Privacy

Last updated October 24, 2026.

Accounts (Clerk)

Sign-in is handled by Clerk, Inc., our authentication processor. If you create an account, Clerk stores your email address, your name and profile photo if you sign in with Google, sign-in records (such as time, IP address, and device), and session cookies that keep you signed in. While you're signed in, we also save your BotMyJob profile (the fields on My profile, including writing samples) and, if you have Pro, your Whop membership ID to your Clerk account, so they follow you across devices. Your library, run history, and compliance log (including checks from the Chrome extension, if you have Pro) are also saved to your account in private storage on our host, Vercel (Vercel Blob), so they sync across devices. If you're on a Team, your compliance-log entries are also added to the team's shared log, which the team owner can see and export, with your email next to each entry. Team members can see each other's names and emails, and anything you share to the team library. Leaving or being removed from a team stops new entries from being added; entries already in the team log stay with the team owner. You can delete your account from the account menu (Manage account), which removes your Clerk sign-in and profile right away. To also remove your synced library, run history, and compliance log from Vercel Blob, email us; we delete them within 30 days of your request. Entries already in a team log stay with the team owner, and backups and provider logs may persist for a short time. Clerk processes this data under its own privacy policy.

Stored in your browser, not on our server

If you're not signed in, your saved library, run history, compliance log, profile, and writing samples live only in your browser's local storage. If you're signed in, they're also saved to your account, as above. We don't have a copy of what's only in your browser. Clearing your browser data deletes it.

When you click Run it here or Check

Your prompt or text is sent through our server to an AI provider (Claude via OpenRouter, and TypeSafe for the AI checker) to get a reply. We don't store the text or the reply, except that with Pro each check's log entry (time, the site or page, the first 280 characters, and the findings) is saved to your compliance log. The automatic check on AI drafts for regulated roles follows the same rule: everyone sees the results on the page, and only Pro saves a log entry. OpenRouter, TypeSafe, and the model provider may log or retain it under their policies; we don't control whether they use it for training. The compliance log is a convenience record. It isn't a substitute for your brokerage's required recordkeeping. Don't paste confidential, client or personal information you aren't allowed to share. Those providers process it under their own policies.

Resumes, LinkedIn PDFs, and your job details

When you build a dashboard from a resume or a LinkedIn PDF, our server reads the file in memory. We send the text to Claude via OpenRouter, routed only to Anthropic's own API and only to providers that don't train on prompts, to pull out five things: your job title, industry, seniority, main tasks, and the tools you use. We tell it to leave out your name, contact details, employers, schools, and dates. We never save the file or its full text. Both are gone when the request ends.

You see those five fields before anything is built, and you can change them. If you're signed in, we save the fields to your account (Clerk) and your dashboard cards to our private storage (Vercel Blob), linked to your account ID. If you're not signed in, they stay in your browser. Your job details and dashboard are sent to Claude the same way to write the workflows.

If you paste a LinkedIn link (only when signed in, and only for your own profile), we look it up through treg.to, which passes it to Apollo.io, a licensed business-data provider. We keep only the same five job fields from the answer. We don't log in to LinkedIn or read the page ourselves.

To see, change, or delete your job details and dashboard, go to My profile and use Delete. That removes them from your account and from this browser right away. You can also email us and we'll delete them within 30 days.

Slack

Pro users who are signed in can connect Slack to fill a workflow input, like team updates, from their channels. When you connect, Slack gives us a read-only token for your user with five permissions: list the public and private channels you belong to, read their messages, and look up member names. We can't post, react, or change anything in Slack, and we never do.

We encrypt the token (AES-256-GCM) and store it in our private storage (Vercel Blob), linked to your account ID. When you click Pull from Slack, we read only the channels and dates you pick, send those messages to Claude via OpenRouter to write a short summary with names and channels, and put the summary in the box for you to edit. We don't save the messages or the summary on our servers. They exist only for that request.

To disconnect, use Disconnect Slack on My profile. That revokes the token at Slack and deletes our copy. You can also remove BotMyJob from your Slack account under Settings, then Apps, and a workspace admin can remove it for everyone.

Google Calendar

If you sign in with Google and allow calendar access, BotMyJob gets read-only access to your primary Google Calendar (scope: calendar.readonly). We can't create, change, or delete events.

What we read. We read up to 25 events from the next 7 days for scheduled drafts, or the next 30 hours for meeting-prep suggestions. We use each event's ID, title, start time, the names of up to 5 other attendees (or names derived from their email addresses when no display name is available), and up to 200 characters of its description after removing HTML and normalizing whitespace. We skip cancelled events, all-day events, and events you declined.

How we use it. Only to write meeting prep sheets and related drafts, including weekly plans, in your agent inbox, when your agent runs on its schedule or when you open the app. To write a prep sheet, we send that event's details to Claude through OpenRouter (or directly to Anthropic when configured that way). Weekly plans can include details from multiple upcoming events.

What we keep. We don't save your calendar. When a prep sheet is made, the card in your agent inbox keeps the event title, start time, an event ID (so we don't make the same card twice), and the prep sheet text. Weekly-plan cards also keep the generated text drawn from calendar details. These are stored with your account in our private storage (Vercel Blob) until you delete the card, clear your inbox or agent data on What my agent knows, or ask us to delete the saved data. The inbox keeps up to 100 cards, so older cards may be removed as new ones arrive. Deleting your account does not automatically delete saved cards in Vercel Blob. Clerk, our sign-in provider, stores the Google access token; our server retrieves it to read your calendar but does not save its own copy.

Who we share it with. Clerk holds the connection token, Vercel hosts the app and saved cards, and OpenRouter and the model provider process event details to write your drafts. Drafts made from your calendar stay in BotMyJob: AI apps you connect to your agent (see Connected AI apps) can't see them. We don't sell Google data, use it for ads, or use it to train AI models. People don't read it unless you ask us to, for security, or to comply with law.

How to disconnect. Remove BotMyJob at Google Account connections, or delete your BotMyJob account. After that we can't read your calendar. To have saved cards deleted, email support@botmyjob.com and we'll do it within 30 days.

Limited Use. BotMyJob's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail

If you click Learn from my Gmail, while you set up your job agent or on What my agent knows, BotMyJob reads the email you sent so your agent learns how you work. It's optional, and you need to be signed in. We ask Google for read-only access (scope: gmail.readonly) through our sign-in provider, Clerk. We can't send, delete, label, or change any email, and we never do. Until Google finishes verifying BotMyJob, Google's consent screen warns that the app isn't verified, and Google lets at most 100 people connect.

What we read. Only when you click Learn from my Gmail, once each time: messages in your Sent mail from the last 30 days, up to 200. For each one we use the subject, the date, the display names of the people it went to (not their addresses), whether each went to a coworker, another company, or a personal address, and the text you wrote. We cut quoted replies and your signature, and keep at most 1,200 characters of each message. We skip attachments, calendar replies, and automatic replies. We don't open your inbox or other people's messages.

How we use it. Only to show you a short summary of how you work and some notes on the "Here is what I learned about you" screen: your role, the kinds of people you deal with (as types or counts, unless you tick "Keep customer names"), work you repeat, and how you write, including phrases you use often. Before the text goes to the AI, we remove anything that looks like a card number, Social Security number, password, bank or routing number, email address, or phone number. We send it in batches to Claude through OpenRouter, routed only to Anthropic's own API and only to providers that don't train on prompts. Your agent drafts. It never sends email.

What we keep. We never store your email. Messages are held in memory while we read them and dropped when the request ends. We keep only what you confirm on the review screen, the same as for uploads (see Show me your work), and each note says it came from Gmail. We also keep when you last used Learn from my Gmail, how many emails were read, and whether you disconnected, with no email content. Clerk stores the Google access token; our server retrieves it to read your Gmail and doesn't save its own copy.

Who we share it with. Clerk holds the connection token, OpenRouter and Anthropic process the email text to write the summary, OpenRouter's embedding model turns each note you save into an embedding (see Show me your work), and Vercel hosts the app and the notes you saved. The summary and notes you saved are part of your agent memory: they show on What my agent knows, they're in your downloads, and AI apps you connect and approve can read them (see Connected AI apps). We don't sell Gmail data or give it to data brokers, use it for ads, use it to decide anyone's credit or lending, or use it to develop, improve, or train AI models, ours or anyone else's. People don't read your email unless you ask us to, for security, or to comply with law.

How to disconnect and delete. On What my agent knows, click Disconnect Gmail. We stop reading it right away and ask Google to end BotMyJob's access. Google ends access for the whole Google connection, so if your agent used Google Calendar, you'll need to connect it again. You can also remove BotMyJob at Google Account connections. Disconnecting doesn't delete notes you saved: use Delete the notes from Gmail, delete any single note, or use Delete everything my agent knows. You can also email support@botmyjob.com and we'll delete them within 30 days.

Limited Use. BotMyJob's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

CRE file uploads

When you upload a rent roll, T-12, or lease, our server reads the file in memory to recompute totals. We don't keep the file after the request finishes. The free math check doesn't send the file to any AI provider. If you have Pro and ask for a draft, the extracted text is sent through our server to Claude via OpenRouter. For these drafts we tell OpenRouter to use only Anthropic's own API (no fallback to other hosts) and only providers that don't train on prompts.

What those companies say they do with it, per their published policies (checked October 20, 2026): Anthropic deletes API inputs and outputs within 30 days and lists itself as not training on them, but may keep content flagged under its Usage Policy for up to 2 years, or longer where the law requires. OpenRouter says it doesn't store prompts or responses unless the account opts in to logging, and it keeps request metadata such as token counts and timing. We rely on those policies; we don't have a separate zero-retention agreement with either company. Remove tenant names, SSNs, bank details, and other personal information you don't need before uploading.

Pro sign-in

If you enter a Whop membership ID or license key, we check it with Whop and set a signed cookie in your browser. If you're signed in, we also save the membership ID to your account so Pro works on any device you sign in on. The cookie holds your membership ID and status, not payment details. Payments are handled entirely by Whop.

Your job agent

If you set up the job agent, we store in your private account folder: your job title, tasks and times, the drafts in your Agent inbox, text you chose to send to your agent (capped at 6,000 characters each), a short list of writing preferences learned from your edits, which suggestions you dismissed, and, if you show it your work, a short summary and notes about how you work (see Show me your work). The page What my agent knows shows all of it and lets you download or delete it. If you connect Google Calendar, see Google Calendar. If you turn on the email digest, your drafts are emailed to your account address through Resend. On days it drafts something or hits a problem, the agent also adds one short recap card to your inbox listing what it drafted, what is waiting for you, and what it skipped; you can turn the recap off. The agent only drafts. It never sends, posts or books anything for you. Drafts pass through our server to the AI provider and back, like Run it here.

Show me your work

While you set up your job agent, or later on What my agent knows, you can upload up to 5 screenshots or files at a time (PNG, JPG or PDF, up to 10 MB each), or paste text (up to 20,000 characters), so your agent learns how you work. You can also let it read the email you sent, see Gmail. It's optional, and you need to be signed in.

What happens to the file. Your browser shrinks screenshots and pulls the text out of PDFs before anything is sent, so a PDF itself normally stays on your computer. For a scanned PDF, your browser sends a picture of the first page instead. If your browser can't read a PDF, the PDF is sent (only if it's under 4 MB). Our server holds each upload in memory while it reads it, sends it to Claude through OpenRouter, routed only to Anthropic's own API and only to providers that don't train on prompts, and drops it when the request ends. We never store the file, its full text, or the picture. We remove anything that looks like a card number, Social Security number, password, bank or routing number, email address or phone number from PDF text before it goes to the AI.

Pasted text. Text you paste goes to our server, has the same things removed, goes to Claude the same way, and is dropped when the request ends. We never store it.

What we keep. Only what you see and confirm on the "Here is what I learned about you" screen: a short summary of your work (your role, tools, customers and kinds of work, how you write, and work you repeat) and short notes, each with a date, a type and where it came from. Before you see anything, we drop any line that still looks like a card number, Social Security number, password, bank or routing number, email address or phone number. Unless you tick "Keep customer names", customer and contact names are swapped for counts or types, like "about 30 open orders, mostly restaurants". Nothing is saved until you click Save, and you can change or untick anything first.

How it's used. The summary is added to every draft your agent writes. For each draft, we turn the task and each note into an embedding (a list of numbers that describes the text) with OpenAI's text-embedding-3-small model through OpenRouter, routed only to providers that OpenRouter lists as not collecting prompt data, and add the 8 notes that fit the task best. Each note's embedding is saved with the note. The agent still only drafts. It never sends, posts or books anything.

Where it lives and how to delete it. The summary and notes are stored with your account in our private storage (Vercel Blob), linked to your account ID. Free keeps up to 200 notes and Pro up to 2,000. Past that, the oldest notes that matter least are deleted to make room. A plan change on its own never deletes notes. What my agent knows shows every note: delete one, delete all of them, change or delete the summary, or use Delete everything my agent knows. Downloads from What my agent knows, and AI apps you connect, include the summary and notes. Each file, each piece of pasted text, and each Gmail read counts as 1 upload. We keep a count of how many uploads you've used, with no content, so the Free limit of 5 uploads still holds after you delete. Deleting your account doesn't automatically delete these from Vercel Blob; delete them first, or email us and we'll delete them within 30 days.

Connected AI apps

You can connect your job agent to another AI app, such as Claude or ChatGPT, through our connector (an MCP server at botmyjob.com/mcp). Nothing is connected unless you sign in and approve it on our consent screen. A connected app can read your job title, time zone, plan, tasks, the drafts in your Agent inbox, your daily recap, your latest AI Opportunity Report from the work audit, and what your agent learned from your work (the summary and notes, including notes you saved from Gmail, see Show me your work). If you allowed it to act on drafts, it can also mark drafts used, save your edits, hide drafts, turn tasks on or off, ask for new drafts, and hand your agent notes. It can't see your voice samples, your saved details, or drafts made from your Google Calendar, and it can't send, post or book anything. For each connection we store the app's name, the address it returns to, what you allowed, when you connected and when it was last active, and a scrambled (hashed) copy of its refresh token, never the token itself. What the app does with what it reads is covered by that app's own privacy policy. Disconnect any app on What my agent knows and it stops working right away.

Chrome extension

If you use the BotMyJob Chrome extension, it reads text only on the page you're on and only when you click Check. That text is sent to botmyjob.com and, for the second opinion and suggested rewrite, to our AI providers (TypeSafe, and Claude via OpenRouter). We don't store the text you check, with one exception: with Pro, each check's log entry (time, the site, the first 280 characters, and the findings) is saved to your compliance log. The extension keeps a connection token, your rule-pack choices, and (with Pro) a log of your checks in Chrome's storage on your computer; with Pro, that log is also added to your account's compliance log. It never runs on LinkedIn. The extension's use of information it receives complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use page text only to run the check you asked for; we don't sell it, use it for ads, or let people read it except as needed for security, to comply with law, or with your permission.

Limits and logs

To enforce daily limits we keep short-lived counters keyed by IP address, membership ID, or (when you're signed in) your account ID. Our host (Vercel) keeps standard request logs.

Email list

If you sign up for email updates, your email is stored with our newsletter provider (Buttondown) and used only for BotMyJob updates. Every email has an unsubscribe link.

Age

BotMyJob is for adults using it for work. Don't use it if you're under 18. We don't knowingly collect data from children under 13.

No ad trackers

We don't sell your data or use advertising trackers.

Questions? For billing, use the support chat on your Whop order. Anything else: Email support (support@botmyjob.com).