Trust & Safety

What we never do.

LandEarly is an auto-apply tool: it applies to jobs on your behalf. That kind of trust has to be earned with specifics - not reassurances. This page describes exactly what the product does and the three hard limits built into the code.

Enforced automatically
Every application
No override

01NeverInvent experience you don’t haveAnti-fabrication gate 02NeverOpen your non-job emailHeaders to sort, job mail only 03NeverSpam companies on your behalfPer-company caps

The mechanism

Three commitments, backed by code.

Not policies you have to take on faith - limits enforced inside the product itself. Here is exactly how each one works, and what it looks like when it fires.

01Never

We never invent experience you don’t have.

Every bullet on your tailored resume must trace to something you actually wrote in your profile. Before any tailored document ships, an anti-fabrication gate resolves each line back to a real profile entry and checks every number in it against that entry. If a claim can’t be sourced, the gate rejects it and the tailoring runs again until it passes.

Skills you didn’t list cannot appear. Numbers you didn’t supply cannot be invented. This runs inside the tailoring loop - not as a review step - and the review screen tells you how much of the draft is grounded before you approve it.

Enforced inside the tailoring loop

Anti-fabrication gate

“Owned the CI/CD pipeline end to end - deploy time went from 25 minutes to 15.”

Traced to

Profile → ExperienceSenior Engineer, Northwind - “Owned CI/CD pipeline; deploys went from 25 min to 15 min.”

Every number in the line appears in that entry - the document ships.

Checked on every attempt: the line resolves to a real profile entry · every number in it appears in that entry · every skill is one you listed.

02Never

We never open your non-job email.

Connecting your inbox lets LandEarly detect replies and interview invites from companies you’ve applied to. The scan reads header fields only - who sent it, the subject line, when it arrived. That is enough to tell a recruiter reply from a rejection, and to tell job mail from everything else.

In your inbox, a message body is opened in two cases, and both are job mail: the security-code email an employer’s site sends while one of your applications is waiting on it - only messages from the last few minutes that come from an applicant-tracking system or carry a verification subject - and job alerts from LinkedIn, Indeed, ZipRecruiter and Glassdoor, which are read for their job links. Nothing from a message in your inbox is written to our database - the jobs in an alert are public listings, kept as jobs, not as mail.

Mail sent to your LandEarly application address is a different thing. An application can go out with an address on our own mail domain, one per employer, and what that employer sends there comes to us first: we forward every message to you, read a waiting security code from it, and keep it 30 days so it reaches you, then only who sent it, the subject and the date.

You can disconnect your inbox at any time from Settings. Disconnecting deletes the stored token outright and stops all scanning.

Headers to sort, bodies only for job mail - nothing from your inbox is stored

Inbox scope requested

Sender and domain: Read
Subject line: Read
Message body: Security codes and job alerts only
Attachments: Never opened
Sending mail & contacts: Not requested

Connected read-only - it can’t send, change or delete anything. The access allows more than we use: a body is opened only for a waiting application’s security-code email or a job alert. Inboxes connected before August 20, 2026 still hold the headers-only scope.

Either way, no subject, body, snippet, or sender name from your inbox is ever written down - the outcomes table has no column for one.

03Never

We never spam companies on your behalf.

Per-company application caps are enforced before any application is sent. You cannot have more than 3 active applications at the same company in a rolling 30-day window - not as a soft warning, but as a hard block on the submission action.

LandEarly never emails an employer about an application: follow-up drafts come to you, to send yourself if you choose. Networking notes to people at a company are capped too - 2 conversations per application, 5 a day unless you change it, and one follow-up per note, which stops the moment they reply. In draft mode, the default, nothing goes out until you send it - the note, or the one follow-up we draft after 4 business days of silence. Switch outreach to send mode and LandEarly sends both for you: the note after a 2-minute undo window, the follow-up unless you skip it.

Hard block on the submission action

Per-company cap · rolling 30 days

Acme Robotics3 of 3 used

Cap reached - the next submission is blocked before it’s sent

Northwind Systems1 of 3 used

Clear to apply - 2 remaining this window

Application follow-ups go to you, never to the employer. Networking notes: capped per application and per day, one follow-up each.

Those limits are in the code, not the copy. See them run on your own search.

Get started

Data

What we store - and what we don’t.

Every piece of data exists to do one job: give the tailoring engine a verified source to draw from. Nothing is collected to profile or sell you.

What we store

Your profile

Work history, education, skills, and preferences you enter - the verified source the anti-fabrication gate runs against. It is never supplemented with information from other sources.

Application records

Which company, which role, what status - so you can track everything in one place. Submission screenshots are kept as evidence of what was sent.

Email metadata, if connected

The sender domain, the outcome we classified, and a pointer to the message in your own mailbox - enough to move an application to “interview”, “offer” or “rejected”. Revoke access any time from Settings.

Mail to your application address

When an application went out with your LandEarly application address, what that employer sends to it: forwarded to you every time, kept 30 days so it reaches you, then cut down to who sent it, the subject and the date.

What we never store

Subjects or bodies from your inbox

A message in your inbox is classified in memory and dropped. The outcomes table has no column for a subject, a body, a snippet, or a sender’s name - there is nowhere to put one.

Browsing history

LandEarly is a job application agent, not an ad platform. There is no tracking of what you do outside the product.

Anything sold or used for ads

The data you provide stays within the product. It is not sold, and it is not used to target you with advertising.

Your controls

You can check the work, and stop it.

Each limit above has a control you can see and use - not a support ticket you have to file.

See what’s grounded before you send

The review screen counts how many tailored bullets trace back to a bullet you already had, and flags any new line it couldn’t match - so you check it before approving, not after.

Disconnect your inbox instantly

One action in Settings deletes the stored OAuth token outright and switches the connection off, so the next scan skips you entirely.

One credit per application, charged once

A credit is spent when your tailored resume, cover letter and answers are generated - that is the work you keep, whether or not the posting is still open when the form is driven. Driving the form spends nothing more, and nothing is ever charged twice.

Go deeper