Sign-in only
Google login does not grant Gmail.
Loading
Preparing your workspace.
Privacy-first workflow
Trust
Trust is a product surface here: sign-in, Gmail access, review gates, model traces, memory, and deletion controls are separate and visible.
Google login does not grant Gmail.
Gmail sync queries job-search evidence only.
Risky writes stop for approval.
Disconnect, delete, and purge are separate.
Gmail access
Gmail access and Google sign-in are entirely separate. You can sign in without granting Gmail access, and revoke Gmail without losing the workspace. Gmail sync uses readonly access after you initiate connection; the product queries and processes recruiting/job-search mail rather than intentionally processing personal or financial mail.
Workspace identity only
No Gmail permission
Readonly Gmail access after explicit connection
User initiated
Recruiting and job-search mail queried for evidence
Filtered use
Not intentionally processed as product evidence
Avoided by design
Provider, model, purpose, confidence
No raw body in admin views
Application evidence and reminders
Delete or purge anytime
Automation safety
Agents can extract and suggest. Risky state changes need a clear evidence card and a human decision.
Application update can write with audit row
Manual review, no mutation
Automation blocked
Deterministic parse or review fallback
Data controls
Data actions live in settings. They do not require a support request and they are intentionally separated by blast radius.
Stop sync without deleting workspace profile.
Remove synced recruiting evidence and derived records.
Destructive account-level cleanup path.
Review confirmed context before agents reuse it.
Legal and user controls
One place for privacy, terms, deletion, security, and contact paths.
Google user data, Gmail scope, retention, sharing, and Limited Use.
Service terms, acceptable use, and user responsibility.
Disconnect Gmail, delete imports, or purge inbox-sourced records.
Support, privacy, deletion, and security contact paths.