one: encrypted tokens or app passwords that let us send applications as you and read replies to threads we started.

Applications, messages and events: what was sent, to whom, when, and the replies received on those threads.

Service data needed to run JobPluck safely: errors, rate-limit counters and approximate location from your IP address.

We do not read, store or index any email in your mailbox other than threads JobPluck started and their replies.

We do not sell your data or share it with advertisers, and we do not use your resume to train AI models.

If you connect a Gmail or Google Workspace mailbox, JobPluck asks Google for one Gmail permission, gmail.modify (send email on your behalf, read messages and add labels), plus your email address (userinfo.email).

We use them only to send the applications and replies you approve or automate, to detect recruiter replies to threads JobPluck started, to label those threads, and to show the conversation to you in the app. We do not read, store or process any other email in your mailbox.

We do not sell Google user data, use it for advertising, or use it to train AI or machine-learning models. Our people do not read your email, except with your explicit permission for a specific message (for example, a support request), when required for security, or when required by law.

JobPluck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can disconnect your mailbox at any time under Settings → Mailboxes, or revoke access at myaccount.google.com/permissions. When you disconnect, we delete your Google tokens immediately.

JobPluck collects publicly posted hiring information, including email addresses and phone numbers that recruiters chose to publish in their posts. These details are shown only to signed-in users, are never exported in bulk, and are removed on request. If you posted a job and want it removed, contact us with the post link.

To match you with jobs, compute your ATS score, send the applications and replies you approve or automate, show you your conversations, and tell you about interviews and anything that needs your reply.

To keep the service safe: rate limits, bounce monitoring, abuse prevention and an audit log of every automated send.

JobPluck emails you from info@jobpluck.com. Security emails (verification codes, password reset codes, password-changed notices) are always sent.

Everything else is optional: interview alerts, “needs your reply” alerts, mailbox problems, a daily summary and setup reminders. Each has an unsubscribe link and a switch under Settings → Emails from JobPluck.

On jobpluck.com (the public website, not the signed-in app) we use Google Analytics to count visits and see which pages are useful. Google Analytics sets first-party cookies (such as _ga) and receives your IP address, browser and device type, and the pages you view. We do not send your name, email, resume or any account data to Google Analytics, and we do not use it for advertising.

You can block these cookies in your browser or install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). How Google uses this data: policies.google.com/technologies/partner-sites.

The signed-in app uses only the cookies and local storage it needs to keep you logged in.

Profiles, applications and messages are stored in a managed database. Resumes and other files you upload are stored in private object storage and are only ever streamed to you through the app; they are never given a public link.

Mailbox tokens are encrypted with AES-256-GCM. Connections use TLS.

While your account is open. When you delete your account, your resume, messages, tokens and profile are deleted within 30 days. Aggregated statistics that cannot identify you may be kept.

You can correct your data, disconnect your mailbox, turn off optional emails or delete your account at any time. You can also ask us for a copy of your data. Residents of India have rights under the Digital Personal Data Protection Act, 2023, and residents of the EU under the GDPR.

Questions about this policy: info@jobpluck.com.