Privacy Policy

What we collect

Account details: your name and email address.

If you sign in with Google: with your permission, Google shares your name, email address, profile picture, and Google account ID. We don't get your Google password, and we don't access your Gmail, contacts, calendar, or files.

Your profile: resumes, work history, education, skills, work authorization, security clearance details if you provide them, and job preferences.

How you use the service: saved jobs, match ratings, feedback, job reports, survey answers, and the emails we send you.

While you're signed in: which days you use the app, how long it's in use and on which pages (for example the jobs list or your applications), job searches and filters you run, jobs you open or click through to apply for, and which link or email brought you back. We never record what you type into forms.

Where you came from: the link or campaign that brought you to the site when you signed up.

With AutoApply: answers you give to application questions, records of the applications we submit for you, and your replies. If you opt in to texts, your mobile number and consent records.

Cookies and visit counting

We don't use advertising or tracking cookies. Your browser stores only what is needed to keep you signed in. We count visits with the page address and the referring site, using a daily anonymous visitor hash; we don't store your IP address for this. When you're signed in, the app also counts your active time per page (only while the tab is open in front of you and you're using it) on our own servers; no third-party analytics service sees it.

How we use it

To match you with jobs and score them, send the alerts and messages you've agreed to, tailor resumes, improve match quality from your feedback, and, with AutoApply, fill in and submit applications you've authorized and understand your replies.

To understand which parts of the service people use and come back for, so we can improve them. Your usage is only seen by our team, never sold or shared for advertising.

Google sign-in

We use the information Google shares only to create your account, sign you in, and contact you about your account. We don't use it for advertising, sell it, or share it with anyone except the service providers listed below that run sign-in and email for us. We don't use it to train AI models.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect us from your Google account at any time in your Google Account settings (Security → Your connections to third-party apps & services). That stops future Google sign-ins but doesn't delete your account here; to delete your account and its data, use Account settings or email us.

Who we share it with

Employers and their application systems receive the information needed for each application you authorize through AutoApply. Otherwise, we don't send your profile to employers.

Service providers that run parts of the service for us: OVH (servers, including sign-in, which we run ourselves), Cloudflare (website hosting, resume file storage and encrypted backups), Resend (email), Anthropic (AI processing for matching and resume tailoring), and, once texts launch, Twilio (text messaging).

We do not sell your personal information or share it for advertising. Mobile numbers and text-messaging consent are never shared with third parties for their marketing.

Your choices and rights

Change or turn off notifications in settings, unsubscribe from alert emails with one click, and reply STOP to any text.

You can ask to see, correct, export, or delete your data by emailing support@lumirole.com. Depending on where you live (for example the EU, UK, or California), you may have additional rights under local law; we'll honor those requests.

Security and retention

Data is encrypted in transit, and backups and answers to application questions are encrypted at rest. We keep your data while your account is active. Single usage events (visits, searches, job opens) are deleted after 90 days; daily usage totals stay with your account. After you delete your account we remove it, except consent records we must keep for legal reasons; copies in backups are removed as those backups expire.

Children

The service is not for anyone under 18, and we don't knowingly collect their data.

Changes and contact

We'll post updates here with a new version date and email you about material changes. Privacy questions: support@lumirole.com.