StillNotHired
Privacy Policy
Your job search contains personal information. This notice explains what StillNotHired processes, why it is needed, and the choices available to you.
Last revised:
1. Legal operator and scope
LOM Group is the legal operator of StillNotHired and is responsible for the personal-data processing described in this policy.
This policy covers stillnothired.com and the StillNotHired application. StillNotHired is the product name. Account creation, resume processing, and connecting a mailbox are separate actions; uploading a resume requires an authenticated account and your explicit processing consent.
You can review and edit your profile, disconnect email, export account data, withdraw future resume-processing consent, delete a resume, or delete your account using the controls in the application.
2. Information we process
Account information: your email address, language, verification status, account role, consent records, and sign-in information. Passwords are stored as salted hashes, not readable passwords. You sign in with your email and password. Accounts that were created with Google sign-in before September 23, 2026 keep the account identifier and email Google provided then; they now sign in with a password created through password recovery. Connecting Gmail to send messages is separate and is described below.
Resume and profile information: the file you upload, its filename and processing metadata, and the professional information extracted from it or entered by you, such as experience, skills, education, preferred roles, location preferences, and work authorization you explicitly provide.
Search and outreach information: matching preferences, saved recruiters, contact status, notes, follow-up dates, message drafts or sent content, and delivery metadata. If you connect email, we also process your mailbox address, granted permissions, protected authorization tokens, and provider message identifiers.
Optional hire reports: when you mark a saved recruiter as Hired, we record that status and its date in your contact history. We use those records and confirmed role preferences for internal aggregate statistics. Each person counts once in the hired-user metric. Reports are not published as testimonials. You can correct the contact status or remove the contact; records are included in account export and deleted with your account.
Result feedback and interactions: when you mark a result Not interested, we store that result's identifier, the reason you chose, and the time, and we hide it from your results until you undo it. We also record which results were shown to you and when you open one, select an application link, or start a message, together with the result's source and match band. These records contain no job titles, names, emails, CV text, or search text. We use them to measure and improve result relevance in aggregate statistics only. They are kept for up to 180 days, included in account export, and deleted with your account.
Optional feedback: when you submit the Feedback form, we send your chosen category, message, language, and account email to the StillNotHired team through our email delivery provider, so we can review your comments and reply. We do not attach your resume or profile. The application does not store the message body; copies remain with the delivery provider and receiving mailbox and are not automatically removed by account deletion.
Optional weekly email: it is off unless you turn it on in Settings or from your results. We then store that choice, your interface language, and the search filters selected at that moment (country, role, work mode, work authorization, contract type, and minimum match; never search text or company names). Once a week, only when there are new positions, we compare them inside StillNotHired with your confirmed CV profile and send up to five of them (job title, company, location, and match percentage) with totals to your account email through our email delivery provider. The email contains no CV text, and preparing it does not use AI or new job-board searches. Every email has a one-click unsubscribe link, and you can turn it off in Settings at any time. The choice and the date of the last email are included in account export and deleted with your account; sent emails remain with the delivery provider and in your mailbox.
Optional resume review (Improve my resume): when you use it, we store in your account the content of your current resume organized by section, the suggested improvements, your decisions and edits, the document template you choose, any translation you request, the remade resume and your edits to it, the names of your resume's skills that the positions you match ask for, with how many positions ask for each, and how many reviews, translations and remakes you started each day. When you use the resume assistant (a conversation), we also store its messages (at most the last 60), the versions of the proposal it prepared, and how many messages reached the AI each day. Your resume is replaced only when you accept a version in the assistant: the accepted version becomes your resume file (the one attached when you write to recruiters) and your previous resume is kept so you can restore it. Your confirmed profile is not changed.
Technical information: IP addresses, request paths, timestamps, browser or connection information supplied to hosting services, errors, security events, and usage counts needed to operate and protect the service. Application logs are designed to redact credentials and personal message or resume content.
Recruiter information: professional names, companies, roles, source links, recruiting signals, and available professional contact details obtained from configured professional-data and public-web sources. Source availability and accuracy vary.
3. How we use information
We use account information to authenticate you, send account verification or security messages, and operate your account. We use the resume and profile you approve to extract professional facts and suggest relevant jobs and recruiters.
We use saved contacts and outreach information to organize your search, prepare messages you can edit, send individual emails you explicitly authorize, and show delivery or contact status. We use limited technical and audit information to prevent abuse, investigate failures, and maintain security.
Consent is requested before resume processing and mailbox authorization. Where applicable law requires a legal basis for other processing, we rely on providing the service you request, reasonable security and operational interests, or legal obligations, as appropriate. Withdrawing consent does not undo processing already completed lawfully.
Match scores and AI suggestions assist your own search. They do not make hiring decisions about you or determine your eligibility for a job.
4. AI processing and human review
Optional Interview Prep: when you start a practice session, the configured AI provider receives the selected confirmed professional CV facts (work history, education, skills and certifications, without separate name or contact fields), the vacancy, and your submitted text or code and conversation history. Free text can still contain personal information you include. We store encrypted session snapshots, answers and feedback under your account, include them in account export, and remove them when you delete the session, its CV or your account. Sessions become unavailable 30 days after creation; expired records are purged in bounded batches on subsequent session listing or creation, so physical deletion can happen later. Per-account daily counts and the shared AI budget limit requests. Feedback is practice guidance, not a hiring prediction, and submitted code is never executed. Optional voice interviews start only when you choose a voice call and allow the microphone. During the call your browser streams microphone audio directly to OpenAI over an encrypted WebRTC connection, and OpenAI's AI interviewer talks with you using the same professional CV facts and vacancy. Our server sets the call's instructions and limits, receives OpenAI's transcript of both sides, and ends the call after at most 15 minutes, when its spending limit is reached or after inactivity. StillNotHired does not store audio. The transcript and the feedback generated from it are stored encrypted with the session. OpenAI processes audio and transcripts under its API data policies. You can end the call at any time.
AI service providers, including OpenAI when configured, process resume-derived content to extract and organize a candidate profile. The application may cache extraction results within your account to avoid processing the same file repeatedly.
When you request an AI rewrite, relevant profile facts, the recruiter and role, and your current message draft are sent to the configured AI provider. Review personal or confidential information in a draft before using this feature. AI output may be incomplete or wrong, and you can edit it before use.
When you open Improve my resume, your current resume file is sent once to the configured AI provider, together with the names of skills that the positions you match ask for, to organize its content and suggest improvements in its own language; those names only tell it which of your own skills to emphasize, and StillNotHired keeps, scores and shows only the skills your resume already shows, never suggesting one to add. Suggestions must not add experience, employers, titles, degrees, dates, skills, or figures that are not in your resume; where a stronger bullet would need a figure your resume does not give, the suggestion is written without it, and StillNotHired rejects suggestions that add new numbers or leave blanks to fill in. Scores and checks are calculated by StillNotHired from that content, not by the AI, and no review can guarantee that an applicant tracking system will accept your resume. If you choose another language, the text of your improved resume, without your name, employers, institutions, or contact details, is sent to the AI provider for translation. If you use Remake, the organized content of your resume (its headline, summary, job titles, dates, bullets, education, skills and languages, without your name, contact details, employers, institutions, or certification names) and the names of your resume's skills that those positions ask for are sent once to the AI provider to rewrite the whole resume in the language you choose; each rewritten line is checked by StillNotHired and keeps your own text if it would add something that is not in your resume. A remake runs only after you confirm it in the assistant. When you write a message to the resume assistant and it is not a simple request the assistant understands on its own (such as removing, shortening or renaming a role you name), your message and the last few turns of the conversation (with your name and contact details removed), the organized content of the resume on screen with its job titles, employers, locations, dates, schools and certification names but without your name or contact details, the items of your resume your message names, its scores and checks, and the names of your resume's skills that those positions ask for are sent once to the AI provider to answer or to make the changes you asked for; StillNotHired checks every rewritten line the same way, keeps the previous text of any line that would add something, removes or replaces nothing without your confirmation, and shows answers only when every figure in them comes from your resume or its scores. Each account has a small daily limit of reviews, translations, remakes and assistant messages.
Your resume and draft content are not published as part of the public landing-page demo. The demo uses illustrative people, roles, and scores. Provider processing and security retention are also subject to the provider's applicable service terms; this policy does not promise zero retention by every provider.
5. Connected email and external services
Connecting Gmail or Microsoft email is optional and subject to provider availability. The requested mailbox permissions support identifying your account and sending mail on your behalf. StillNotHired does not request inbox-reading access, import your mailbox history, or track email opens and clicks.
Each send requires your review and explicit action. The selected recipient, subject, message, and any resume attachment included in that send pass through your email provider to the recipient. A copy may remain in your provider's sent-mail folder and in the recipient's systems.
Google user data is used only for the visible email features you authorize. Our use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google API data is not sold, used for advertising, or used to train general-purpose AI models. Human access is limited to user-authorized support, security investigation, or legal requirements permitted by those policies.
Disconnecting email deletes the locally stored connection credentials and attempts to revoke provider authorization. You can also revoke access directly in your Google or Microsoft account. Disconnecting does not recall messages already sent.
LinkedIn outreach is manual: you can copy a message and open a professional profile yourself. StillNotHired does not request LinkedIn passwords, cookies, or private messages and does not send LinkedIn messages automatically.
Google API Services User Data Policy7. Retention and deletion
Account, profile, saved-contact, and outreach records are retained while needed to provide your account and requested features, unless you delete them. Retention also depends on security needs, applicable legal duties, and the type of record. We do not describe configured retention targets as guaranteed automatic deletion deadlines.
Deleting a resume removes its private file, metadata, derived profile, and associated extraction-cache entries from active application storage. Deleting your account removes candidate-owned data and stored mailbox credentials, revokes sessions, and anonymizes the login identity.
A resume review is kept with your account until you replace or delete the resume it reviewed, or delete your account, and it is included in account export. Daily review counts are removed after their day or with your account. Downloaded files are yours and are not kept by StillNotHired. The assistant's conversation is kept until you start a new conversation (the messages and an unaccepted proposal go; your files stay), process a different resume, delete the resume it is about, or delete your account, and it is included in account export. A resume version you accepted is an ordinary resume file of your account, listed and deletable in Settings; the previous one stays restorable until a newer acceptance replaces it (a replaced version made by the assistant is deleted; a file you uploaded is kept).
Limited security or audit records and information required for legal obligations may remain. Backup copies are separate from active application storage and may persist until replaced or expired under infrastructure retention settings. Deletion in the application does not immediately erase every backup or a copy already held by an email provider or recipient.
Withdrawing consent stops future resume processing; it is separate from deleting data already stored. Use the deletion controls when you also want that data removed.
8. Access, correction, and privacy rights
Use Settings to export account information, consent history, profile information, contact records, result feedback and interactions, resume metadata, and outreach metadata. The current export excludes raw resume files, full message bodies, passwords, and authorization tokens. Edit profile facts in Your profile; use the resume and account deletion controls to remove your data.
Depending on the law applicable to you, you may also have rights to access, correct, delete, receive or transfer data, restrict or object to certain processing, withdraw consent, and complain to the relevant data-protection authority. These rights can be subject to identity verification and lawful exceptions. Exercising an applicable privacy right does not remove your statutory protections.
Professional recruiters can request correction, suppression, or deletion of professional information through the product's recruiter-data request process. Identity may need to be verified before a request is completed.
Self-service account privacy controls are available in Settings after signing in. A dedicated public privacy contact has not yet been published and will be added to this notice when established.
Open Settings10. Changes to this notice
The revision date identifies the current text. Material changes to the purposes of processing or required permissions will be disclosed before the new use, with renewed consent where required. Review this notice when you upload a new resume or connect an external account.