Privacy Policy

Overview

Controllables is a private career platform built for one purpose: to help you, the job seeker, run your own search. It is not a tool for employers or recruiters, and it never advertises you or broadcasts that you are looking. This policy explains what data the app holds, how it is used, and the controls you have. Plain terms, no surprises.

Data you provide

When you use Controllables you provide information such as your professional background, your preferences, and content you choose to create or save in the app. You may also submit your email to the waitlist before an account exists. This information is yours. It is stored against your account and is never sold, rented, or shared with employers.

Google account data

Connecting your Google account is optional, and you can disconnect it at any time. When you connect it, Controllables requests the narrowest access that makes each feature work. Reading is always purpose-limited, and the one write capability, sending an email you composed, happens only on your explicit action, never automatically:

• Gmail (gmail.readonly)
  Read-only access, limited to messages related to the specific opportunities you are already tracking in the app; your broader mailbox is never requested or read. The app reads message metadata and Google's short preview snippet only, not full message bodies, and never modifies or deletes mail.
• Gmail sending (gmail.send)
  Used only to send a message you have written and explicitly chosen to send from within the app, so it comes from your own address. The app never composes and sends on its own, never schedules sends, and cannot read mail through this permission.
• Google Calendar (calendar.events.readonly)
  Read-only access to the events on your calendar, used to recognize events related to the opportunities you are tracking so they can appear in context. It never creates, edits, or deletes events, and it cannot see your calendar list, your sharing settings, or who else can access your calendars.
• Google Drive (drive.file)
  A per-file scope limited strictly to files the app itself creates when you choose to export a document from within the app. It cannot see or access any other file in your Drive.

Suggestions built from this data are always presented to you for review. The app proposes; you decide. Nothing is acted on automatically.

Google Limited Use disclosure

How your data is used

Your data is used to operate the service and to personalize it for you. The app uses artificial intelligence to reason over your information on your behalf, and it stores and refers back to your information so that what it produces is tailored to you. This personalization works by keeping and retrieving your own data, not by training a model on it.

Your data is not used to train AI models: the third-party providers the app relies on do not train their models on it, and the app builds no model of its own from it. Your information personalizes your own experience only, never another user’s, and each account is isolated. Any analysis to understand and improve the service overall uses only de-identified, aggregated information that does not identify you. Your data, including any Google account data, is never used for advertising, and never sold or shared with employers or recruiters.

Who processes your data

Controllables relies on a small set of vetted infrastructure providers who process data only to run the service, under their own security and confidentiality terms and never for their own purposes. They fall into a few categories:

• Cloud hosting and database providers, which store and serve the application.
• AI processing providers, whose models reason over your data to power app features and which do not train their models on your data.

Each account’s data is isolated from every other account. One user can never see another user’s data.

Security

Data is encrypted in transit with TLS and encrypted at rest by our hosting providers. Access credentials for connected accounts, including Google OAuth tokens, are additionally encrypted by the application with AES-256-GCM before they are stored, and decrypted only in memory at the moment they are used. They are held only to operate the connection and are removed when you disconnect. Access to production systems is restricted. No method of transmission over the Internet or of electronic storage is completely secure, however, so while we work hard to protect your information we cannot guarantee its absolute security.

Retention and deletion

The working principle: data is kept while it serves you, and goes when you or its purpose goes. The schedule:

• Account information is retained while your account is active so the service functions as intended. Deleting your account deletes it.
• Account deletion happens on written request: email us at the address below from the address on your account, and deletion is completed within thirty days of the request. Deletion removes your account and the information associated with it from the live database.
• Google connection data: disconnecting Google from your profile immediately revokes the app’s access at Google and deletes the stored connection, including the encrypted tokens. Any Google data previously surfaced to you is removed with your account.
• Backups: our hosting providers keep rolling backups for disaster recovery; deleted data ages out of those on the provider’s cycle, typically within about thirty days, and backups are never used to restore data you asked us to delete.
• Waitlist emails are held only to send an invitation and are removed on request.
• Feedback you volunteer may be retained in de-identified form after account deletion; your identity is removed from it.

Your controls

You can review and edit your profile at any time, connect or disconnect Google whenever you like, and manage the Google permissions you have granted from your Google Account permissions page.

Contact

Questions about this policy, and written deletion requests, can be sent to privacy@controllables.ai.

Changes

If this policy changes in a meaningful way, the effective date above will be updated. Continued use of the app after a change means you accept the revised policy.