Who this policy covers
This policy covers visitors to careeroc.com and users of the Other Candidate recruiting workspace. If you use Google or Gmail with the product, Google remains a separate third-party platform with its own terms and privacy practices.
Website and contact data
When you visit the public site or contact us, we may process basic technical data, form submissions, support requests, email address, name, and message content needed to operate the site, respond to requests, prevent abuse, and improve the product.
Google user data we access
Other Candidate may collect your Google account name and email address for sign-in. If you separately connect a Gmail inbox, the app requests Gmail read-only access and may process Gmail profile information, message and thread identifiers, sender and recipient metadata, subject lines, timestamps, snippets, and message content needed to detect recruiting email, applications, interviews, assessments, offers, rejections, reminders, and follow-ups.
Service data we create
The product may create application records, evidence cards, review items, reminders, recruiter/contact records, resume context, model trace metadata, and audit records from your workspace activity and connected recruiting mail.
How we use service data
Data is used to provide user-facing features: syncing recruiting mail, grouping messages by application, extracting deadlines and schedule facts, showing source evidence, creating review items, detecting abuse, maintaining security, and improving reliability.
Scope limits
The Gmail inbox connection uses the read-only Gmail scope. Other Candidate does not request permission to send, modify, archive, label, or delete Gmail messages through the Gmail API.
AI processing and training limits
Google user data and derived data are not used to train generalized AI models. Optional model processing is used to provide visible product features such as classification, extraction, review evidence, and resume feedback. Prompts and raw responses are not shown in normal admin views.
Sharing and subprocessors
Other Candidate does not sell Google user data, use it for advertising, transfer it to data brokers, or disclose it for unrelated third-party use. Data may be processed by hosting, database, authentication, email, challenge, observability, and model providers that help operate the product, subject to their service terms.
Security
Other Candidate protects Google user data with HTTPS in transit, user-scoped authorization, configured access controls, review gates for uncertain automation, redacted administrative surfaces where practical, and stored OAuth tokens that can be disconnected by the user.
Retention and deletion
Imported Gmail-derived data is retained only as needed to provide the application workspace and related user-facing features. You can disconnect Gmail, delete imported inbox data, or purge inbox-sourced records from the product controls. You can also contact support for help with deletion.
Human access and support
Humans do not read raw Gmail content unless you ask for help with a specific issue, access is needed for security or abuse investigation, or disclosure is required by law. Support and security requests may be retained as operational records.
Your choices
You can choose not to connect Gmail, disconnect Gmail later, delete imported data, request account-level deletion help, or stop using the service. Some logs, backups, and security records may remain until their normal retention cycle expires.