Privacy Policy

What we collect

We only collect what we need to run your job-search outreach:

• Account: your email address, chosen language and sign-in records (one-time codes expire after 10 minutes).
• Profile: the name, headline, target roles, countries, languages, skills, summary and links you enter.
• Campaigns: targeting, message drafts, approvals, sent messages, replies and contact statuses.
• Company and contact data: public job postings from company career pages (applicant tracking systems such as Greenhouse, Lever, Ashby, Workable, SmartRecruiters and Teamtailor), and business contact details from data providers (Hunter, Prospeo). We verify business email addresses with our own mail-server check.
• Technical: the IP address and timestamps of security-relevant actions, kept in an audit log.

Gmail and other mailboxes

If you connect Gmail, we request only the gmail.send permission. We use it solely to send the messages you have approved, from your own mailbox. We do not read, search, index or delete your emails.

We do not use Gmail data for advertising, do not sell it, and do not use it to train general AI models. People at GlocalPath do not read it, except with your explicit consent, for security reasons or where the law requires.

GlocalPath's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Replies reach GlocalPath only through a forwarding filter you set up yourself, or when you mark a reply manually.

How we use data

To find relevant companies and people, draft messages for your approval, send approved messages, show replies and results, bill you and keep the service secure. Every outgoing message requires your approval.

Who we share data with

We do not sell personal data. We use processors only to run the service: hosting, email delivery (Resend for sign-in codes), contact data providers (Hunter, Prospeo), AI model providers to draft and score messages, and a payment provider. Each processes data only on our instructions.

How long we keep it

We keep your data while your account is active. When you delete your account, we delete or anonymize your profile, campaigns and messages within 30 days. We keep a minimal record of contacted addresses and a one-way hash of mailbox addresses to honor opt-outs and prevent abuse of the free plan. Backups roll over within 30 days.

Your rights (GDPR and KVKK)

You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent at any time. You can disconnect your mailbox at any time, which immediately stops sending.

To export or delete your data, email [email protected] from your account address. We answer within 30 days. You may also complain to your data protection authority (in Türkiye, the KVKK Board).

If you are contacted through GlocalPath and do not want to be, reply to the message or write to us and we will not contact you again.

Security

Mailbox tokens are stored encrypted, connections use TLS, and access to production data is limited and logged.

Contact

Questions about this policy: [email protected].