Privacy Policy
Last updated: December 16, 2025
This Privacy Policy explains how Gleania ("Gleania", "we", "us") collects, uses, and shares information when you use our website and application (the "Service"). Gleania is an intelligent interview assistant designed to help job seekers organize, track, and optimize their job search process.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Password (securely hashed)
- OAuth identifiers if you sign in with Google
- Profile preferences and settings
Resumes and Career Documents
When you upload resumes, we collect and process:
- Resume files (PDF, DOCX, etc.)
- Extracted text content from your documents
- Skills, experience, and qualifications identified through AI analysis
- Target job roles and companies you specify
Job Search Data
As you use the Service, we collect:
- Job listings you save or apply to
- Interview applications, rounds, and feedback you record
- Companies you're tracking
- Notes and timeline events related to your applications
- Fit assessments comparing your skills to job requirements
Gmail Integration Data
If you connect your Gmail account, we access (with your permission):
- Email metadata: sender, subject, date, and labels
- Email snippets and body previews to identify interview-related messages
- We only process emails that appear to be job or interview related
Usage and Technical Data
- Log data: IP address, browser type, pages visited, timestamps
- Device information: operating system, screen resolution
- Feature usage patterns to improve the Service
How We Use AI and Machine Learning
Gleania uses artificial intelligence to enhance your job search experience. Here's how:
- Resume Analysis: AI extracts skills, experience, and qualifications from your uploaded resumes to build your profile.
- Job Matching: We analyze job listings and compare them to your profile to generate fit assessments and recommendations.
- Email Processing: AI identifies interview-related emails and extracts relevant opportunity information.
- Job Listing Extraction: When you add job URLs, AI extracts structured information from job postings.
- Interview Assistance: AI-powered features help you prepare for interviews and analyze feedback.
We use third-party AI providers (such as OpenAI and Anthropic) to process certain data. Data sent to these providers is used solely for processing your requests and is subject to their respective privacy policies. We do not use your data to train AI models.
Google API Services User Data Policy
Gleania's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only request access to data necessary for the Service's features
- We do not use Google user data to serve advertisements
- We do not sell Google user data to third parties
- We do not use Google user data for purposes unrelated to the Service
- You can disconnect your Google account at any time in Settings
How We Use Your Information
- Provide, maintain, and improve the Service
- Process your resumes and generate skill profiles
- Sync and analyze interview-related emails (if enabled)
- Calculate fit assessments for job opportunities
- Send transactional emails (account verification, password resets)
- Respond to support requests
- Detect and prevent fraud, abuse, and security issues
- Generate aggregated, anonymized insights to improve the Service
Information Sharing
We may share your information with:
- Service Providers: Companies that help us operate the Service (hosting, email delivery, error monitoring, AI processing)
- AI Providers: OpenAI and Anthropic for AI-powered features (data is processed per their privacy policies)
- Legal Requirements: When required by law, court order, or to protect our rights
We do not sell your personal information. We do not share your data with third parties for their marketing purposes.
Data Security
We implement industry-standard security measures to protect your data:
- Data encryption in transit (TLS/HTTPS) and at rest
- Secure password hashing using bcrypt
- OAuth 2.0 for third-party authentication
- Regular security audits and updates
- Access controls and audit logging
Data Retention
- Account data is retained while your account is active
- You can delete your account and associated data at any time
- Synced emails can be disconnected, stopping future syncing
- Some data may be retained for legal or security purposes
- Backups are retained for up to 30 days after deletion
Your Rights
Depending on your location, you may have the right to:
- Access and download your personal data
- Correct inaccurate information
- Delete your account and data
- Object to certain processing activities
- Withdraw consent for optional features
- Lodge a complaint with a supervisory authority
International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.
Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy and updating the "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us via our contact page.