Privacy policy

Search HQ is a personal job-search tracker on the web and iPhone. Access is limited to the account owner's allowlisted Google account. This policy explains what the app collects, how it uses it, and how to delete it.

What we collect

• Google sign-in: your name, email address and profile picture, used only to sign you in and check your email is allowed.
• What you enter: leads, companies, contacts and recruiters, notes, tasks, appointments, activity history, goals and settings.
• Files you upload: resumes, resume templates and job descriptions, used to tailor resumes and score matches.
• Google Calendar (only if you connect it): see the next section.
• iPhone: a push notification token, if you allow notifications, so the app can remind you of appointments and tasks.

We don't use analytics, advertising or tracking cookies. The only cookie is the sign-in session cookie.

How we use Google user data

Search HQ asks for Google Calendar access only when you choose to connect it in Settings, and asks for each permission separately:

• Calendars the app creates (calendar.app.created): Search HQ creates a calendar named Job Search and adds, updates and removes events there to match your appointments. It can't see or change your other calendars with this permission.
• Read-only access to your events (calendar.events.readonly), only if you turn on showing job-search events from your main calendar: Search HQ reads your events and keeps only those that match your search (an attendee or organizer who is one of your contacts, or a title or description that names a contact, a company you're tracking or a job-search keyword). For a kept event it stores the title, start and end time, location and video link, and links to the matching contact or lead. It doesn't store descriptions or attendee lists, and it discards events that don't match. It never creates, changes or deletes events on your main calendar.

Search HQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide and improve the calendar features you can see in the app.
• It is not sold, not used for advertising, and not used to determine credit-worthiness or for lending.
• It is not transferred to others except as needed to run the app (the hosting provider below), to comply with law, or with your consent.
• No person reads it, except with your permission, for security purposes, or to comply with law.
• It is not used to develop, improve or train generalized AI or machine-learning models, and calendar data is never sent to the AI service.

AI features

Resume tailoring, match scoring and message drafts send the relevant resume and job-description text to an AI model through OpenRouter, only when you use those features. Requests go only to providers with zero data retention and with data collection turned off, so your text isn't stored or used for training. The app logs only the model, token counts and cost, never the text.

Where it's stored and who can see it

Data is stored with Cloudflare (D1 database and R2 file storage) and is encrypted in transit. Google refresh tokens are additionally encrypted with AES-GCM. Every query is scoped to your account, and only your allowlisted account can sign in. We don't share your data with anyone else.

Service providers that process data to run the app: Cloudflare (hosting and storage), Google (sign-in and Calendar), OpenRouter and its zero-retention model providers (AI features you use), and Apple (push notifications on iPhone).

Keeping and deleting your data

• Data is kept until you delete it. You can delete leads, contacts, history, appointments and files in the app, and export everything as a spreadsheet from the Import page.
• To disconnect Google Calendar, use Disconnect in Settings. This deletes the stored token and the events imported from your main calendar. The Job Search calendar stays in your Google account for you to keep or delete.
• You can also remove Search HQ's access at any time from your Google account permissions.
• To delete your account and all of its data, contact the app's owner (contact address not yet published).

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Questions about this policy: the app's owner (contact address not yet published). See also the terms of service.