Privacy Policy

Who we are

Veyquo is an AI career agent: it finds job openings, compares them with your Career Profile, prepares applications with you and keeps track of what happens next. Veyquo is operated by [TO CONFIRM: legal name of the company], [TO CONFIRM: registered address], [TO CONFIRM: company registration number]. For anything about your data, write to [TO CONFIRM: privacy contact email address]. [TO CONFIRM: data protection officer or representative, if one is required.]

What we collect, and why

Your account

Your email address and your name. If you sign in with Google, Google shares your name, email address and an account identifier; Veyquo does not use your profile photo. If you sign in by email, we send you a link and a six-digit code; we keep your email address and a one-way hash of the link and code, never the code itself, until the request expires 15 minutes later.

Your sessions

For each signed-in session: when it started, when it was last renewed, when it expires and, if it ended early, why. Session tokens are kept only as one-way hashes. We do not store your IP address or browser details with a session. Your IP address is used, in hashed form and for up to 15 minutes, to limit repeated sign-in attempts.

Your Career Profile

What you add or confirm about your work: a summary, experience, projects, skills, education and certifications, each marked with where it came from (entered by you, imported, or suggested by Veyquo and confirmed by you). Your contact details for applications: name, email address, phone number and approximate location.

Documents

Resumes you upload, and documents Veyquo prepares for you: tailored resumes, cover letters, receipts of submitted applications, screenshots taken while an application form is filled in, and your data exports. They are stored in object storage in an area that belongs to your account.

Applications and answers

The jobs you apply to, the state of each application and your answers to employers' questions. Answers in sensitive categories (home address, visa or work authorisation declarations, disability, demographic questions, veteran status, legal declarations and background disclosures) are encrypted separately in our application before they reach the database. Veyquo never sends them to an AI model, and never fills them into a form unless they are your verified answers or you approve them.

Gmail, if you connect it

Connecting Gmail is optional. Veyquo asks for read-only access (the gmail.readonly permission) so it can notice replies about your applications. It reads each message's sender, subject, date and the short preview Gmail provides, not the full message body. It keeps only messages that relate to your applications: the sender, the subject and preview (each cut to 300 characters), when it arrived, what kind of message it is (for example an interview invitation) and a short quote of up to 200 characters that shows why. The first sync looks back 30 days, at most 500 messages. Veyquo never sends, changes or deletes your email. [TO CONFIRM: if Veyquo reads employer verification codes from your mailbox, describe what is read and how long it is kept.]

Google Calendar, if you connect it

Connecting Google Calendar is optional and has two levels. With availability, Veyquo reads only when you are free or busy, never the details of your events, and does not store it. If you also allow events, Veyquo can add, change or remove events it created itself, each one only after you approve it, without inviting anyone. It keeps the connected account's email address and identifier, the permissions you granted, and the events it created (title, location, time and the application it belongs to).

Submitting applications for you

If you ask Veyquo to submit an application, an automated browser fills in the employer's form with your Career Profile and your approved answers. How much it may do alone is your choice: in Manual mode it never submits, in Copilot mode it asks you each time, and in Autopilot mode it submits only within the rules you set. New accounts start in Copilot mode with no rules that allow anything. [TO CONFIRM: connecting your own browser cookies or proxies is not offered today; describe it here if it ships.]

Records of what Veyquo did

Every action Veyquo takes on your behalf is recorded: what was done, to what, with which data source, and when. These records hold identifiers, not the content of your profile, documents or email.

How AI is used

Veyquo uses AI models to compare jobs with your profile, to draft tailored resumes, cover letters and answers, and to sort replies to your applications. Requests go through OpenRouter, which passes them to a model provider such as OpenAI, Google, Anthropic, Qwen, DeepSeek or Voyage AI. A request contains only what the task needs:

• matching: your skills, experience, seniority, preferred locations and working arrangements and minimum salary, with the job;
• drafting: the facts in your Career Profile (summary, experience, projects, skills, education, certifications), with the job and its questions;
• sorting email: the sender's domain, the subject and the preview.

Your contact details and your sensitive answers are never part of a request. Veyquo does not use your data to train AI models. It asks OpenRouter to use only providers that do not collect prompts for training. [TO CONFIRM: that this setting is on in production, and whether zero-data-retention routing is required; today it is off by default, so providers may keep requests for a limited time under their own terms.]

Google user data

Veyquo's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.

Information from Gmail and Google Calendar is used only to provide the features you turned on: following the replies to your applications and scheduling your interviews. It is not used for advertising, not sold, and not used to train general-purpose AI models. It is shared with a processor only to provide those features (an email preview is sent to an AI model to sort it, as described above). [TO CONFIRM: that no person at Veyquo reads this data except with your permission, for security, to comply with the law, or in aggregated, anonymised form.]

Who processes your data for us

• Google: sign-in with Google, and Gmail and Google Calendar if you connect them.
• Resend: sends sign-in emails (your email address and the sign-in link and code).
• OpenRouter and the model providers it routes to: the AI requests described above.
• Railway: hosts the application, its database and its temporary storage.
• [TO CONFIRM: Cloudflare R2 or Railway storage]: stores your documents.
• [TO CONFIRM: Temporal Cloud, if used]: coordinates long-running work such as preparing an application; it receives identifiers, not your profile or documents.
• [TO CONFIRM: Sentry, if enabled]: error reports, which carry identifiers and no personal content.

We do not sell your data. [TO CONFIRM: the regions where data is stored and processed, and the safeguards for any transfer outside your country.]

Cookies and local storage

Veyquo uses only cookies that are strictly necessary to keep you signed in:

• veyquo_session: your current sign-in, renewed about every 10 minutes;
• veyquo_refresh: lets the session renew without signing in again, for up to 30 days;
• veyquo_sign_in: links the steps of one sign-in, until that sign-in expires;
• veyquo_refreshed: prevents a renewal loop, for 15 seconds.

Your light or dark theme choice is kept in your browser's local storage. There are no analytics or advertising cookies.

How long we keep it

• Your account, profile, documents and applications: until you delete them or your account.
• Sign-in requests: they expire after 15 minutes and are then deleted. [TO CONFIRM: a scheduled deletion; today expired requests are removed when later sign-ins are requested, not on a fixed schedule.]
• Email records: until you delete the application they belong to or your account. Disconnecting Gmail deletes the access tokens and revokes Veyquo's access at Google straight away; the records already kept stay until then.
• Calendar events Veyquo created: until you delete your account; disconnecting Google Calendar deletes the access tokens.
• Interview suggestions not yet approved: 30 minutes.
• Ended sessions: [TO CONFIRM: retention period].
• Backups: [TO CONFIRM: how long deleted data remains in backups].

Your choices and rights

• See and correct: your Career Profile and settings show what Veyquo holds, and you can edit them at any time.
• Export: download your data at any time from Settings, under Your data. The file covers every kind of data listed here. It leaves out secrets (sign-in tokens, credentials you connected and sealed answers to sensitive questions) and says what it leaves out and why.
• Delete: delete your account from Settings, under Your data, after signing in again. Veyquo first revokes its access to your Gmail and Google Calendar at Google, stops agent work in progress, then deletes your files, profile, applications, answers, the emails and calendar events it kept, your connections, sessions and the account itself. While this runs, the account cannot be signed in to. Records of what Veyquo did and AI usage records are kept without anything that links them to you (the action and its time), and a deletion receipt is kept that holds no personal data: a one-way hash of your account identifier, the time and how many items were deleted.
• Disconnect Gmail or Google Calendar at any time in Settings, or from your Google Account.
• [TO CONFIRM: the rights that apply where you live, for example to object to or restrict processing, and the supervisory authority you can complain to.]

Security

Access tokens for Gmail and Google Calendar and your sensitive answers are encrypted in our application before they are stored. Every request for your data is checked against your account. Logs and error reports carry identifiers, not your content.

Children

Veyquo is for people looking for work and is not meant for anyone under [TO CONFIRM: minimum age].

Changes to this policy

If this policy changes in a way that affects you, we will tell you before the change takes effect. [TO CONFIRM: how users are notified, for example by email.] The effective date is at the top of this page.