Privacy Policy

1. Introduction

This Privacy Policy explains how Imperator Investments Ltd. (“Company,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use Job Beast (the “Service”). Job Beast is an AI-powered job search automation platform that processes your resume, matches you with job opportunities, helps you send personalized outreach emails, and integrates with email so replies update your dashboard. We offer multiple email integration options so you can choose how much access we get; see Section 4 and our Email Integration page for full detail.

By using Job Beast, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the Service.

This Privacy Policy is designed to comply with applicable data protection laws, including the Israeli Privacy Protection Law 5741-1981, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number (optional)
• LinkedIn profile URL (optional)

2.2 Resume Data

When you upload your resume (PDF), we store the file and use AI to parse it for relevant information including your target role, location preferences, skills, and work experience. This data is used exclusively to match you with jobs and personalize outreach emails.

2.3 Gmail and Email Integration Data

Job Beast offers two ways to integrate with email, and the data we receive depends on which you choose. See our Email Integration page for a plain-language explanation, and Section 4 below for the full Gmail-specific disclosures required by Google.

• Manual forwarding. If you forward replies to forward@jobbeast.org, we receive only the messages you explicitly forward. No Gmail account connection is involved.
• Gmail add-on. If you install our Workspace Marketplace add-on and grant the requested scopes, when you open a message in Gmail with the panel active, the add-on reads its sender, subject, headers, and a short body preview (about 220 characters) to show a suggested-application card. When you click Import to Job Beast, the full message is then sent to our backend. Either way, only the message you have open is accessible — never the rest of your inbox. Separately, when you connect Gmail in the dashboard, we use gmail.send to send approved outbound emails on your behalf. The complete scope list is in Section 4.1.

In both cases we store the email content delivered to us (sender, recipient, subject, body, timestamp, RFC Message-ID), associate it with the matching application, and use it to update your dashboard. We do not request gmail.readonly or any restricted Gmail scope on either path.

2.4 Job Search and Application Data

• Search parameters (role, location, industry preferences)
• Crawled job opportunities and AI-generated match ratings
• Contact information discovered at target companies (see Section 2.6)
• Emails sent and received through the Service
• Application statuses and archive reasons

2.5 Usage Data

• Dashboard interactions and feature usage patterns
• Notification preferences
• Standard web analytics (pages visited, session duration, device information)

For details on cookies and analytics tracking, see Section 5 and our Cookie Policy.

2.6 Third-Party Contact Data

As part of the Service, Job Beast identifies potential hiring contacts at companies with relevant job openings. This contact data may include:

• Name and job title
• Business email address
• LinkedIn profile URL

This information is sourced from publicly available professional sources, including company websites, professional networking platforms, and business directories. Contact data is collected and processed on the legal basis of legitimate interest— specifically, the User’s legitimate interest in contacting relevant professionals at companies with open positions for the purpose of genuine employment opportunities.

If you are a hiring manager or professional whose contact information has been identified by our Service and you wish to have your data removed, please contact us at info@jobbeast.org. We will process your removal request promptly.

3. How We Use Your Information

3.1 Resume Processing

Your resume is analyzed by AI to extract relevant information for job matching. This includes semantic similarity scoring against job descriptions and generating personalized cover letters and outreach emails.

3.2 Email Integration

We use the email data you bring to us — whether by manual forward or the Gmail add-on — to:

• Send application emails that you have explicitly reviewed and approved before sending (uses the gmail.send scope when the add-on is installed).
• Match incoming replies to one of your active applications using up to four heuristics, in order of strength: per-application address, reply-thread headers, sender plus subject, or sender alone. If no heuristic matches, the email is held and you receive a one-click link to attach it manually.
• Classify incoming replies (e.g., interview invitation, rejection, follow-up needed) to keep your pipeline current. Classification uses a conservative AI prompt with a confidence threshold; below threshold, no status change is applied.
• Detect duplicates (the same message arriving via more than one path) and self-sent messages, so a status is never flipped twice or based on your own outbound text.

3.3 Job Search Pipeline

Your job search data is used to track your application pipeline, generate follow-up recommendations, and improve the relevance of job matches presented to you.

3.4 AI Processing

Resume content, job descriptions, and the sender, subject, and body of each reply you import or forward (for status classification) are sent to Google Cloud’s Gemini Enterprise Agent Platform (formerly Vertex AI) — Google’s own enterprise AI service — for analysis, matching, generation, and classification. Google processes this content solely to deliver these features; it is not usedto develop, improve, or train any AI or machine-learning models, and it is handled under Google Cloud’s Data Processing Addendum. Data is transmitted securely and processed only for the purpose of delivering the Service to you.

Reply classification uses a deliberately conservative prompt: when the model is uncertain, it returns “no change” rather than guessing a status. Status updates are only applied when the model’s confidence is above a threshold and the proposed transition is valid for your application’s current state.

4. Gmail and Email Integration Disclosures

In compliance with Google’s API Services User Data Policy, and to make our actual data practices unambiguous, we provide the following disclosures. A plain-language overview of both integration paths is available on our Email Integration page.

4.1 OAuth Scopes

Job Beast requests the following scopes across two distinct surfaces. None of them grant inbox-wide read access.

When you connect Gmail in the Job Beast dashboard (used to send applications and replies you approve):

• https://www.googleapis.com/auth/gmail.send — sends emails on your behalf after your explicit review and approval. Cannot read existing emails, modify drafts, or touch anything else.
• https://www.googleapis.com/auth/userinfo.email — reads the email address you signed in with at Google, so we know which Job Beast account to attach the new connection to. Nothing else from your profile.

When you install the Gmail add-on from the Google Workspace Marketplace:

• https://www.googleapis.com/auth/gmail.addons.current.message.readonly — reads sender, subject, body, and headers of the single message you have open in Gmail when the panel is active. Bounded by Google to that single message; cannot read other threads or anything not actively displayed.
• https://www.googleapis.com/auth/gmail.addons.execute — required by Google for any Gmail add-on to run. Does not grant additional data access.
• https://www.googleapis.com/auth/script.external_request — lets the add-on make HTTPS calls to api.jobbeast.org so we can match the open email to one of your applications and import it.
• https://www.googleapis.com/auth/userinfo.email — identifies the email address signed into Gmail, so imported messages attach to the correct Job Beast account.

We do not request gmail.readonly, gmail.modify, gmail.metadata, gmail.labels, gmail.settings.*, or any other restricted Gmail scope. We cannot read your inbox.

4.2 What We Receive, by Path

The data we actually see depends on how you choose to bring replies to us:

• Manual forward: only the messages you explicitly forward to forward@jobbeast.org. No Gmail OAuth connection.
• Gmail add-on: while the panel is active on a message, the add-on reads the sender, subject, headers, and a short body preview (~220 characters) to render a suggested-application card. When you click Import to Job Beast, the full message is sent to our backend. In all cases the access is limited to the single message you have open. Outbound emails you approve are sent via gmail.send.

4.3 What We Do NOT Access

• Your Gmail inbox at large.
• Emails you did not forward or import.
• Your Google Contacts.
• Your Google Calendar.
• Your Gmail drafts, labels, settings, or filters.
• Anything via gmail.readonly or any restricted scope.

4.4 The forward@jobbeast.org Mailbox

forward@jobbeast.org is a real mailbox owned and operated by Job Beast. It exists to receive emails you explicitly forward to it. It is read by our backend only; no humans browse it. It is not your mailbox — you cannot send from it, and we never store credentials or tokens for your Gmail account on the basis of you using it.

4.5 Token Storage

When you install the Gmail add-on, the OAuth tokens granted by the scopes in Section 4.1 are encrypted at rest using AES-256 encryption, stored separately from other application data, and automatically refreshed as needed. Tokens are never shared with third parties. For manual forwarding, no Gmail OAuth tokens exist because no Gmail OAuth connection is required.

4.6 Stopping Email Integration

You can stop email integration at any time. The right action depends on the path you set up:

• Manual forwarding: stop forwarding. Nothing further reaches us.
• Gmail add-on: uninstall the add-on from your Gmail, or revoke access from your Google Account permissions page. This immediately stops all access via the add-on scopes and disables sending via gmail.send.

You can also delete any individual email we’ve received from the relevant application page in your dashboard, and you can delete your entire account and all associated data at any time from Settings (see Section 7.2).

4.7 Confirmation Emails

When an email reaches us, we send a confirmation email back describing what was matched and what changed. By default, manual forwards and add-on imports both trigger a confirmation. You can change this in Settings.

4.8 Google API Limited Use Disclosure

Job Beast’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, information obtained through Google APIs — including the content of emails you forward or import — is used onlyto provide the user-facing features described in this policy (such as matching replies to your applications and classifying their status). When AI is used to classify an imported reply, the content is processed by Google Cloud’s Gemini Enterprise Agent Platform (formerly Vertex AI), Google’s own enterprise AI service, under Google Cloud’s Data Processing Addendum. We do not use data obtained through Google APIs to develop, improve, or train generalized or non-personalized AI or machine-learning models, and we do not use it for advertising. Human access to this data is limited to what is necessary to operate the Service securely, to comply with the law, or where you have given explicit consent.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website and within the Service. Cookies are small text files stored on your device that help us provide and improve the Service.

5.1 Types of Cookies We Use

• Essential cookies: Required for the Service to function (session management, authentication, security). These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website. We use Google Analytics to collect aggregated, anonymized usage data such as pages visited, session duration, and device information. Analytics cookies are only loaded after you consent via our cookie banner.
• Preference cookies: Remember your choices, such as cookie consent preference and language settings.

5.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to analyze website usage. Google Analytics uses cookies to collect information about your browsing behavior, which is transmitted to and stored by Google. We have configured Google Analytics to anonymize IP addresses where possible. Google may use the collected data to contextualize and personalize ads within its own advertising network.

For more information, see Google’s Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.3 Managing Cookies

You can manage your cookie preferences through our cookie consent banner, which appears on your first visit. You can also control cookies through your browser settings. For full details, see our Cookie Policy.

6. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption at rest: All stored data is encrypted using AES-256 encryption
• Encryption in transit: All data transmitted between your browser and our servers is protected with TLS 1.3
• OAuth token isolation: Gmail tokens are encrypted and stored separately from other application data
• Cloud infrastructure: Data is hosted on secure cloud infrastructure with industry-standard access controls, located in data centers within the European Union and Israel

7. Data Retention and Deletion

7.1 Retention

Your account data, resume, job search history, application data, and email records are retained for as long as your account is active and you continue to use the Service. If your account is paused or inactive, your data will be retained for up to twelve (12) months, after which the Company may delete it upon reasonable notice.

7.2 Deletion

You can delete your account and all associated data at any time from your Settings page. Deletion includes:

• Your resume and parsed resume data
• All saved job searches and match results
• Application records and email history
• Gmail OAuth tokens
• Your account profile and preferences

Your data is removed from active systems immediately. A soft-delete period of up to 30 days may apply to ensure technical consistency, after which all data is permanently purged from our systems, including backups.

8. Third-Party Services

We use the following categories of third-party services to deliver Job Beast:

We do not sell, rent, or trade your personal information to any third party. We maintain data processing agreements with our third-party service providers to ensure your data is handled in accordance with applicable data protection laws.

9. Automated Decision-Making

Job Beast uses AI-powered automated processing to assist your job search. This includes:

• Job matching:Your resume is compared against job descriptions using semantic similarity analysis. Each opportunity receives an automated suitability rating (ranging from “Perfect Fit” to “Misalignment”) with an explanation of the match rationale.
• Contact identification: The Service automatically identifies potential hiring contacts at companies with relevant openings.
• Email classification: Incoming replies to your application emails are automatically classified (e.g., interview invitation, rejection, request for more information) to update your application pipeline.

These automated processes are designed to assist — not replace — your decision-making. You retain full control over which opportunities to pursue, which contacts to reach out to, and which emails to send. No automated decision made by the Service has a legal or similarly significant effect on you.

Under GDPR Article 22, you have the right to request human review of any automated decision. To exercise this right, contact us at info@jobbeast.org.

10. Lawful Bases for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:

• Consent:Gmail OAuth connection and email access — you explicitly grant and can revoke this at any time. Analytics cookies — only activated with your consent via the cookie banner.
• Contract: Processing necessary to provide the Service you have signed up for (account management, job matching, application tracking).
• Legitimate interest: Service improvement and analytics (provided these do not override your fundamental rights). Collection and processing of third-party contact data for the purpose of facilitating employment-related outreach on behalf of Users (see Section 2.6).

11. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (also available via account deletion in Settings)
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to restrict processing: Request that we limit how we use your data
• Right regarding automated decision-making: Request human review of automated decisions (see Section 9)

To exercise any of these rights, contact us at info@jobbeast.org. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been violated.

12. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to know: Request information about the categories and specific pieces of personal data we have collected about you
• Right to delete: Request deletion of your personal data
• Right to opt-out of sale: We do not sell your personal information. There is no need to opt out, as no sale occurs
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your CCPA rights, contact us at info@jobbeast.org.

13. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence, including Israel and other countries where our cloud infrastructure and third-party service providers operate. Israel has been recognized by the European Commission as providing an adequate level of data protection. For transfers to other jurisdictions, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws, including standard contractual clauses where required.

14. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, the Company will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.
• Notify affected users without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34.
• Document the breach, its effects, and the remedial actions taken.

15. Children’s Privacy

Job Beast is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at info@jobbeast.org.

16. Do Not Track Signals

Some web browsers transmit “Do Not Track” (DNT) signals to websites. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, Job Beast does not respond to DNT signals. However, you can manage your tracking preferences through our cookie consent banner and your browser settings.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email at the address associated with your account and update the “Last updated” date at the top of this page. We encourage you to review this page periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: