Privacy Policy
Last updated: August 4, 2026
LandEarly helps you find jobs, tailor a resume and cover letter to each one, submit applications, and track what happens next. Doing that means handling information about your career and, if you choose to connect an inbox, limited information about the mail you receive. This policy explains exactly what we collect, what we do with it, who else sees it, and how we protect it.
1. Information we collect
Account information. Your email address and a hashed password. If you sign in with Google, Apple, or LinkedIn, we receive your email address and name from that provider instead of a password.
Profile information. Anything you add to your profile or that we parse from a resume you upload: work history, education, skills, location, work authorization, salary expectations, and job preferences. Resume files you upload are stored as files, not just as parsed text.
Application data. The job postings you apply to, the resume and cover letter generated for each application, answers to employer screening questions, and the status of every application over time.
Connected inbox data (optional). If you connect a Gmail or Outlook account, we read a narrow slice of your mail to detect employer replies. Section 3 describes this in full - it is the most sensitive data we touch, and it is opt-in.
Payment information. If you subscribe, Stripe collects and processes your card details. We never receive or store your card number. We store your Stripe customer identifier, plan, and billing status.
Device and log data. Standard server logs (IP address, browser type, pages visited, timestamps) for security and debugging, and - if you enable notifications - a push notification token for your browser or mobile device.
2. How we use your information
We use your data to provide the service and for nothing else. In practice that means: matching you to jobs, tailoring your resume and cover letter to a specific posting, submitting applications on your behalf, tracking application status, preparing you for interviews, and sending account notifications such as application updates and billing receipts.
We also use aggregated, de-identified data to improve matching and to measure whether the product works - for example, how often applications reach an interview across all users. This work never re-identifies you and never involves your connected inbox.
We do not sell your personal information. We do not use it for advertising, and we do not share it with data brokers.
3. Google user data: what we access, store, and never do
Connecting a Gmail account is entirely optional. LandEarly works without it. If you connect one, here is precisely what happens.
The scope we request. We request gmail.metadata, which grants access to message headers and labels only. This scope makes it technically impossible for us to read the body of any email in your account. We also request openid, email, and profile, which identify which mailbox you connected and grant no access to mail. These are the minimum scopes the feature needs.
What we do with it. On a periodic scan we look at the subject line, sender domain, and date of recent messages to decide whether a message is a reply to a job you applied to. If it is, we update that application's status on your board and can tell you that you heard back.
What we store, and it is very little. When we detect an outcome we store only four fields as a pointer back to the source message: the provider, the thread ID, the message ID, and the sender's domain. We do not store subject lines, message bodies, sender email addresses, recipient lists, or attachments. We do not copy or archive your mailbox.
The one time we read a sender's name and address. Because we keep only the domain, a recruiter who emails you shows up on your Network page as “a recruiter at that company” and nothing more. If you ask us who it was, we read the From line of that one message at that moment, show it to you, and save it to your contacts only if you then choose to save it. Nothing is stored in between, we do not read the message itself, and we never do this on our own - it happens only when you click.
What we never do. We never read message bodies. We never send email from your account. We never modify or delete your mail. We never use Google user data for advertising, never sell or transfer it, and no human at LandEarly reads it - except in the narrow cases the Limited Use policy permits, which are: with your explicit consent, when necessary for security purposes such as investigating abuse, or when required by law.
Limited Use commitment. LandEarly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting. You can disconnect your inbox at any time from Settings, under Connected inbox. Disconnecting deletes the stored access and refresh tokens immediately and stops all scanning. You can also revoke our access directly from your Google account permissions page.
4. Microsoft Outlook data
If you connect an Outlook or Microsoft 365 mailbox instead, the same feature applies with the same storage rules: we detect employer replies and store only the provider, thread ID, message ID, and sender domain. Microsoft's Graph API grants access under the Mail.Read permission. You can disconnect from Settings at any time, or revoke access from your Microsoft account privacy settings.
5. How we protect your data
Encryption in transit. All traffic between you and LandEarly, and between LandEarly and every service listed in section 7, travels over TLS. We do not serve the application over unencrypted HTTP.
Encryption at rest. Our database is encrypted at rest by our hosting provider. On top of that, the most sensitive values get a second layer of application-level encryption before they are ever written to a row:
- Email and OAuth access and refresh tokens - including the tokens for your connected Gmail or Outlook account - are encrypted at rest. A database snapshot alone does not yield a usable token.
- Credentials you save for job sites are encrypted with AES-256-GCM using a unique random initialization vector per record and an authentication tag that detects tampering. The encryption key is held in a secrets manager, never in the database and never in source control.
- Passwords are hashed, not encrypted, and are never recoverable in plaintext by anyone including us.
Access control. Access to production systems and production data is restricted to the personnel who need it to operate the service, authenticated individually, and protected by multi-factor authentication. Application secrets are held in our hosting platform's secrets manager and injected at runtime. Internal service-to-service calls require a shared secret and are not reachable from the public internet without it.
Data minimization by design. We deliberately request the narrowest permission that makes a feature work and store the least data that makes it useful. The inbox feature is the clearest example: we hold a scope that cannot read message bodies, and we persist four identifier fields rather than message content. Features that would require broader access stay switched off until they pass review.
Monitoring and response. We log access to production systems and review anomalies. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulators as required by applicable law.
No system is perfectly secure, and we will not claim otherwise. We are completing an annual independent security assessment under the App Defense Alliance CASA framework as part of our Google API verification.
6. AI and automated processing
LandEarly uses AI models to generate tailored resumes and cover letters, to summarize and decode job postings, to prepare interview and negotiation briefs, and to classify whether an email subject line represents an employer reply.
We send data to two model providers: Anthropic, for text generation and classification, and OpenAI, for the embeddings that power job matching. Both process this data as our service providers, under terms that do not permit them to train their models on it.
Google Workspace data and AI models. When we classify a message, the subject line and sender domain are sent to Anthropic to decide what kind of reply it is. That is the only Google user data that reaches a model, it is processed transiently to serve your request, and it is not retained by us beyond the four identifier fields described in section 3. We do not use Google Workspace APIs data to develop, improve, or train generalized or foundational AI or machine learning models. We do not use it for any purpose other than showing you the status of your own applications.
More broadly, we do not use your resume, work history, or application content to train AI models. It is used only to generate output for your own account.
Automated decisions. AI ranks and recommends jobs and drafts application materials, but it does not make decisions with legal or similarly significant effects about you. Employers make hiring decisions, not LandEarly. You can review and edit any generated document before it is sent.
8. Contact information about other people
To help you reach a person rather than a portal, LandEarly can surface business contact details for employees at companies you apply to, sourced from the business-contact provider Lusha. This is professional contact data about people in a work capacity, not personal data about you or drawn from your account. If you are a recruiter or hiring manager and want your details removed, email us at privacy@landearly.com and we will remove them from our systems and pass the request to our provider.
9. Data retention
We keep your account and application data for as long as your account is open, because your application history is the point of the product.
When you delete your account, we delete your personal data immediately, including your profile, resumes, applications, generated documents, connected inbox tokens, and stored credentials. Deletion is not reversible. Backups are purged on a rolling basis within 30 days. We retain the minimum records required for legal and financial obligations, such as invoices, and aggregated statistics that cannot identify you.
Disconnecting an inbox deletes its tokens right away, without affecting the rest of your account.
10. Your rights and choices
You can view and edit your profile at any time. From Settings you can export your data, disconnect a linked inbox, manage notifications, and delete your account outright.
If you are in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA - including access, correction, deletion, portability, restriction of processing, and objection to processing. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of, but you may still exercise every other right. Email privacy@landearly.com and we will respond within the period the applicable law requires. You will never receive worse service for exercising a right.
11. International transfers
LandEarly is operated from the United States, and the providers in section 7 may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
13. Browser extension
The LandEarly browser extension does two things: it replaces your new tab with a jobs feed, and it adds a “Decode job” button to job postings on supported job boards and applicant tracking systems.
Job postings you decode. On a supported job board, the extension reads the page in your browser to decide whether it looks like a real posting - that check never leaves your computer. Nothing is sent to us until you click “Decode job.” When you do, the extension sends that posting's visible description text, job title, company, and page URL to LandEarly so we can generate the plain-English decode. We do not read, collect, or transmit any other page, and the extension is inactive on sites outside the job boards listed in its store listing.
The new tab feed. Opening a new tab asks LandEarly for current job listings. Signed out, that request carries only the roles you picked, and those roles are stored in your browser. Signed in, the feed is your account's matches, and the jobs you swipe to apply to or pass on are recorded against your account so the feed does not repeat itself.
What the extension stores and why it can read cookies. Your LandEarly session is kept in the extension's local storage on your own machine and is never synced across devices. Your role preferences are stored in Chrome's synced settings. The extension holds cookie access for landearly.com alone, and uses it for a single purpose: to notice you are already signed in to LandEarly in this browser, so you do not have to sign in again inside the extension. It cannot and does not read cookies for any other site.
The extension does not track your browsing, does not use advertising or analytics trackers, and we do not sell or transfer any of this data to third parties. Removing the extension removes everything it stored locally; to delete data held on your account, see section 10.
14. Children
LandEarly is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us data, email privacy@landearly.com and we will delete it.
15. Changes to this policy
We may update this Privacy Policy as the service evolves. We will update the date at the top, and for material changes - especially any change to what we access in a connected inbox - we will notify you by email to the address on your account before the change takes effect.
16. Contact
Questions about this Privacy Policy, or want to exercise a data right? Email us at privacy@landearly.com.