Privacy policy

GradPack by UniSalad stores profile data, uploaded CV files, extracted CV text, generated application packs, billing identifiers, and audit logs needed to provide the service.

CVs and generated PDFs are stored privately. Downloads use signed URLs after an ownership check.

AI may make mistakes. Users must review all generated documents before submitting them.

The service uses trusted processors to run the product: Supabase for authentication, database, and private file storage; DeepSeek and/or OpenAI for AI generation; Apify for job-feed collection; Browser Use and browser automation providers for approved application assistance; Stripe for billing when payments are enabled; and Resend for transactional email when email sending is enabled.

CV text, profile details, application answers, and selected pack content may be sent to AI or automation processors only when needed to generate, review, or prepare a user-approved GradPack Drop. Passwords and saved site-login secrets must not be sent to AI prompts.

Users can delete their account data from settings. The product is not affiliated with employers or job boards and does not guarantee employment or interviews.

Gmail connection and Google user data

If a user chooses to connect Gmail, GradPack uses read-only Gmail access to search for job-application messages and retrieve the sender, recipient, subject, date, and short message snippet needed to recognise application confirmations, interviews, assessments, rejections, and other application updates. GradPack cannot send, modify, delete, label, archive, or move Gmail messages.

Gmail message results are processed on demand for the signed-in user and are not sold, used for advertising, or made public. GradPack stores the minimum OAuth connection information needed to maintain the connection; access and refresh tokens are encrypted at rest. Disconnecting Gmail revokes the Google token and deletes the stored Gmail connection.

GradPack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.