Privacy Policy

Account details from Google Sign-In: your name, email address and profile photo.

Profile information you provide or that we read from your resume: contact details, education (including 10th/12th/graduation scores), work experience, projects, skills, certifications, achievements, links (LinkedIn, GitHub, portfolio) and application details such as current/expected CTC, notice period, backlogs, work authorization and preferred locations. Diversity details (gender, category, disability, veteran status) are optional and only used when an application form asks for them.

Your resume file (PDF or Word) that you upload.

Answers you save to your answer bank, answers drafted by AI that you choose to keep, and answers the browser extension learns when you type into a form field it could not fill (see section 3).

Form questions the extension could not answer: when the extension fills an application form, we record the text of the questions it left empty or that you changed, which kind of site the form was on (for example Greenhouse or Lever), and what happened to each question. We never record your answers. We use this only to teach the extension to answer more questions, and we delete it when you delete your account.

Feedback you send: when you press “Send feedback” in the extension we receive your message, the address and title of the page you were on (without anything after a “#” and without values that look like passwords or tokens), a screenshot of that page if you leave the option ticked, and which form fields the extension filled (the field names and whether they were filled, never what you typed). You see the page address and screenshot before you send. We use it only to fix problems, and we delete it when you delete your account.

Applications you track: company, role, job link, status, notes, dates, and a copy of the job description text when available.

Gmail data (only if you connected Gmail): Gmail tracking is not open to new users yet; it is only active for early testers who chose to connect it. For them, for emails that look job-related, we read the sender, subject line, date and Google's short preview snippet to recognise application confirmations, tests, interviews, rejections and offers. We never read or store the full body of your emails. We store only the sender's domain, the subject (up to 200 characters), the date and the detected category.

Basic technical data: server logs (such as request times and errors) needed to keep the service running and secure.

• To fill job application forms for you with your profile, answers and resume.
• To create your profile from your resume and to draft answers to application questions using AI.
• To show and update your application tracker, including from job-related emails if you connect Gmail.
• To keep your account secure, fix problems and improve how well forms are filled.

We do not sell your data, use it for advertising, or share it with employers. Applications are only submitted when you click submit yourself.

• The extension reads the fields of a web page only when you click “Fill this page” (or press the shortcut), so it can fill them. It never submits forms for you.
• On job description pages it reads the page text to recognise the company, role and job description, which is used to save the application to your tracker and to tailor AI answers.
• After a fill, if you type an answer into a field it could not fill, it saves that question and answer to your answer bank so it can fill it next time. It never learns passwords, one-time codes, captchas, card or bank details, Aadhaar, PAN or passport numbers. You can view and delete learned answers on the Answers page.
• It takes a screenshot of the current page only when you open “Send feedback”, and sends it only if you press Send with the screenshot option ticked.
• On pages that look like a job description, it notes the company, role and description text in your browser (because the application form is usually on a later page). This stays on your device and is sent to us only when you fill or save that application.
• It does not record your browsing history and sends nothing about pages that are not job pages.

WorkU's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For sign-in we receive only your name, email address and profile photo from Google. Gmail tracking is not open to new users yet. For early testers who connected Gmail:

• We request read-only Gmail access, and only if you choose to connect Gmail. We never send, delete or change your emails.
• Gmail data is used only to update your own application tracker. It is not used for advertising, not sold, and not used to train AI models.
• Humans do not read your Gmail data, except with your explicit permission (for example, to investigate a problem you report), for security purposes, or where required by law.
• You can disconnect Gmail at any time on your dashboard. We then revoke our access with Google and delete the email data we stored. You can also remove access in your Google Account settings.

To read resumes, draft answers and classify job emails, we send the relevant text (for example your resume, the question, the job description, your profile, or an email's subject and preview) to an AI service provider, currently Google's Gemini API. The provider processes it to return a result to us. AI-drafted answers are suggestions: please review them before submitting any application.

We share data only with service providers that help us run WorkU, under their terms and only as needed:

• Hosting and database providers (currently Railway, Vercel and Neon).
• Google, for Sign-In, Gmail (if connected) and AI processing (Gemini API).

We may also disclose data if required by law or to protect the rights and safety of users and the service. These providers may store data on servers outside India.

• All connections use HTTPS encryption.
• Gmail access tokens are encrypted before they are stored.
• Each user can only access their own data; sign-in sessions are protected cookies or tokens.

No method of storage or transmission is 100% secure, but we work to protect your data and will notify you as required by law if a breach affects you.

• We keep your data while your account is active.
• Delete your account from the Dashboard at any time. This deletes your profile, resumes, answers, applications and Gmail data, and revokes Gmail access.
• You can delete individual answers and applications, upload a new resume, or disconnect Gmail at any time.
• Server logs and backups are kept for a limited period and then deleted.

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask to access, correct, update or erase your personal data, withdraw consent (for example by disconnecting Gmail or deleting your account), and raise a grievance. Most of this you can do yourself in the app; for anything else, email worku.in.official@gmail.com.

Grievance contact: worku.in.official@gmail.com. We aim to respond within 7 days.

WorkU is for people aged 18 or over. We do not knowingly collect data from children.

We may update this policy as WorkU changes. We will change the date at the top and, for significant changes, notify you in the app or by email. See also our Terms of Service.

WorkU · worku.in.official@gmail.com