Privacy Policy
Owtomate applies to jobs for you. To do that it holds your résumé, your details and a signed-in session on the job boards you use, and it sends parts of that to the AI models that write your applications. This page says exactly what is collected, who sees it, how long it stays, and how to have it removed. We follow the Australian Privacy Principles.
1. What we collect
Your account
When you sign in with Google we receive your name, email address, profile picture and Google account identifier. We ask Google for nothing else: no access to your Google Drive, calendar or mail.
What you tell us
Your profile: full name, phone number, suburb and postcode, work rights, an experience summary, skills, the roles, locations and pay you will accept, and any standing instructions you write for the agent. Your answers to employer screening questions are saved so you are not asked the same thing twice.
Your documents
The résumés and supporting files you upload, and the notes you attach to them. Text is extracted from them so the agent can read them.
Your job-board sessions
You sign in to SEEK and Indeed yourself, in a private browser window that runs on our server. That browser keeps your signed-in session, as cookies, in a profile that belongs to your account alone. We never see or store your job-board password. If you connect a Gmail mailbox by signing in to it in that same browser, the agent reads that mailbox to find the one-time codes some employer sites email before an application can be sent. Use a mailbox set up just for that: everything in it is readable by the agent for as long as it stays signed in.
What the agent does
For every application: the job, the employer, the cover letter written for it, the answers given, and whether it was sent. For every run: a log of what the agent did. For an application it could not finish: a trace with snapshots of the pages it was on, so you or we can see what went wrong.
Payments
Card details are entered on Stripe's checkout page and never reach us. We keep a record of each purchase: which pass, the amount, the date and Stripe's reference for it.
Your visit to this site
Which pages you open, how long they stay in front of you, your browser type, your IP address, and the country and city that address maps to. Location is worked out on our own server from a local database; your address is not sent to a third party for it.
Cookies
A session cookie that keeps you signed in for 30 days, a short-lived cookie that protects the sign-in handshake for ten minutes, and browser storage for preferences such as your theme. No advertising or tracking cookies.
2. What we use it for
- Finding jobs that match you, writing a cover letter for each, answering screening questions from your details, and submitting the application from your own job-board account.
- Showing you what was sent, what needs your attention, and how much of your allowance is left.
- An evening email summarising the day's applications, if you have one due.
- Taking payment for a pass and crediting it to your account.
- Understanding how the site is used, keeping it working, and stopping abuse.
We do not sell your information, and we do not use it to advertise to you.
3. Who else sees it
Only where it is needed to do the job above:
- Employers and job boards. The applications you asked us to send, under your name, through SEEK, Indeed or an employer's own site.
- AI model providers. To judge whether a job fits, answer a screening question or write a cover letter, the relevant job text together with the relevant parts of your résumé and profile are sent to Celeris and to Google's Gemini service. They process it to produce the answer and do not use it to train their models under the terms we hold with them.
- Google. For sign-in.
- Stripe. For payment.
- Resend. Delivers the evening summary email, so it receives your email address and the summary's contents.
- Our hosting provider. Runs the server everything above lives on.
Overseas disclosure. The AI model providers, Google, Stripe and Resend process data on servers outside Australia, in the United States among other places. By using Owtomate you consent to that, and you accept that the Australian Privacy Principles may not apply to those providers in the same way once the data is with them.
4. How long we keep it
- Your account, profile, documents, answers and application history: for as long as your account exists.
- Traces of unfinished applications: 14 days, then deleted automatically.
- Records of visits to the site: 180 days, then deleted automatically.
- Your job-board sessions: until you sign out of them in the app, or until your account is deleted.
- Purchase records: seven years, as tax law requires.
5. Deleting your account
Email support@owtomate.com from the address you signed in with, and we will delete your account within seven days. Deletion is complete: your profile, documents, answers, applications, run logs, traces, the browser profile holding your job-board sessions, and the visit records that named you are all destroyed. Purchase records are kept for the period above, without your documents or profile attached. Applications already sent to employers are theirs and cannot be recalled by us.
6. How we protect it
Everything travels over HTTPS. Each account's documents and browser profile are kept apart from every other account's, and a run can only ever reach its own account's files. Only the operator can see accounts other than your own, and every such access is through an administration page that checks that on each request. Sessions expire after 30 days and are ended immediately if an account is suspended.
7. Your rights
You can see everything we hold about you inside the app, and correct most of it there. For anything else, or to ask what we hold, write to us at the address below and we will answer within 30 days. If you think we have mishandled your information, tell us first; if you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
8. Age
Owtomate is for people aged 18 and over who are looking for work in Australia. We do not knowingly collect information from anyone younger.
9. Changes
If this policy changes in a way that matters to you, we will show the change in the app before it takes effect. The date at the top is the date of the current version.
10. Contact
Owtomate is operated from Sydney, Australia. Privacy questions and deletion requests go to support@owtomate.com.