Privacy policy

In force from 19 October 2026. Questions and requests: support@jobreach.app.

Jobreach takes the real history you give it, builds a resume and an email for each opening that fits you, and puts them where you can send them. To do that it has to keep your CV and what it makes from it. This page says exactly what is kept, why, where, for how long, and how to have it removed.

What Jobreach keeps

Your account. The email address you sign in with. With Continue with Google, the name and email Google gives us. Jobreach never sees a Google password and keeps no passwords at all: you sign in with Google, or with a one-time code we email you. While you are signed in, your browser holds a sign-in cookie that only Jobreach can read.
What you give us. Your CV files and the text read from them, the notes you write, your GitHub, portfolio and LinkedIn links, your public GitHub repositories and up to six of their READMEs, your portfolio page, and your answers to the questions we ask. Jobreach never logs in to LinkedIn and never reads your LinkedIn profile. When you send it a LinkedIn post's link, it reads that one post from the page LinkedIn shows to people who aren't signed in.
Your application, if you apply for a seat. Your name, the email you will sign in with, your WhatsApp or phone number, your LinkedIn, where you are in your career, your years of experience, the roles you want and your answers to the application's questions, and, to limit how often it can be sent, the internet address it came from in a coded form. It is used to choose who is invited and to tell you. It is kept until you ask us to delete it, or until your account is removed for good if you make one.
A linked chat, if you link Telegram or WhatsApp. Your chat id (on WhatsApp, your phone number), the name the app shows for you (your Telegram first name or username, or your WhatsApp profile name), when the chat was linked and last used, and the posts and links you send it, which are kept like posts you add here. Unlinking stops the chat at once; the record of the link stays until your account is removed for good.
The LinkedIn extension, if you install it. It looks at the posts on the LinkedIn pages you open, inside your browser, only to decide where to show its button. To show it only on posts that suit you, it keeps a copy of your kinds of role, where you are in your career, your years of experience and batch year, whether you want internships or full-time work, the cities and work modes you chose and the companies you skip, in your browser, and refreshes it from Jobreach. What it sees on LinkedIn never leaves your browser: only a post you press Add to Jobreach on is sent to Jobreach, with its text, who posted it and their headline, its age and its link, and, when a LinkedIn job is attached to the post, that job's title, company, place and link. Disconnecting or removing the extension deletes that copy.
What you tell us about yourself. Your contact details, city, graduation date, batch year and CGPA where you give them, your years of experience as we work them out from your jobs, and your preferences: the roles you want, pay floors, work mode, cities, companies to skip, your notice period, and how long your resume may be.
What Jobreach makes. The facts drawn from your documents, one baseline resume per kind of role, and for each opening you pursue a tailored resume (DOCX and PDF) and an email.
What you do. The openings you open, prepare or dismiss, the outcomes you log (replied, interview, rejected), and when you last used the app.
Technical records. Requests to our servers and their errors, and for each model call its step, token counts, cost and timing. These records never hold the text of a CV or an email.

Why

To build your resumes and emails. Every line on them is checked against your own documents; nothing is invented.
To find and score openings for you. Your roles, years and preferences are matched against openings collected from public job boards, careers pages, posts you add and posts added by the Jobreach team.
To put emails in your Gmail, if you connect it. See the Google section below.
To run and support the service. The Jobreach team can see accounts, files and activity to keep the service working and to help you when you ask.
To learn what works. Reply and interview rates are counted in aggregate, never published about you.

Jobreach never sells your data, never shows advertising, never shares your details with employers unless you send them an email yourself or turn on Send for me, and never submits an application on your behalf.

What Jobreach asks Google for

Sign in with Google gives Jobreach your email address and name, to create and recognise your account.

Connect Gmail is optional. If you connect it, Jobreach asks Google for one permission:

Manage drafts and send email (gmail.compose). Used to create a draft in your own Gmail for each email, with the resume attached. An email is sent through this permission only when you have turned on Send for me, and you can stop any email before it goes. Jobreach never sends anything otherwise.

Jobreach never reads your mail: not the messages you receive, not the ones you send, not their subjects or senders, and not your contacts. Google's drafts permission would also let an app read your drafts; Jobreach's code doesn't, and allows only these Gmail calls: creating a draft; checking whether a draft it created is still in your drafts, by that draft's id or the message ID Jobreach gave it (the answer says nothing about what is in it); sending a draft you asked it to send, through Send for me; and removing one of its own drafts when you ask for that email to be updated (the new version takes its place; a draft you changed in Gmail is never removed). Every other call is refused in code. When a draft leaves your drafts, Jobreach marks the email sent. Gmail's answer about the draft sometimes says it was sent; when it doesn't, Jobreach can't tell whether you sent it or deleted it, so you can undo the mark. What is stored: the Gmail address you chose, a refresh token encrypted with a key that exists only on our server, the ids of the drafts Jobreach created and of the messages it saw them sent as, and which of your Gmail addresses each draft was made in. Disconnecting Gmail, starting over, or deleting your account revokes that access at Google and deletes the token. Disconnecting Gmail, or connecting a different Gmail address, also turns Send for me off. Emails already in your Gmail stay in your Gmail; they are yours.

Jobreach's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features described here. It is never used for advertising, never sold, and no person at Jobreach reads it except with your consent, for security or to comply with the law.

Where it is kept, and who processes it

Amazon Web Services runs the Jobreach server and its database in Seoul, South Korea, sends Jobreach's own emails (sign-in codes) through Amazon SES, and keeps an encrypted nightly backup of the database in S3 for 30 days. Every table with your data is restricted to your own account by row-level security.
Microsoft Azure OpenAI runs the models that read posts and write resumes and emails, in the UAE North region. It receives the facts from your documents, the post, and the email being written. Under Microsoft's terms it does not use this text to train models.
Google provides Continue with Google and, if you connect it, Gmail, as described above.
Cloudflare carries traffic between your browser and the server.
Telegram and Meta (WhatsApp) carry the messages between you and the Jobreach bot, only if you link it: what you send, Jobreach's replies (which name the company, the role and a link to the opening in Jobreach), and your chat id or phone number.
Razorpay takes the payment for a pass, once payments are switched on. It receives your account's id and email address and the payment details you give it. Jobreach keeps the order, the amount, whether it was paid, how, and the email and phone number it was paid with.

No company other than these receives your data. The Jobreach team is in India; your data is held on the servers named above. Until October 2026 the database and sign-in were held by Supabase, also in Seoul; that copy is deleted within two weeks of the move.

Job posts and openings

A job post is a company's announcement, not information about you. A post you add is kept as your own lead, and Jobreach checks that the company and its hiring address are real. If it passes the checks, a copy is also kept as an opening for everyone, with no link to you, so that Jobreach can match it for others. A hiring contact published in a post or on a company's site (a name, a role and an email address) is kept for hiring purposes only. Jobreach's list of hiring contacts deletes one 30 days after it was last in use: named by an open opening, or the address of an email not yet sent. An address that bounced for more than one person stays on that list, blocked, so nothing is written to it again, and its name and role are taken off once nothing has used it for 30 days. On an opening Jobreach keeps for everyone (one from a job board or a company's site, or the copy of a post someone added), the contact is deleted 30 days after the opening closes. The post's own text, which may name the contact, stays with the opening. On a post you added yourself, the contact stays until you delete that post or your account.

How long, and how to delete

Everything is kept while your account exists, with one exception. The resume made for an email is deleted a day after the email is sent, because the copy that went is attached to the email in your sent mail. It stays while a share link to it is on, and the resumes for emails not yet sent, for company portals, and your base resumes stay too. If you mark an email sent by mistake and set it back within that day, its resume stays. If its draft simply left your Gmail drafts, so Jobreach only marked it sent, its resume is kept a week instead, so you can still undo the mark. You can download your CV files and the resumes Jobreach still holds from Profile at any time, and change any fact, preference or resume there.

Delete your account from Profile. It closes at once: Send for me is switched off, Gmail access is revoked at Google, your agent and extension keys stop working, and your Telegram and WhatsApp links are undone. For 30 days you can sign in and restore it. After that, everything is removed for good: CVs, facts, resumes, emails, outcomes, your application, linked chats and the account itself. Backups age out within a further 30 days.

Or start over, from Profile, Account: your profile, CV files, facts, answers, resumes, emails, leads, outcomes and settings are deleted at once, and Gmail, your agent and extension keys and the Telegram and WhatsApp bots are disconnected. Your sign-in, your seat and plan, any payments, and the records that keep the daily limits stay: your AI use, and for each email Send for me sent, when it went and, for a week, the address in a form coded with a key only Jobreach holds. You set up again from the first step. Backups age out within 30 days.

Your rights

Under India's Digital Personal Data Protection Act you can ask what we hold about you, have it corrected or deleted, withdraw consent (disconnect Gmail, or delete the account), and raise a complaint. Most of this you can do yourself from Profile. For anything else, or if something is wrong, write to support@jobreach.app; we answer within 30 days. If you are not satisfied with the answer you may approach the Data Protection Board of India.

Security

Everything travels over HTTPS. Each person's rows are separated by row-level security in the database, and the server reads them as that person, not as an administrator. Gmail tokens are encrypted at rest. Server access is limited to the Jobreach team. If a breach ever affects your data, you will be told, and so will the Data Protection Board, as the law requires.

Who may use Jobreach

Jobreach is for people of 18 and over who are looking for work. Your age is asked at sign-up. It is not meant for children, and no account should be made for one.

Access and its terms

Jobreach is open to a limited number of people at a time, and decides on its own who is admitted, from the applications it receives or otherwise. Every kind of access is granted by Jobreach and is not a right:

A seat and the free week may be ended, paused or limited by Jobreach at any time, for any reason, without notice.
Free access given to you, for life or for a time, is a courtesy. Jobreach may change it, limit it or withdraw it at any time, for any reason, without notice or compensation, and no claim arises from that. "For life" means for as long as Jobreach exists and chooses to keep it, not a promise that binds Jobreach.
A paid pass may likewise be ended or refused by Jobreach at any time. If Jobreach ends a paid pass early, it may refund the unused days at its discretion; no other claim arises. A pass is not refunded because the person stops using it or their account is closed for breaking these terms.
The service itself may change, pause or close. Jobreach gives no guarantee of openings, replies, interviews or offers.

By creating an account you accept these terms and this policy; the sign-up form asks you to confirm that you have read them. Jobreach may close an account that breaks them, including one used to send emails it did not write, to misrepresent a person's record, or to harass anyone.

Changes

When this page changes in a way that matters, the date at the top changes and the app shows you the new notice at your next sign-in and asks you to agree again.