Legal

Privacy Policy

Applies to: CVDesigner Outreach Hub (the "Application"), operated by CVDesigner ("we", "us", "our").

This Privacy Policy explains what information CVDesigner Outreach Hub collects, why, and how it is used, stored, and protected. It applies to two groups of people:

Authorized Users — CVDesigner team members who sign in to the Application and connect their own Gmail account to send outreach on the company's behalf.
Outreach Recipients — individuals whose professional contact details appear in our sourcing database and who may receive outreach emails sent through the Application.

1. Information we collect from Authorized Users via Google

When an Authorized User connects a Gmail account through Google Sign-In, the Application requests the following Google permissions ("scopes"). We request only what is needed to operate the outreach sending and reply-tracking features, and nothing more.

Scope	Google's description	What we use it for
`gmail.send`	Send email on your behalf	To send outreach, follow-up, and campaign emails from the connected mailbox, so messages come from a real, identifiable company sender rather than a shared system address.
`gmail.readonly`	View your email messages and settings	To detect when a recipient replies or when a message bounces, using Gmail watch/history notifications, so that the Application can automatically stop sending further follow-ups to that recipient.

What we do not do with this access: We do not read or store the full body of a connected user's personal or unrelated emails. When a staff member opens a reply thread inside the Application, the message is read live from Gmail at that moment; it is not copied into our database. We do not use Gmail access to send unsolicited email unrelated to CVDesigner's own recruitment outreach, and we do not sell, rent, or use this data for advertising.

CVDesigner Outreach Hub's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. Information we collect about Outreach Recipients

For individuals in our outreach contact database (sourced from CVDesigner's Career Board sourcing process), we hold professional contact information such as:

Full name
Primary and, where available, secondary email address
Professional designation and current or most recent employer
Years of experience and general location

This information is sourced from candidate submissions to CVDesigner's Career Board and is not obtained through a connected user's personal Gmail account.

3. How we store information

Contact records and campaign/outreach status are stored in a private database (Google Cloud Firestore). Imported contact files (CSV/spreadsheet uploads) are held in a private Google Cloud Storage bucket during import. Access to this data is restricted to authorized CVDesigner staff for the purpose of operating outreach campaigns.

4. AI-assisted drafting

The Application can use an AI language model to help draft outreach message text. Where this feature is used, relevant campaign or contact details necessary to draft the message may be processed by the AI model for that single purpose. Drafts are reviewed by our team before any message is sent; the AI model does not have independent access to a connected Gmail account.

5. How we use this information

To operate and monitor outreach campaigns through connected sender accounts
To detect replies and bounces so that a recipient who has responded, or whose address is invalid, is not sent unnecessary further messages
To maintain an internal record of what was sent, to whom, and when, for accountability and quality control
To honour unsubscribe requests and keep recipients who have opted out from being contacted again

6. Sharing of information

We do not sell or rent personal information. Information is not shared with third parties except: (a) with service providers that host or process data on our behalf under confidentiality obligations (such as Google Cloud infrastructure and Google Gmail/Gemini APIs used to operate the Application), or (b) where required by law.

7. Data retention

Contact and campaign records are retained for as long as needed to operate outreach responsibly and are periodically reviewed. An Outreach Recipient may request removal from our contact database at any time (see Section 9).

8. Revoking Google account access

An Authorized User can disconnect their Gmail account from the Application at any time from within the Application's Sender Accounts settings, or directly through their Google Account's third-party access settings. Once disconnected, the Application can no longer send email from, or check replies on, that mailbox.

9. Your choices as an Outreach Recipient

If you have received an outreach email from us and do not wish to be contacted again, you may reply to the email indicating this, or contact us using the details below; we will update our records so that no further outreach is sent to you.

10. Security

We restrict access to contact and account data to authorized CVDesigner staff, rely on Google Cloud infrastructure for hosting, and use Google's OAuth 2.0 sign-in flow to connect Gmail accounts — meaning we never see or store a connected user's Gmail password.

11. Children's privacy

This Application is intended for business recruitment outreach and is not directed at children. We do not knowingly collect information from individuals under the age of 18 through this Application.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the Application's functionality or legal requirements. The "Applies to" statement at the top of this page reflects the current version.

13. Contact us

Questions about this Privacy Policy or requests relating to your data can be sent to d@cvdesigner.in.