Privacy

Account: your email (via Clerk). Content you provide: your CV (file and extracted text) and your search preferences (roles, locations, contract type). Agent activity: the jobs selected, the applications prepared on your behalf (your CV is sent as is, pooost does not alter it, together with a cover letter and an email written for you) and the correspondence exchanged with recruiters from your mailbox. Connections: the Gmail authorisation you grant (through a connection service) and the timestamp of your consent.

Running your agent: searching for jobs, preparing your applications and, with your explicit consent, sending them from your own Gmail mailbox, then processing recruiters’ replies. Your data is neither sold nor used for advertising purposes.

Sending applications on your behalf from your Gmail requires your explicit consent, collected and timestamped when you activate your agent. You can withdraw it at any time from Settings › Account › “Withdraw my consent”: your agent is then paused and no longer sends anything on your behalf. You can also disconnect your mailbox from Settings › Connections.

We rely on providers that process data on our behalf and according to our instructions: Clerk (authentication), Convex (database) and Vercel (application hosting), Composio (connection to your Gmail mailbox), OpenRouter (AI models that write your applications), Apify (job and contact search), Enrow, Hunter.io and Dropcontact (finding recruiters’ contact emails), Reoon and Bouncer (deliverability checks on those emails), AgentMail (dedicated mailbox and receipt of replies for the school plan), Brevo (notification emails) and Stripe (payment). Some of these providers are only called upon when the corresponding feature is enabled. Jobs come from public sources (France Travail, La Bonne Alternance and other aggregators).

Some of our subprocessors are established outside the European Union, mainly in the United States: Clerk, Convex, Vercel, Composio, OpenRouter, AgentMail, Stripe and Reoon. Data transfers to these providers are governed by the safeguards laid down by the GDPR, in particular the European Commission’s standard contractual clauses. The other providers (Brevo, Dropcontact, Bouncer, Apify) process data within the European Union.

Your data is kept for as long as your account is active, in order to provide the service. When your account is closed, or upon an erasure request, it is deleted or anonymised within a reasonable time. Proof of your consent may be kept separately for as long as our legal obligations require.

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction of processing, portability, objection and withdrawal of your consent (see above). Write to us at walidkousssaa@gmail.com to exercise these rights. You also have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL, cnil.fr), the competent supervisory authority.