Privacy Policy

Last updated: 19 June 2026

Job Helper ("the Service") is a private, invite-only portal operated by Mayank Agarwal ("we", "us") to assist individual candidates with job-search activities. This policy explains what personal information we handle and how.

1. What we collect

For each authorized candidate (a "User"), we collect and store:

• Identity data: name, email address, phone number, résumé content as provided by the User.
• Gmail OAuth tokens: a refresh token issued by Google when the User connects their Gmail account, enabling the Service to send and read messages on the User's behalf within the scopes they have approved (gmail.send, gmail.compose, gmail.readonly).
• Outreach data: companies and contacts the User chooses to target, copies of the emails the Service generates and sends, and the status of those emails (sent, bounced, replied).
• Usage metadata: server logs and Anthropic API call records for cost tracking. No content of email replies is stored beyond a brief snippet used to classify bounces vs human replies.

2. How we use it

• To discover relevant job openings and target companies on behalf of the User (via Anthropic's Claude API + web search).
• To draft and send personalized outreach emails from the User's own Gmail account, with the User's résumé attached.
• To read the User's Gmail inbox solely for the purpose of classifying replies and bounces on outreach threads initiated by the Service.
• To present the User with the status of their outreach via a private dashboard.

3. Where data is stored

All User data is held in a SQLite database on a single virtual machine operated by Mayank Agarwal on Oracle Cloud Infrastructure (Mumbai region). Daily encrypted backups are retained for 14 days on the same host. No data is replicated to any third-party analytics, advertising, or marketing platform.

4. Sub-processors

The Service uses the following third-party services to function:

• Google (Gmail API): to send outreach and read inbox responses on the User's behalf, under the OAuth scopes approved by the User.
• Anthropic: the User's résumé, target-company data, and instructional prompts are sent to Anthropic's Claude API to generate role lists, contact suggestions and email drafts. Anthropic processes this data per their data-use policy and does not train models on API content.
• Oracle Cloud Infrastructure: hosts the virtual machine that runs the Service.
• Caddy / Let's Encrypt: automatic TLS certificate management on the public domain.

5. Sharing

We do not sell, rent or share User data with any third party other than the sub-processors listed above. Outreach emails drafted by the Service are sent from the User's own Gmail account directly to recipients the User has identified; the Service does not act as a sender of record.

6. Retention & deletion

User data is retained while the User remains active on the Service. To request a copy of your data or full deletion, use the contact address in section 10 below. Deletion requests are honoured within 14 days and result in the removal of all rows associated with the User from the database and backup snapshots.

7. Cookies

The Service uses a single first-party session cookie set by Auth.js to keep the User signed in. No analytics, advertising or tracking cookies are set.

8. Children's privacy

The Service is intended for adult job-seekers. We do not knowingly collect data from anyone under 18.

9. Changes to this policy

We will publish material updates here and notify active Users by email. Continued use of the Service after a change constitutes acceptance of the revised policy.

10. Contact

Privacy questions, data-subject requests, access enquiries, or anything else — please write to: