Privacy Policy
Your privacy matters. Here's how we handle your data with transparency and care.
tocTable of Contents
shield1. Introduction
AGATHA Technologies ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AGATHA Career Intelligence Platform (the "Service"), including our website, AI-powered career tools, and related services.
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
database2. Information We Collect
We collect several types of information to provide and improve our Service:
personAccount Data
- Email address
- Full name
- Password (stored as a secure, salted hash — we never store plaintext passwords)
- Profile information you choose to provide
descriptionResume / CV Data
- Uploaded documents (PDF, DOCX formats)
- Parsed structured data extracted by our AI (skills, experience, education, certifications)
- Work history, job titles, and professional summaries
- AI-generated resume variants and cover letters
analyticsUsage Data
- Pages viewed and features used within the platform
- Job application history and status tracking
- Search queries and filter preferences
- Interaction patterns with the Agatha AI chat assistant
devicesDevice & Browser Information
- Browser type and version
- Operating system
- IP address (for security and rate limiting)
- General geographic location (country/region level)
mailEmail Connection Data
- Connected email credentials and authorization tokens — used to send applications and notifications on your behalf
- Authorization credentials are encrypted securely at rest using industry-standard cryptographic protocols
- We only request the minimal email scopes necessary (send-only access)
- We do not read, store, or index the contents of your inbox
auto_awesome3. How We Use Your Information
We use the information we collect for the following purposes:
Your uploaded CV is processed by secure AI models and algorithms to extract structured career data.
We match your skills and experience against job listings and assign priority scores to help you focus on the best opportunities.
Our Auto-Apply feature submits applications on your behalf using your profile data and AI-generated materials.
We generate tailored cover letters and ATS-optimized resumes customized for specific job postings.
Your career data informs the Agatha AI assistant to provide personalized career guidance and job search advice.
We send transactional emails, weekly job reports, and application status updates.
hub4. Third-Party Services
We integrate with the following third-party services to power the AGATHA platform. Each service operates under its own privacy policy:
| Service Category | Purpose |
|---|---|
| Authentication Providers | User identity verification, secure login, and email authorization (e.g., OAuth providers) |
| Artificial Intelligence Partners | Secure CV parsing, priority scoring analysis, search embeddings, and natural language chat processing |
| Email Delivery Services | Sending transactional notifications, weekly match reports, and system announcements |
| Cloud Database & Hosting | Secure cloud infrastructure, database hosting, backups, and API gateway routing |
We encourage you to review the privacy policies of these third-party services. We do not control and are not responsible for their privacy practices.
lock5. Data Storage & Security
We take the security of your data seriously and implement industry-standard measures to protect it:
Database Hosting
All data is stored in secure cloud database hosting services with industry-standard security and enterprise-grade infrastructure.
Credential Encryption
Connected credentials and authorization tokens are encrypted securely at rest using industry-standard cryptographic protocols.
Session Authentication
User sessions are managed via secure authorization tokens signed with a server secret.
Encryption in Transit
All data transmitted between your browser and our servers is encrypted using secure HTTPS transmission protocols (TLS 1.2+).
File Processing
Uploaded resume files are processed by our AI pipeline and deleted from temporary storage. Files are not permanently retained on disk.
schedule7. Data Retention
We retain your data only for as long as necessary to provide the Service:
| Data Type | Retention Period |
|---|---|
| Account information | Retained while your account is active |
| Parsed resume / CV data | Retained until you delete your account |
| Chat history (Agatha AI) | Retained until you delete your account |
| Application history | Retained until you delete your account |
| Uploaded files (PDF/DOCX) | Deleted immediately after AI parsing is complete |
When you delete your account, all associated data is permanently removed from our systems within 30 days, including backups.
gavel8. Your Rights
You have the following rights regarding your personal data. You can exercise most of these directly from your Account Settings page:
Access Your Data
View your profile, parsed CV data, job applications, and chat history at any time through the dashboard.
Correct Your Information
Update or correct any personal information, skills, or experience data from your profile settings.
Delete Your Account
Permanently delete your account and all associated data, including resume data, applications, and chat history.
Export Your Data
Request a full export of your personal data in a machine-readable format.
Revoke Third-Party Access
Disconnect Google or GitHub OAuth integrations from your account settings at any time.
child_care9. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16 without verification of parental consent, we will take steps to delete that information from our servers. If you believe we may have inadvertently collected information from a child under 16, please contact us immediately at support@agathalabs.app.
public10. International Data Transfers
Your information may be transferred to — and maintained on — servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
If you are located outside the jurisdiction where our servers are hosted and choose to provide information to us, please note that we transfer the data to our server locations and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
update11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email or through an in-app notification
- Where required by law, obtain your consent before applying material changes
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
contact_support12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Support & Data Rights
support@agathalabs.appGeneral & Company Inquiries
info@agathalabs.appCompany
AGATHA Technologies
We aim to respond to all privacy-related inquiries within 30 business days.
policy13. Google Workspace API Data (Limited Use)
AGATHA Technologies' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Strictly Prohibited AI/ML Model Training
We strictly prohibit the use of raw or aggregated/anonymized user data obtained from Google Workspace APIs (such as Gmail) to develop, improve, or train generalized Artificial Intelligence (AI) and Machine Learning (ML) models. We do not transfer this data to any third-party AI services that use it to train their own models.
Scope Justification (Least Privilege)
When you connect your Gmail account, we only request the narrowest, most granular permissions required to operate (https://www.googleapis.com/auth/gmail.send and userinfo.email). This allows AGATHA to send automated applications and recruiter follow-ups on your behalf. We do not request read access to your inbox, and we cannot see your past emails.