Privacy Policy

1. Introduction

This Privacy Policy explains how Imperator Investments Ltd. (“Company,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use Job Beast (the “Service”). Job Beast is an AI-powered job search automation platform that connects to your Gmail account, processes your resume, matches you with job opportunities, and helps you send personalized outreach emails.

By using Job Beast, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the Service.

This Privacy Policy is designed to comply with applicable data protection laws, including the Israeli Privacy Protection Law 5741-1981, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number (optional)
• LinkedIn profile URL (optional)

2.2 Resume Data

When you upload your resume (PDF), we store the file and use AI to parse it for relevant information including your target role, location preferences, skills, and work experience. This data is used exclusively to match you with jobs and personalize outreach emails.

2.3 Gmail Data (OAuth)

When you connect your Gmail account, we receive OAuth tokens that allow us to:

• Send application emails that you have reviewed and approved
• Monitor email threads initiated by Job Beast to detect replies and update application statuses

See Section 4 for detailed Gmail-specific disclosures required by Google.

2.4 Job Search and Application Data

• Search parameters (role, location, industry preferences)
• Crawled job opportunities and AI-generated match ratings
• Contact information discovered at target companies (see Section 2.6)
• Emails sent and received through the Service
• Application statuses and archive reasons

2.5 Usage Data

• Dashboard interactions and feature usage patterns
• Notification preferences
• Standard web analytics (pages visited, session duration, device information)

For details on cookies and analytics tracking, see Section 5 and our Cookie Policy.

2.6 Third-Party Contact Data

As part of the Service, Job Beast identifies potential hiring contacts at companies with relevant job openings. This contact data may include:

• Name and job title
• Business email address
• LinkedIn profile URL

This information is sourced from publicly available professional sources, including company websites, professional networking platforms, and business directories. Contact data is collected and processed on the legal basis of legitimate interest— specifically, the User’s legitimate interest in contacting relevant professionals at companies with open positions for the purpose of genuine employment opportunities.

If you are a hiring manager or professional whose contact information has been identified by our Service and you wish to have your data removed, please contact us at info@jobbeast.org. We will process your removal request promptly.

3. How We Use Your Information

3.1 Resume Processing

Your resume is analyzed by AI to extract relevant information for job matching. This includes semantic similarity scoring against job descriptions and generating personalized cover letters and outreach emails.

3.2 Gmail Integration

We use your Gmail connection to:

• Send application emails that you have explicitly reviewed and approved before sending
• Monitor application threads created by Job Beast for replies and status updates
• Classify incoming replies (e.g., interview invitation, rejection, follow-up needed) to keep your pipeline current

3.3 Job Search Pipeline

Your job search data is used to track your application pipeline, generate follow-up recommendations, and improve the relevance of job matches presented to you.

3.4 AI Processing

Resume content and job descriptions are sent to third-party AI providers (OpenRouter) for analysis, matching, and email generation. Your resume content is not stored by these AI providers and is not used for model training. Data is transmitted securely and processed only for the purpose of delivering the Service to you.

4. Gmail-Specific Disclosures

In compliance with Google’s API Services User Data Policy, we provide the following disclosures about our use of Gmail data:

4.1 OAuth Scopes

Job Beast requests the following Gmail permissions:

• Send email— to send application emails on your behalf after your review and approval
• Read email threads— limited to threads created by Job Beast, to detect replies and update statuses

4.2 What We Access

We only access email threads that were initiated by Job Beast. We read these threads to detect replies from recipients, classify response types, and update your application pipeline accordingly.

4.3 What We Do NOT Access

• Your personal inbox or any unrelated emails
• Your Google Contacts
• Your Google Calendar
• Your Gmail drafts
• Any emails not created by Job Beast

4.4 Token Storage

Your Gmail OAuth tokens are encrypted at rest using AES-256 encryption, stored separately from other application data, and automatically refreshed as needed. Tokens are never shared with third parties.

4.5 Revoking Access

You can disconnect your Gmail account at any time from your Settings page. Revoking access immediatelystops all email activity — no further emails will be sent or read on your behalf. You can also revoke access directly from your Google Account permissions page.

4.6 Google API Limited Use Disclosure

Job Beast’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website and within the Service. Cookies are small text files stored on your device that help us provide and improve the Service.

5.1 Types of Cookies We Use

• Essential cookies: Required for the Service to function (session management, authentication, security). These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website. We use Google Analytics to collect aggregated, anonymized usage data such as pages visited, session duration, and device information. Analytics cookies are only loaded after you consent via our cookie banner.
• Preference cookies: Remember your choices, such as cookie consent preference and language settings.

5.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to analyze website usage. Google Analytics uses cookies to collect information about your browsing behavior, which is transmitted to and stored by Google. We have configured Google Analytics to anonymize IP addresses where possible. Google may use the collected data to contextualize and personalize ads within its own advertising network.

For more information, see Google’s Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.3 Managing Cookies

You can manage your cookie preferences through our cookie consent banner, which appears on your first visit. You can also control cookies through your browser settings. For full details, see our Cookie Policy.

6. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption at rest: All stored data is encrypted using AES-256 encryption
• Encryption in transit: All data transmitted between your browser and our servers is protected with TLS 1.3
• OAuth token isolation: Gmail tokens are encrypted and stored separately from other application data
• Cloud infrastructure: Data is hosted on secure cloud infrastructure with industry-standard access controls, located in data centers within the European Union and Israel

7. Data Retention and Deletion

7.1 Retention

Your account data, resume, job search history, application data, and email records are retained for as long as your account is active and you continue to use the Service. If your account is paused or inactive, your data will be retained for up to twelve (12) months, after which the Company may delete it upon reasonable notice.

7.2 Deletion

You can delete your account and all associated data at any time from your Settings page. Deletion includes:

• Your resume and parsed resume data
• All saved job searches and match results
• Application records and email history
• Gmail OAuth tokens
• Your account profile and preferences

Your data is removed from active systems immediately. A soft-delete period of up to 30 days may apply to ensure technical consistency, after which all data is permanently purged from our systems, including backups.

8. Third-Party Services

We use the following categories of third-party services to deliver Job Beast:

We do not sell, rent, or trade your personal information to any third party. We maintain data processing agreements with our third-party service providers to ensure your data is handled in accordance with applicable data protection laws.

9. Automated Decision-Making

Job Beast uses AI-powered automated processing to assist your job search. This includes:

• Job matching:Your resume is compared against job descriptions using semantic similarity analysis. Each opportunity receives an automated suitability rating (ranging from “Perfect Fit” to “Misalignment”) with an explanation of the match rationale.
• Contact identification: The Service automatically identifies potential hiring contacts at companies with relevant openings.
• Email classification: Incoming replies to your application emails are automatically classified (e.g., interview invitation, rejection, request for more information) to update your application pipeline.

These automated processes are designed to assist — not replace — your decision-making. You retain full control over which opportunities to pursue, which contacts to reach out to, and which emails to send. No automated decision made by the Service has a legal or similarly significant effect on you.

Under GDPR Article 22, you have the right to request human review of any automated decision. To exercise this right, contact us at info@jobbeast.org.

10. Lawful Bases for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:

• Consent:Gmail OAuth connection and email access — you explicitly grant and can revoke this at any time. Analytics cookies — only activated with your consent via the cookie banner.
• Contract: Processing necessary to provide the Service you have signed up for (account management, job matching, application tracking).
• Legitimate interest: Service improvement and analytics (provided these do not override your fundamental rights). Collection and processing of third-party contact data for the purpose of facilitating employment-related outreach on behalf of Users (see Section 2.6).

11. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (also available via account deletion in Settings)
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to restrict processing: Request that we limit how we use your data
• Right regarding automated decision-making: Request human review of automated decisions (see Section 9)

To exercise any of these rights, contact us at info@jobbeast.org. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been violated.

12. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to know: Request information about the categories and specific pieces of personal data we have collected about you
• Right to delete: Request deletion of your personal data
• Right to opt-out of sale: We do not sell your personal information. There is no need to opt out, as no sale occurs
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your CCPA rights, contact us at info@jobbeast.org.

13. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence, including Israel and other countries where our cloud infrastructure and third-party service providers operate. Israel has been recognized by the European Commission as providing an adequate level of data protection. For transfers to other jurisdictions, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws, including standard contractual clauses where required.

14. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, the Company will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.
• Notify affected users without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34.
• Document the breach, its effects, and the remedial actions taken.

15. Children’s Privacy

Job Beast is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at info@jobbeast.org.

16. Do Not Track Signals

Some web browsers transmit “Do Not Track” (DNT) signals to websites. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, Job Beast does not respond to DNT signals. However, you can manage your tracking preferences through our cookie consent banner and your browser settings.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email at the address associated with your account and update the “Last updated” date at the top of this page. We encourage you to review this page periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: