Privacy Policy

Last updated: September 2026

Finance Recruiting Agent ("the application") is a personal tool built and operated by Jimmy Paulo for his own finance internship recruiting. It is not a public product, has no other users, and this policy describes exactly what it does and does not do with any data it touches.

Google API scope

The application requests exactly one Google OAuth scope: https://www.googleapis.com/auth/gmail.send. This scope allows the application to send an email as the authorized Gmail account. It does not allow, and the application does not request, any broader Gmail permission - it cannot read, search, list, modify, or delete any message, label, or setting in the Gmail account. No other Google API or Google account data (contacts, calendar, drive, etc.) is accessed.

How Google user data is used

The gmail.send permission is used for exactly one purpose: sending recruiting outreach emails that Jimmy has personally reviewed and authorized through the application. Every email sent this way is one Jimmy chose to send, to a recipient he chose, with content he reviewed beforehand. The application never sends anything automatically or without that explicit authorization.

This application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What is not collected or accessed

• No Gmail inbox content is ever read, searched, or stored.
• No Google Contacts, Calendar, Drive, or other Google account data is accessed.
• No advertising, tracking, or analytics scripts run on this site or within the application.
• No user data is sold, rented, traded, or shared with any third party for any purpose.

Data storage and security

OAuth credentials (the Google client secret and refresh token) are stored only in a private, local environment configuration file on Jimmy's own machine. They are never committed to the application's source code repository, never logged, and never included in any report, error message, or output the application produces.

Recruiting research data (firm and contact information gathered from public sources) is stored locally for Jimmy's own use in his job search and is not published, sold, or shared.

Changes to this policy

Since this is a personal, single-user tool, this policy will only change if the application's actual behavior or Google API usage changes. Any change will be reflected on this page.

Contact

Questions about this policy: jimmypaulojr@gmail.com