Career PulseBack to websiteSign in

Privacy Policy

Last Updated: October 3, 2026 • Effective Date: October 3, 2026
Also read: Terms of Service

At Career Pulse ("we", "our", or "us"), accessible via careerpulse.site, we are committed to protecting your privacy and ensuring the utmost confidentiality and security of your personal and professional data. This Privacy Policy details how we collect, handle, protect, and process your information when you utilize our career intelligence, resume tailoring, and email dispatch platform.

1. Information We Collect

We collect information only as necessary to provide personalized job application and resume tailoring services:

  • Account Credentials: User email address and salted/hashed authentication passwords (PBKDF2/SHA-256).
  • Professional Knowledge Base: Resume content, contact details, work history, technical skills, project portfolio, educational background, and certifications.
  • Job Applications & Telemetry: Targeted job descriptions, custom employer communications, ATS match metrics (worked out on our own servers; see section 6 of the Terms of Service), email dispatch timestamps, and message/thread identifiers.
  • Sender Credentials & Tokens: Google OAuth 2.0 access and refresh tokens for the Google account you connect (encrypted with AES-256-GCM). We do not store email app passwords.

2. Google API Services & OAuth 2.0 User Data

Career Pulse allows users to optionally connect their personal or professional Gmail account via Google OAuth 2.0 for direct, authenticated job application dispatch and response tracking.

When you connect your Google Account, we request access to the following minimal scopes:

  • https://www.googleapis.com/auth/gmail.send: Enables the platform to transmit your customized job applications and follow-up emails directly from your verified Gmail address upon your explicit manual review and approval.
  • https://www.googleapis.com/auth/gmail.readonly: Enables inspection of specific email thread conversations initiated by Career Pulse to detect replies from employers or automated delivery failure bounces.
  • openid, email, profile: Authenticates and associates your connected Google email address with your Career Pulse profile.

Google API Limited Use Disclosure:
Career Pulse's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use and Do NOT Use Google User Data

In strict accordance with Google Limited Use policies and user privacy commitments:

  • No Commercial Advertising: We do NOT use or transfer your Google user data for serving advertisements, retargeting, or personalized marketing.
  • No Data Selling or Brokering: We do NOT sell, rent, lease, or monetize your Google user data or personal information to data brokers, recruiters, or any third parties.
  • No Generalized AI Model Training: We do NOT use your private emails or Google user data to train generalized AI/ML foundation models.
  • No Unauthorized Human Access: No human employees or contractors read your emails unless you explicitly provide written consent for technical troubleshooting, or when required for system security or legal compliance.

4. Data Storage & Multi-Layer Encryption

We implement rigorous defense-in-depth security measures to protect stored information:

  • AES-256-GCM Encryption: All OAuth 2.0 refresh tokens, access tokens, and SMTP credentials are encrypted with authenticated AES-256-GCM prior to being stored in the database.
  • Multi-Tenant Isolation: Database records are partitioned per user account with strict PostgreSQL Row Level Security (RLS) policies.
  • Encryption in Transit: All communications between your browser, our servers, Google APIs, and Supabase cloud infrastructure are encrypted via TLS 1.3/HTTPS.

5. User Control, Disconnection & Data Deletion

You retain full control over your connected accounts and personal data at all times:

  • One-Click Google Disconnect: You can disconnect your Gmail integration at any moment from the Credentials settings. Disconnecting immediately deletes all stored OAuth tokens and ceases API interactions.
  • Revoking Permissions via Google: You can also revoke Career Pulse's permissions at any time via your Google Account Security Dashboard.
  • Account & Data Deletion: You may request complete erasure of your profile, knowledge base, and application history by contacting our administration.

6. Contact Us

If you have any questions, inquiries, or privacy concerns regarding this Privacy Policy or our data handling practices, please contact us at:

careerpulsesupport@gmail.com