Privacy Policy

1. Information We Collect

We collect information when you create an account, upload your PDF resume, request AI resume tailoring, connect your Gmail account via Google OAuth 2.0, and purchase credits via Dodo Payments. This includes your name, email address, parsed resume data (work experience, skills, projects, and education), and job search preferences.

2. Third-Party AI Services & Document Isolation

To provide our services, we process user-uploaded resume text and public job descriptions using our secure AI service providers (Google Generative AI / Gemini API, Groq Cloud API, and NVIDIA NIM) to generate tailored job outreach emails and surgically tailored resume snapshots.

No AI Training on User Data: Candidate resumes, tailored documents, and Google Workspace user data received via Google APIs (such as Gmail data or OAuth tokens) are never used, transferred, or sold to create, train, fine-tune, or improve foundational or generalized artificial intelligence (AI) or machine learning (ML) models. Our AI workflows process user-submitted resume text and job listing details strictly on-demand in isolated execution environments.

3. Google OAuth & Gmail API Data Usage

FetchrLy requests access strictly to the minimum granular scope necessary to deliver our service:

• https://www.googleapis.com/auth/gmail.send: Used exclusively to send user-reviewed, user-approved 1-to-1 job outreach emails directly from the user's connected Gmail account.

We do not read, store, index, or scrape your private inbox messages, emails, or personal threads.

4. Google API Limited Use Compliance Statement

FetchrLy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

"The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements."

5. Google User Data Retention and Deletion Policy

Retention: We retain encrypted Google OAuth access and refresh tokens only for as long as the user's account remains active and connected to Gmail. OAuth tokens are encrypted at rest using AES-256 (Fernet) encryption.

Deletion & Revocation: Users retain complete control over their connected Google account data at all times:

• In-App Disconnect: Users can disconnect their Gmail account at any time by clicking "Disconnect Gmail" in their account settings. This action immediately and permanently deletes all stored access tokens, refresh tokens, and associated Google credentials from our databases.
• Google Account Permissions: Users can revoke FetchrLy's access at any time directly through their Google Account Security Settings.
• Account Deletion: If a user requests account deletion, all personal data, resumes, email logs, and connected OAuth tokens are permanently purged within 24 hours.

6. Recipient Opt-Out & Anti-Spam Policy

FetchrLy is designed solely for 1-to-1 individual career correspondence and job applications. Bulk sending, automated mass mailings, and unsolicited commercial advertising are strictly prohibited. All emails dispatched via FetchrLy provide recipients with the right and ability to opt out or unsubscribe at any time by replying directly with "unsubscribe", "stop", or by clicking any opt-out link provided in the email footer.

7. Contact Us

If you have questions about this Privacy Policy, your Google user data, or wish to request data deletion, please contact us at fetchrly@gmail.com.