Last Updated: September 23, 2026 • Effective Date: September 23, 2026
Google API Services User Data Policy Disclosure
ArticlO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We specifically request access to https://www.googleapis.com/auth/gmail.send solely to transmit job applications and professional communications explicitly authored and initiated by you within your campaigns. We never read your personal emails (we do not request or use read/inbox scopes), we do not store your private inbox messages, we never sell your data, and we never use your Gmail data to train generalized AI models.
1. Information We Collect & How It Is Handled
When you use ArticlO, we collect and store only the data necessary to provide and operate our career application and correspondence platform:
Account Profile: Name, email address, profile photo, and Google account identifier (to authenticate your session).
Google OAuth Tokens: Encrypted access and refresh tokens provided via official Google OAuth consent to send messages on your behalf when you launch a campaign. Tokens are isolated by PostgreSQL Row Level Security (RLS).
Contact & Template Data: Recipient lists (CSV files) uploaded directly by you (names, email addresses, companies, roles) and application email templates and resume attachments authored by you.
Delivery Status Logs: Timestamps, delivery status (queued, sent, failed), recipient addresses, and system error codes for delivery monitoring.
Permanent Suppression Registry: Email addresses of recipients who have opted out via unsubscribe links, stored permanently to ensure they are never emailed again.
2. Strict Prohibition of Email Warming
Email Warming Is Strictly Prohibited on Google Accounts: In compliance with Google API User Data Policy and Anti-Spam Guidelines, ArticlO does not provide, operate, or permit email warming services, automated engagement manipulation, or simulated conversations on any Google or Gmail-connected accounts.
Our server-side dispatch engine and background queue processors enforce strict provider checks. Any attempt to queue or execute an email warming job on a Google account is automatically rejected, flagged, and permanently cancelled.
3. Anti-Spam Policy, Recipient Consent & No Lead Sourcing
ArticlO enforces strict anti-spam standards across all features:
No Lead Databases: ArticlO does not sell, rent, scrape, or distribute recipient email addresses, recruiter databases, or lead lists. Sample files provided in the application are strictly RFC-compliant demonstration templates (using .example.com domains).
Mandatory Recipient Consent: Users are required to confirm that their recipients are verified contacts who have consented to receive professional communications or with whom the user has a legitimate employment or business interest.
Server-Side Unsubscribe Suppression: All campaign emails include an unsubscribe mechanism. Once a recipient unsubscribes, their address is permanently added to our multi-tier suppression registry (Memory, JSON, Redis, and Supabase). The platform strictly blocks future sends to suppressed recipients across all campaigns, background queues, direct sends, and new CSV imports.
4. How We Use Your Information
We use your information exclusively for the following purposes:
Pacing and dispatching your user-initiated email campaigns through the native Gmail API at a controlled rate (2 emails/second) to stay within Google API quotas.
Providing real-time tracking of email delivery statuses (queued, sending, sent, failed) via Supabase Realtime.
Polishing your cover letter templates using Google Gemini AI upon your explicit request.
Enforcing opt-out and unsubscribe requests to ensure full compliance with CAN-SPAM and GDPR.
5. Data Security & Storage
We implement industry-standard administrative, physical, and technical safeguards. All communications with our servers, Supabase PostgreSQL, and Google APIs use TLS 1.3 encryption. Your Google OAuth tokens are stored securely in database rows protected by PostgreSQL Row Level Security (RLS) policies, ensuring only your authenticated user account can access them.
6. Data Sharing & Third Parties
ArticlO does not sell, rent, or lease your personal data or your contact lists to third parties. We share data only with trusted service providers essential for platform operations:
Google APIs: For email transmission via Gmail API and cover letter drafting via Google Gemini AI.
Supabase: For managed, encrypted PostgreSQL hosting and real-time WebSocket state management.
Redis (Upstash): For ephemeral message queue state and rate-limiting.
7. Your Rights & Data Deletion
You maintain complete ownership of your data. You may delete any contact, campaign, or disconnect your Google account at any time directly through the ArticlO dashboard or via your Google Account Security permissions. Upon disconnection, your OAuth tokens and campaign data are permanently purged from our systems.
8. Contact Us
If you have any questions regarding this Privacy Policy or ArticlO’s privacy practices, please contact us at: