Privacy policy

What we collect

• Your Google account basics: your name, email address and profile picture, so you can sign in.
• Applications you track: company, role, status, dates, pay, links and notes, whether you type them or they come from your email.
• From Gmail, only if you connect it: for emails that look job-related, the sender, subject, date, a short snippet (at most 500 characters) and what we understood from the email (company, role, status, interview time and link). Email bodies are read to do this but are never stored.
• Emails you forward to your TrackJob forwarding address, if you set one up: the same facts as for Gmail (sender, subject, date, short snippet and what we understood). The body is read but never stored.
• Your résumé, if you upload one: we keep its text (not the PDF file), its file name and size, and the job title read from it. It is used to search jobs for you on the Dashboard and to write interview prep packs.
• Prep packs written for your interviews, and your reminder settings (which reminders you want and your time zone).
• A session cookie that keeps you signed in. We use no advertising or tracking cookies.
• Anonymous usage counts: Vercel Web Analytics counts page views (page, referrer, country, browser and device type) without cookies and without identifying you.
• Practice progress (your level, exercises done and the days you practised) is saved to your account so it follows you to other devices. Your practice notes and code drafts stay in your browser only, and code you run on the Practice page runs in your browser.

How we use it

Only to run TrackJob for you: to fill and update your board, find jobs for you, show and remind you of your interviews, and prepare you for them. We do not sell your data, show you ads, or use your data to build profiles for anyone else.

Google user data and Limited Use

TrackJob asks for read-only access to Gmail (gmail.readonly) and uses it only to find and read your job application emails. TrackJob's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail data is used only to provide the job-tracking features you see in TrackJob.
• It is not used for advertising, not sold, and not used to train general AI models.
• People do not read your emails, except with your permission, for security or abuse investigations, or when the law requires it.
• Gmail data is only shared with the service providers listed below, to run these features.

Who processes it

• Google: sign-in and Gmail access.
• Anthropic (Claude): when AI reading is turned on, the text of a job-related email is sent to Claude to work out what it says. When you ask for a prep pack, the job posting saved on the card, your notes on it, the interview details and your résumé text are sent to Claude to write it. Under Anthropic's commercial API terms this data is not used to train their models.
• Resend: sends your reminder emails, so it receives your email address and the company, role and interview time in each reminder.
• Postmark: receives the emails you forward to your TrackJob address and passes them to us.
• Job search sources (Himalayas, Jobicy, Remote OK, Working Nomads, and JSearch for signed-in users): receive the job title you search for (or the one from your résumé), never your name or email.
• Hosting: the website on Vercel (which also provides the anonymous page-view counts); the API and database on Railway.
• jsDelivr: serves the Python runtime for the Practice page from its CDN when you choose Python.

How it is protected

• Google access tokens are encrypted (AES-256-GCM) before they are stored.
• Every request is checked so you only ever see your own data.
• Traffic between your browser and TrackJob is encrypted (HTTPS).

How long we keep it, and how to delete it

• Your data stays while you have an account.
• Download your applications as a CSV file, or delete your account, from Settings. Deleting removes your applications, emails, interviews, prep packs, résumé, reminders, forwarding address, practice progress and sessions right away and revokes TrackJob's Gmail access at Google.
• Disconnecting Gmail in Settings revokes access at Google; you can also remove it from your Google account's security page.
• You can remove your résumé, turn off reminders, or turn off your forwarding address in Settings at any time.
• Guest sandboxes (trying TrackJob without signing in) are deleted after 7 days without a visit.

Contact

Questions or requests about your data: villamar.marvin.b.8138@gmail.com.