Privacy Policy

This policy describes what Yedgi collects, how it is used, and the controls you have. The short version: your career data exists to run your job search, we do not sell it, we do not use it for advertising, and you can export or permanently delete it yourself at any time.

• Account data — name, email address, and a hashed password (or the identity confirmed by a sign-in provider you choose).
• Career data you provide — resumes, work history, skills, preferences, and answers you give to clarification questions.
• Application activity — jobs discovered for you, applications prepared and submitted, statuses, and related research.
• Connected accounts (optional) — if you connect an email or calendar account, we access it only with the permissions you grant (reading messages, sending messages you approve, reading and writing calendar events). Connection credentials are stored encrypted, and you can disconnect at any time from the Connections page.
• Payment data — handled by Stripe. We never see or store your card number; we keep your plan and billing status.
• Technical data — logs and diagnostic events needed to operate and secure the service.
• Notification data — if you turn on browser notifications, we store the push subscription your browser issues (an endpoint URL and its encryption keys) solely to deliver those notifications. You can turn it off any time; doing so deletes the subscription.

Yedgi uses only cookies and similar storage that are essential for signing you in and keeping your session secure — there are no advertising cookies. We may collect pseudonymous product-usage analytics (which screens are used, where sign-up flows stall) tied to an internal account identifier, never to your email or name; analytics use no cookies (memory-only sessions), honor your browser’s Do Not Track setting, and are never used for advertising or sold.

Solely to provide the service: discovering and ranking opportunities, tailoring your resume from evidence you provided, preparing applications, classifying and drafting email related to your search, scheduling interviews, and showing you what happened.

AI processing. Parts of the service send relevant data (for example, a job description plus your resume) to large-language-model providers acting as our processors. Model providers are bound to process this data only to return results — we do not permit them to use your data to train their models. Yedgi is designed so AI output about your experience is traceable to content you provided; it never invents qualifications.

Legal bases (where GDPR or similar laws apply): performance of our contract with you (running your job search), your consent for connected accounts (withdrawable at any time by disconnecting), our legitimate interests in securing and improving the service, and compliance with legal obligations. Yedgi assists your decisions but takes no consequential action — applying, sending, scheduling — without your explicit approval, so no decision producing legal or similarly significant effects is made solely by automated means.

If you connect a Gmail or Google Calendar account, Yedgi accesses only the data needed for the features you enabled. Specifically, it may access: your email messages (headers, body, and sender/recipient details) in the folders it scans; your account’s email address and basic profile; your calendar’s free/busy intervals; and the events Yedgi itself creates.

It uses this data to detect application responses, interview requests, and recruiter conversations; to send only the individual messages you review and approve; and to propose interview times and add the interviews you confirm to your calendar.

It stores ingested messages and derived application data in our database hosted on Microsoft Azure in the United States; connection credentials are encrypted at rest (AES-256-GCM) and all transfers use TLS. Google user data is shared only with the subprocessors in section 5 as needed to provide these features — including AI model providers acting as processors to classify and draft, who may not retain or train on it.

Retention and deletion: disconnecting a Google account immediately deletes its stored credentials and stops all access; previously ingested data remains subject to your plan’s retention window and is permanently removed within 7 days of account deletion.

Prohibited uses: Google user data is never used for advertising (including personalized or retargeted ads), never sold or provided to data brokers, never used to determine credit-worthiness or for lending, and never used to train generalized or non-personalized AI or machine-learning models.

Yedgi’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, never sold, and never transferred except to provide these user-facing features, for security, or to comply with law. Humans do not read your Google data except with your explicit permission, for security purposes, or where required by law.

We share data only with the infrastructure providers required to run Yedgi (subprocessors), each bound to process it only on our instructions:

Beyond subprocessors, data leaves Yedgi only when you direct it (submitting an application to an employer, sending a message you approved) or when the law requires it. We never sell personal data.

Your data is retained while your account is active, subject to your plan’s history retention window. When you delete your account, deletion is scheduled immediately and your data is permanently removed from our systems within 7 days, after which only minimal records we are legally required to keep (such as billing records) remain.

Export and deletion are self-serve in your profile settings for everyone, everywhere: download a complete copy of your data, or permanently delete your account.

EEA, UK, and Switzerland: you additionally have the rights to access, rectify, erase, restrict, object to, and port your personal data, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. California: you have the rights to know, correct, and delete; we do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. Other regions: we honor equivalent rights through the same self-serve tools regardless of where you live. Requests we can’t satisfy self-serve: admin@yedgi.com.

All traffic is encrypted in transit (TLS). Credentials for connected accounts are encrypted at rest with AES-256-GCM. Access to production systems is restricted and audited. No system is perfectly secure; if a breach affects your personal data we will notify you as required by law.

Yedgi is a global service operated from the United States, and your data is processed and stored there (see the subprocessor table above). Where your local law requires safeguards for international transfers — such as in the EEA, UK, or Switzerland — we rely on appropriate mechanisms including the European Commission’s Standard Contractual Clauses with our subprocessors. Using Yedgi from any country means your data is transferred to and processed in the United States under those safeguards.

Yedgi is not directed at children and may not be used by anyone under 16 (or the age of digital consent where you live).

We will update this policy as the service evolves — for example, before enabling product analytics or adding a subprocessor. Material changes are announced in the product or by email before they take effect. See also the Terms of Service.