Privacy Policy

1. What we collect

When you sign in with Google, we collect:

• Your name and email address
• A Google OAuth token to send emails on your behalf via Gmail
• Your CV content (only if you upload one)
• Your profile information (skills, bio, rate, work preferences)

We also store the job opportunities we find for you and any outreach drafts generated.

2. How we use your data

• To scan Reddit, LinkedIn, Twitter/X, and job boards for opportunities matching your profile
• To generate personalized outreach emails in your voice using AI
• To send emails from your Gmail account when you enable auto-send
• To improve match quality over time based on your feedback

3. Gmail access

Aura requests the gmail.send permission to send job application emails directly from your Gmail account. We use this permission exclusively to send outreach emails that you have either reviewed manually or explicitly enabled for auto-send in your settings.

We want to be explicit about what we do NOT do:

• We never read your inbox or access any existing emails
• We never access your Gmail contacts or calendar
• We never store the content of sent emails beyond what you see in your Aura dashboard
• We never share or sell your Gmail data to any third party
• We never use your Gmail access for any purpose other than sending job applications on your behalf

You can revoke Gmail access at any time by visiting your Google Account settings at myaccount.google.com → Security → Third-party apps with account access.

4. Data storage

Your data is stored securely in Supabase. We do not sell your data to third parties. Your CV content and profile information is used solely to power your job search agent.

5. Data retention

We retain your data for as long as your account is active. If you request account deletion, we will permanently delete all your personal data, including your profile, CV, job opportunities, and outreach drafts, within 30 days.

6. Third-party services

Aura uses the following third-party services:

• Google OAuth & Gmail API — authentication and email sending
• Anthropic Claude API — AI-powered matching and email generation
• Supabase — database and storage
• Vercel — hosting
• RapidAPI / JSearch — job listing data

7. Your rights

You can request deletion of your account and all associated data at any time by emailing us at linda@failfasterventures.com. We will delete your data within 30 days. You also have the right to request a copy of your data at any time.

8. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice in the app. Continued use of Aura after changes constitutes acceptance of the updated policy.

9. Contact

Questions? Email us at linda@failfasterventures.com