How Applictus receives job emails

When you create an account, Applictus gives you a personal forwarding address. You can configure Gmail automatic forwarding and optional Gmail filters to decide which job-related emails are sent to Applictus.

Information we collect

• Account email, name, and sign-in method.
• Forwarded job-related emails sent to your Applictus address.
• Email metadata such as sender, subject, timestamps, and message identifiers.
• Limited message content needed to classify job updates.
• Derived application data such as company, role, status, timeline events, confidence, and explanation metadata.

How we use information

• Detect applications, interviews, offers, rejections, assessments, and hiring updates.
• Create and update your application timeline.
• Prevent duplicates and match related updates to the same application.
• Maintain reliability, security, support, and abuse prevention.

What we do not do

• We do not sell user data.
• We do not use user data for advertising.
• We do not require full Gmail inbox access for standard tracking.
• We do not send, delete, or modify your emails.
• We do not access non-forwarded emails in the standard forwarding workflow.

Google sign-in and limited permissions

Google OAuth is used for authentication. For standard accounts, Applictus uses basic sign-in information such as your email address and profile name. Standard forwarding-based tracking does not require Gmail inbox read permissions.

A separate legacy, admin, or internal mode may use Gmail read-only access for testing or operational workflows. That mode is not the standard user workflow and is not required to use Applictus.

Applictus's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention

We retain account and tracking data while your account is active. Previously extracted application records remain available in your account unless you delete them or request deletion.

Security

• We use HTTPS in production.
• Access is tied to authenticated account sessions.
• Sensitive credentials are stored securely when encryption is enabled.
• We avoid logging full email bodies in production diagnostics.

Third-party services

• Google OAuth: account authentication.
• Email processing provider: receives forwarded messages sent to your Applictus address.
• Hosting and database providers: run the service and store account and tracking data.
• Payment provider: processes paid plan purchases when applicable.

Your controls

• Choose what gets forwarded to Applictus.
• Use Gmail filters to limit forwarding to job-related emails.
• Disable forwarding at any time in your email provider.
• Log out to clear your session on this device.
• Contact us if you need help with account or data deletion.