Privacy Policy

HR Outreach · Last updated: October 9, 2026

HR Outreach ("the app", "we") helps you find job openings that match your resume and email the recruiters behind them from your own Gmail account. This policy explains what we collect, why, and the choices you have.

What we collect

Google account details: your name, email address and profile picture, from Google Sign-In.
Gmail access (only if you allow it): a permission to send email as you and to read mail. Google gives us a token that lets the app do this; we store it encrypted.
Your resume and profile: the resume file you upload, the text extracted from it, the structured version, your skills, experience, regions and preferences.
Your activity in the app: job matches and scores, email drafts you write or approve, tailored resumes, and a log of emails sent through the app (recipient, subject, time, delivery and reply status).
A session cookie that keeps you signed in. It is essential to the app; we do not use advertising or tracking cookies.

How we use Gmail access

We send an email only after you approve it, from the Gmail account you connected.
We read mail only to check delivery and replies for emails sent through the app, and to run inbox-placement tests between your own connected mailboxes. We do not read, store or analyse your other mail.
We do not use Gmail data for advertising, and we do not sell it.

The app's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share data with

OpenAI receives the text of your resume and of job postings so the app can structure your resume, tailor it to a job and write draft emails. This is subject to OpenAI's API terms and privacy policy.
Google provides sign-in and Gmail. Emails you approve are delivered through Gmail to the recipients you choose.
Hosting: the app and its database run on a server we control. We do not sell or rent your data, and we do not share it with advertisers.
We may disclose data if the law requires it.

Security

Connections use HTTPS. Gmail tokens are encrypted at rest. Each user can only see their own profiles, drafts, resumes and mailboxes. Backups are kept for 7 days. No system is perfectly secure, and we cannot guarantee absolute security.

Retention and your choices

Disconnect Gmail at any time on the Mailboxes page. This revokes the app's access and deletes the stored token. You can also remove access at myaccount.google.com/permissions.
Delete a profile on its page. This removes the resume text, matches, drafts and tailored resumes for that profile.
Delete your account and all data by contacting us (below). We will delete it within 30 days, apart from short-lived backups that expire on their own.
Otherwise we keep your data while your account is active.

The people you email

The app stores the recruiter email addresses it finds in public job postings, plus any you add yourself. If you are a recruiter or employer and do not want to receive messages sent through the app, contact us and we will add you to a do-not-contact list.

Children

The app is not intended for anyone under 18.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

Use the developer contact email shown on the Google sign-in screen.