Trust & Safety

What we never do.

LandEarly is an auto-apply tool: it applies to jobs on your behalf. That kind of trust has to be earned with specifics - not reassurances. This page describes exactly what the product does and the three hard limits built into the code.

Enforced automatically
Every application
No override

01NeverInvent experience you don’t haveAnti-fabrication gate 02NeverRead your non-job emailHeaders-only scope 03NeverSpam companies on your behalfPer-company caps

The mechanism

Three commitments, backed by code.

Not policies you have to take on faith - limits enforced inside the product itself. Here is exactly how each one works, and what it looks like when it fires.

01Never

We never invent experience you don’t have.

Every bullet on your tailored resume must trace to something you actually wrote in your profile. Before any tailored document ships, an anti-fabrication gate resolves each line back to a real profile entry and checks every number in it against that entry. If a claim can’t be sourced, the gate rejects it and the tailoring runs again until it passes.

Skills you didn’t list cannot appear. Numbers you didn’t supply cannot be invented. This runs inside the tailoring loop - not as a review step - and the review screen tells you how much of the draft is grounded before you approve it.

Enforced inside the tailoring loop

Anti-fabrication gate

“Owned the CI/CD pipeline end to end - deploy time went from 25 minutes to 15.”

Traced to

Profile → ExperienceSenior Engineer, Northwind - “Owned CI/CD pipeline; deploys went from 25 min to 15 min.”

Every number in the line appears in that entry - the document ships.

Checked on every attempt: the line resolves to a real profile entry · every number in it appears in that entry · every skill is one you listed.

02Never

We never read your non-job email.

Connecting your inbox lets LandEarly detect replies and interview invites from companies you’ve applied to. To do it, the app asks for the most restricted access each provider offers and reads header fields only - who sent it, the subject line, when it arrived. That is enough to tell a recruiter reply from a rejection, and it is all the scan ever requests. Nothing from a message is written to our database.

You can disconnect your inbox at any time from Settings. Disconnecting deletes the stored token outright and stops all scanning.

Headers only - nothing from a message is stored

Inbox scope requested

Sender and domain: Read
Subject line: Read
Message body: Not in scope
Attachments: Not in scope
Sending mail & contacts: Not requested

Connected with the metadata scope - headers and labels only. The body of a message isn’t readable at all.

Either way, no subject, body, snippet, or sender name is ever written down - the outcomes table has no column for one.

03Never

We never spam companies on your behalf.

Per-company application caps are enforced before any application is sent. You cannot have more than 3 active applications at the same company in a rolling 30-day window - not as a soft warning, but as a hard block on the submission action.

Follow-ups are capped at one per application by the database itself, and a draft is only ever sent after you approve it. This protects your reputation with employers and keeps LandEarly’s submissions credible on the receiving end.

Hard block on the submission action

Per-company cap · rolling 30 days

Acme Robotics3 of 3 used

Cap reached - the next submission is blocked before it’s sent

Northwind Systems1 of 3 used

Clear to apply - 2 remaining this window

Follow-ups: one per application, sent only after you approve the draft.

Data

What we store - and what we don’t.

Every piece of data exists to do one job: give the tailoring engine a verified source to draw from. Nothing is collected to profile or sell you.

What we store

Your profile

Work history, education, skills, and preferences you enter - the verified source the anti-fabrication gate runs against. It is never supplemented with information from other sources.

Application records

Which company, which role, what status - so you can track everything in one place. Submission screenshots are kept as evidence of what was sent.

Email metadata, if connected

The sender domain, the outcome we classified, and a pointer to the message in your own mailbox - enough to move an application to “replied” or “rejected”. Revoke access any time from Settings.

What we never store

Email subjects or bodies

A message is classified in memory and dropped. The outcomes table has no column for a subject, a body, a snippet, or a sender’s name - there is nowhere to put one.

Browsing history

LandEarly is a job application agent, not an ad platform. There is no tracking of what you do outside the product.

Anything sold or used for ads

The data you provide stays within the product. It is not sold, and it is not used to target you with advertising.

Your controls

You can check the work, and stop it.

Each limit above has a control you can see and use - not a support ticket you have to file.

See what’s grounded before you send

The review screen counts how many tailored bullets trace back to a bullet you already had, and flags any new line it couldn’t match - so you check it before approving, not after.

Disconnect your inbox instantly

One action in Settings deletes the stored OAuth token outright and switches the connection off, so the next scan skips you entirely.

One credit per application, charged once

A credit is spent when your tailored resume, cover letter and answers are generated - that is the work you keep, whether or not the posting is still open when the form is driven. Driving the form spends nothing more, and nothing is ever charged twice.

Go deeper