Privacy Policy

1.About this policy

This policy covers Tovrenly AI, its web application and its Chrome extension. Tovrenly helps you find jobs, manage applications, prepare documents and fill application forms.

Tovrenly AI is operated by Zain Ul Abideen, an individual based in Lahore, Pakistan, who decides how your personal information is used and is responsible for it (the “controller”). For privacy questions or a request about your personal data, contact hello@zayne.dev.

2.Information we collect

• Account information: your name, email address, password hash, account verification records and the date and policy version you accepted. We store a password hash rather than your readable account password.
• Profile and documents: information you enter or upload, including contact details, location, work history, education, skills, work authorization, job preferences, professional links, salary preferences and saved application answers. This includes resumes, extracted resume text, cover letters and generated documents.
• Job search activity: saved jobs and their URLs, job descriptions, match scores, application records, run progress, form questions, answers and application outcomes.
• AI interactions: prompts, chat messages, relevant profile or resume information and the answers or documents generated for you.
• Connected mailboxes, if you enable them: the connected email address, access credentials and job-related messages, including sender, recipients, subject, date, identifiers and a stored text excerpt. See the mailbox section below.
• Purchases, if you buy a paid plan: Paddle, our payment provider, collects your payment details. We receive your plan, billing period, payment and refund status, billing country, receipt identifiers and the email used at checkout, never your full card number.
• Technical and security information: IP address, browser information, account and extension identifiers, authentication events, usage counters, request and error logs, and records used to detect failed sign-in attempts and abuse.
• Optional sensitive answers: information you choose to enter about disability, ethnicity, gender, veteran status or other sensitive application questions. You can leave these answers unset or remove saved answers. Avoid including information that is unnecessary for your application.

3.Chrome extension access

When you use the extension to save or score a job, fill a form, draft an answer or start an application run, it reads relevant job-page text, the page URL, form labels and fields, and application status. Relevant information is sent to your Tovrenly account and, where an AI feature is used, the AI providers described below.

Browser permissions let the extension work on employer and job-board websites, including embedded forms, and open or manage tabs for runs you start. It stores the app address, an account access token and preferences in Chrome storage, and temporary run state in session storage. Tokens are used to connect the extension to your account.

The extension processes pages associated with features you invoke and application runs you start. It does not collect a general browsing-history feed or read passwords from employer websites. You can stop a run, disconnect the extension in Settings, remove site access in Chrome or uninstall the extension.

4.How we use information

• Provide and manage your account, profiles, document library and saved answers.
• Find and compare jobs, score matches, prepare resumes and cover letters, draft answers and assist with application forms.
• Track application progress and, when enabled, organize job-related mailbox messages.
• Send account verification, password reset and other service-related emails, and respond to support and privacy requests.
• Give you access to a paid plan, and handle billing questions, cancellations and refunds.
• Protect accounts, enforce usage limits, troubleshoot errors and maintain the service.
• Respond to applicable legal obligations and lawful requests.

5.AI processing

AI features send the information needed for the task to Google Gemini or, when configured, OpenAI as an alternative or fallback. Depending on the feature, this can include your profile, resume text or uploaded document, job description, form questions, saved answers, prompts and chat history. Generated results may be saved in your account.

AI providers process submitted information under their API terms and data policies. Google distinguishes paid and unpaid Gemini services: unpaid services may use submitted content to improve products and models and may involve human review; paid services do not use prompts and responses to improve products, but may retain them for safety and legal purposes. See Gemini API terms and OpenAI API data-use information. This policy does not promise zero retention by an AI provider.

AI output can be incorrect. Review generated documents and answers before using them. Final submission remains under your control by default; an application run may submit when you explicitly enable automatic submission.

6.Optional Gmail and IMAP connections

Mailbox access is optional. With your permission, Gmail is accessed using a read-only scope to retrieve inbox messages matching job-search terms and recruiting senders. IMAP connections use the mailbox settings and credentials you provide to retrieve messages for job-search tracking. Messages matching these filters can sometimes include unrelated content.

We store message metadata and up to 1,500 characters of message text. When rules cannot classify a job-related message, its sender, subject and up to 700 characters of text may be sent to the configured AI provider to classify it. Mailbox connection screens disclose this use before you connect.

Tovrenly AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use mailbox information to provide your job-search tracking features; we do not sell it, use it for advertising or use it to train our own generalized AI models.

Disconnecting a mailbox deletes its stored credentials and synced messages from the active application database. For Gmail, the service also attempts to revoke Google access. You can independently revoke access through your Google Account. Information already included in application records or backup copies may remain under the retention rules below.

7.Who receives information

• Microsoft Azure: application hosting, database and file storage, and operational logs and monitoring.
• Google: Gemini AI processing when configured, and Gmail access if you connect a Gmail account.
• OpenAI: AI processing when configured as an alternative or fallback.
• Hostinger: delivery of account emails, including the recipient address and email contents.
• Paddle: checkout, payment, sales tax, receipts and refunds for paid plans, as our reseller and Merchant of Record. Paddle handles payment details under its own privacy policy.
• Your connected mailbox provider: authentication and message retrieval for an optional IMAP connection.
• Employers and application platforms: information you place in their forms or submit through application features. Those organizations handle received information under their own privacy policies.

We may also disclose information where required by law or where necessary to investigate abuse or protect accounts and the service. We do not sell personal information or share it for targeted advertising.

8.Where information is processed

We run the service from Lahore, Pakistan. Our hosting, AI, email and payment providers may store or process information in countries other than the country where you live. Their processing locations and retention practices depend on the service and configuration in use. Contact hello@zayne.dev for questions about the handling of your information.

9.Retention and account deletion

We retain account, profile, document and application information while your account exists, unless you delete individual records using available controls. Connected mailbox messages remain until you disconnect the mailbox or the account is erased. Technical and security records are retained for service operation, troubleshooting and abuse prevention.

Requesting account deletion starts a 30-day grace period and revokes existing sessions and extension pairings. Signing in during the grace period cancels the request. After that period, erasure occurs when the service next processes access to the account; deletion is not guaranteed to occur exactly on day 30. Contact hello@zayne.dev if you need help with an outstanding deletion request.

Account erasure removes the active account records and associated stored files. Backup and soft-deleted copies can remain until the hosting provider's configured retention expires. Information already submitted to an employer, and information retained separately by an AI or email provider, is subject to that recipient's policies.

10.Your choices and data requests

You can edit your profile and saved answers, delete documents using available controls, disconnect a mailbox, revoke extension pairings, export account data and request account deletion in Settings. Removing the extension stops its browser access but does not delete your Tovrenly account or information already saved there.

Depending on applicable law, you may have rights to access, correct, export or erase your information, restrict or object to processing, or withdraw consent. Send a request to hello@zayne.dev. We may need to verify your identity before releasing or deleting account information. You may also contact your local data protection authority.

11.Security

We use HTTPS for the public service, password hashing, encrypted stored mailbox credentials, access controls and revocable extension tokens. These safeguards reduce risk but cannot guarantee that every system or transmission is secure. Report a suspected privacy or security issue to hello@zayne.dev.

12.Cookies and browser storage

The web app uses cookies for account sessions and temporary mailbox authorization, and browser storage to remember preferences such as your theme. The extension uses Chrome storage for its connection settings, access token, preferences and run state. We do not use advertising cookies. Operational server and hosting logs may still record requests and errors.

13.Minimum age

Tovrenly is intended for users aged 16 and older. If you believe a younger child has provided personal information, contact hello@zayne.dev so we can investigate and remove it.

14.Changes to this policy

Updates are published on this page with a revised date. New features or changes to data handling will be reflected here and in relevant in-product disclosures. For questions about this policy or a proposed new use of your data, contact hello@zayne.dev.