Privacy Policy

1. Introduction

Vedteq ("we," "us," or "our") operates JSAS (Job Search Automation System). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.

2. Information We Collect

2.1 Information You Provide

Account information (name, email address, password)
Candidate profiles (name, contact details, work history)
Resumes and professional documents
Job descriptions and application details
Contact information for outreach recipients
Email content (subject lines, email bodies) created through the service

2.2 Information from Third-Party Services

When you authorize a Gmail connection via OAuth, we receive:

Your email address (to identify the connected account)
OAuth tokens (access token and refresh token) for sending emails

We do not read, index, or store the contents of your inbox, sent folder, or any emails not created through JSAS.

2.3 Automatically Collected Information

Usage logs (pages visited, features used)
Browser type and device information
IP address

3. How We Use Your Information

We use your information to:

Provide and operate the JSAS service
Generate tailored resumes using AI
Generate personalized outreach emails using AI
Send emails on your behalf via your authorized email account
Store sent resume PDFs as historical snapshots
Improve the service and fix issues
Communicate with you about the service

4. Google API Services Usage

JSAS uses Google API Services for email sending. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We only use Gmail API access to send emails that you or your coach have explicitly composed and approved within the JSAS platform
We do not use Gmail data for advertising, market research, or email tracking
We do not allow humans to read your email data unless you have given affirmative consent, it is needed for security purposes, or it is required by law
OAuth tokens are encrypted at rest using AES-256-GCM encryption
You can revoke JSAS access at any time through your Google Account permissions

5. Data Storage and Security

We protect your data through:

Encryption at rest: OAuth tokens are encrypted using AES-256-GCM before database storage
Encryption in transit: All data is transmitted over TLS/HTTPS
Access controls: Role-based access control limits data access to authorized users
Secure infrastructure: Data is hosted on secured cloud infrastructure with regular backups

Resume files and email attachments are stored in encrypted S3-compatible object storage.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

With your consent: When you authorize email sending, your email content is transmitted to the recipient via Gmail API
Service providers: We use third-party services (cloud hosting, AI providers) that process data on our behalf under strict contractual obligations
Legal requirements: If required by law, regulation, or legal process

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Email history and sent resume snapshots are retained for your reference. You may request deletion of your data at any time by contacting us.

8. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Revoke OAuth authorizations at any time
Export your data in a portable format
Withdraw consent for data processing

9. Cookies

JSAS uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the service or email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at roshan.soni@vedteq.com