Privacy Policy

1. Legal operator and scope

LOM Group is the legal operator of StillNotHired and is responsible for the personal-data processing described in this policy.

This policy covers stillnothired.com and the StillNotHired application. StillNotHired is the product name. Account creation, resume processing, and connecting a mailbox are separate actions; uploading a resume requires an authenticated account and your explicit processing consent.

You can review and edit your profile, disconnect email, export account data, withdraw future resume-processing consent, delete a resume, or delete your account using the controls in the application.

2. Information we process

Account information: your email address, language, verification status, account role, consent records, and sign-in information. Passwords are stored as salted hashes, not readable passwords. When available and chosen, an external sign-in provider supplies an account identifier and email.

Resume and profile information: the file you upload, its filename and processing metadata, and the professional information extracted from it or entered by you, such as experience, skills, education, preferred roles, location preferences, and work authorization you explicitly provide.

Search and outreach information: matching preferences, saved recruiters, contact status, notes, follow-up dates, message drafts or sent content, and delivery metadata. If you connect email, we also process your mailbox address, granted permissions, protected authorization tokens, and provider message identifiers.

Technical information: IP addresses, request paths, timestamps, browser or connection information supplied to hosting services, errors, security events, and usage counts needed to operate and protect the service. Application logs are designed to redact credentials and personal message or resume content.

Recruiter information: professional names, companies, roles, source links, recruiting signals, and available professional contact details obtained from configured professional-data and public-web sources. Source availability and accuracy vary.

3. How we use information

We use account information to authenticate you, send account verification or security messages, and operate your account. We use the resume and profile you approve to extract professional facts and suggest relevant jobs and recruiters.

We use saved contacts and outreach information to organize your search, prepare messages you can edit, send individual emails you explicitly authorize, and show delivery or contact status. We use limited technical and audit information to prevent abuse, investigate failures, and maintain security.

Consent is requested before resume processing and mailbox authorization. Where applicable law requires a legal basis for other processing, we rely on providing the service you request, reasonable security and operational interests, or legal obligations, as appropriate. Withdrawing consent does not undo processing already completed lawfully.

Match scores and AI suggestions assist your own search. They do not make hiring decisions about you or determine your eligibility for a job.

4. AI processing and human review

AI service providers, including OpenAI when configured, process resume-derived content to extract and organize a candidate profile. The application may cache extraction results within your account to avoid processing the same file repeatedly.

When you request an AI rewrite, relevant profile facts, the recruiter and role, and your current message draft are sent to the configured AI provider. Review personal or confidential information in a draft before using this feature. AI output may be incomplete or wrong, and you can edit it before use.

Your resume and draft content are not published as part of the public landing-page demo. The demo uses illustrative people, roles, and scores. Provider processing and security retention are also subject to the provider's applicable service terms; this policy does not promise zero retention by every provider.

5. Connected email and external services

Connecting Gmail or Microsoft email is optional and subject to provider availability. The requested mailbox permissions support identifying your account and sending mail on your behalf. StillNotHired does not request inbox-reading access, import your mailbox history, or track email opens and clicks.

Each send requires your review and explicit action. The selected recipient, subject, message, and any resume attachment included in that send pass through your email provider to the recipient. A copy may remain in your provider's sent-mail folder and in the recipient's systems.

Google user data is used only for the visible email features you authorize. Our use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google API data is not sold, used for advertising, or used to train general-purpose AI models. Human access is limited to user-authorized support, security investigation, or legal requirements permitted by those policies.

Disconnecting email deletes the locally stored connection credentials and attempts to revoke provider authorization. You can also revoke access directly in your Google or Microsoft account. Disconnecting does not recall messages already sent.

LinkedIn outreach is manual: you can copy a message and open a professional profile yourself. StillNotHired does not request LinkedIn passwords, cookies, or private messages and does not send LinkedIn messages automatically.

6. Who receives information

Information is processed by service providers needed to operate the product, including hosting and database infrastructure, file storage and malware scanning, account email delivery, and configured AI or professional-data providers. They receive information needed for their respective functions. Current infrastructure includes Railway and Cloudflare; mailbox providers are used only when you choose to connect them.

Recruiters receive the information you decide to send them. Once a message or resume reaches a recipient, that recipient controls their copy under their own practices. Public professional-source sites and external links also have their own policies.

We do not sell personal information or use it for cross-context behavioral advertising. We may disclose limited information when required by law or reasonably necessary to protect accounts, prevent abuse, or establish or defend legal claims.

Providers may process information outside your country. Applicable protections and transfer requirements depend on your location and the provider arrangement; this service does not promise storage exclusively in your home country.

7. Retention and deletion

Account, profile, saved-contact, and outreach records are retained while needed to provide your account and requested features, unless you delete them. Retention also depends on security needs, applicable legal duties, and the type of record. We do not describe configured retention targets as guaranteed automatic deletion deadlines.

Deleting a resume removes its private file, metadata, derived profile, and associated extraction-cache entries from active application storage. Deleting your account removes candidate-owned data and stored mailbox credentials, revokes sessions, and anonymizes the login identity.

Limited security or audit records and information required for legal obligations may remain. Backup copies are separate from active application storage and may persist until replaced or expired under infrastructure retention settings. Deletion in the application does not immediately erase every backup or a copy already held by an email provider or recipient.

Withdrawing consent stops future resume processing; it is separate from deleting data already stored. Use the deletion controls when you also want that data removed.

8. Access, correction, and privacy rights

Use Settings to export account information, consent history, profile information, contact records, resume metadata, and outreach metadata. The current export excludes raw resume files, full message bodies, passwords, and authorization tokens. Edit profile facts in Your profile; use the resume and account deletion controls to remove your data.

Depending on the law applicable to you, you may also have rights to access, correct, delete, receive or transfer data, restrict or object to certain processing, withdraw consent, and complain to the relevant data-protection authority. These rights can be subject to identity verification and lawful exceptions. Exercising an applicable privacy right does not remove your statutory protections.

Professional recruiters can request correction, suppression, or deletion of professional information through the product's recruiter-data request process. Identity may need to be verified before a request is completed.

Self-service account privacy controls are available in Settings after signing in. A dedicated public privacy contact has not yet been published and will be added to this notice when established.

9. Cookies, security, and sensitive information

The service uses necessary session and authorization-correlation cookies to keep you signed in and protect account connections. The current application does not install advertising cookies or third-party marketing analytics. Browser settings can block cookies, but sign-in and email connections may then fail.

We use measures such as HTTPS, account-scoped access, protected authorization tokens, private file storage, and malware scanning. No service can guarantee absolute security. Keep your password private and revoke unknown connections promptly.

Do not upload government identification numbers, banking details, passport scans, full birth dates, health records, or confidential information you are not authorized to share. The service is intended for adults aged 18 or older and is not directed to children.

10. Changes to this notice

The revision date identifies the current text. Material changes to the purposes of processing or required permissions will be disclosed before the new use, with renewed consent where required. Review this notice when you upload a new resume or connect an external account.