Privacy Policy

Last updated: 16 August 2026

AUOA (Autonomous Outreach Agent) is a job-search outreach tool. This policy explains exactly what data the service holds, why, and what it never does with it.

What we store
  • Account data — your email address and a hashed password. Passwords are never stored in readable form.
  • Profile data — your name, email signature, and any resume text or PDFs you upload. Used solely to personalise the messages generated for you.
  • API keys — your own Anthropic, Apify and Hunter.io keys. Encrypted at rest; used only to make calls on your behalf.
  • Google/Gmail OAuth tokens — encrypted at rest; used only to send email from your account and to detect replies to messages you sent.
  • LinkedIn / Jobright session data — encrypted; stored so automation can act as you without asking you to log in repeatedly.
  • Outreach data — contacts discovered for you, generated message drafts, send history, follow-up schedules, and reply status.
How Google user data is used

AUOA requests Gmail access for two purposes only:

  • Sending — delivering the outreach and follow-up emails you choose to send.
  • Reply detection — reading message metadata and content in threads you started through AUOA, so a contact who replies is marked as replied and stops receiving follow-ups.

AUOA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not read mail unrelated to threads you initiated through AUOA, and we do not use Gmail data to train any machine-learning model.

What we never do
  • We do not sell, rent, or share your data with third parties for advertising.
  • We do not use your data to train AI models.
  • We do not read email outside threads you started through AUOA.
  • We do not share data between accounts. Every record is scoped to the account that created it.
Third parties your data reaches

Because AUOA runs on your own API keys, your data is sent only to services you have connected: Anthropic (to generate message text), Google/Gmail (to send and detect replies), and optionally Hunter.io (to find email patterns) and Apify. Each is governed by its own privacy policy.

Security

All credentials and tokens are encrypted before being written to the database. Traffic is served over HTTPS. Browser automation runs in an isolated container per user, destroyed when the task completes.

Your rights

You can disconnect Gmail, LinkedIn or Jobright at any time in Settings, which deletes the stored token or session. You can request deletion of your account and all associated data by emailing the address below; we will action it within 30 days. Revoking AUOA's access to your Google account is also possible at any time via Google Account permissions.

Contact

Questions or deletion requests: [email protected]