Career Ops is an open source tool that runs on your own computer. It reads your Gmail to find the mail your job applications generate, and it keeps what it finds in a database on your own disk. There is no server, no account, and nothing for me to collect.
I am the developer. I also happen to be its only user, but because the code is public anyone can run their own copy, so here is exactly what it does with data.
What it reads
Career Ops asks Google for one permission, gmail.readonly. That is read access to your mail, and it is the narrowest scope that lets the tool do its job. It cannot send mail, delete mail, or change anything in your account.
It does not read your whole mailbox. It runs a search restricted to the mail an application generates: messages from applicant tracking systems, and messages whose subject matches phrases like an application confirmation or an interview request. Personal mail that does not match is never fetched.
Where it goes
Onto your disk, and nowhere else. Matching messages are stored in a local SQLite database next to the program, alongside the companies and roles the tool works out from them. The classification that decides whether a message is an acknowledgement, a rejection, or noise runs entirely on your machine, with no network call.
Your mail is never transmitted to me, to this website, or to any third party.
I have no access to it. There is no telemetry, no analytics, no crash reporting, and no hosted component of any kind. If you delete the database file, the data is gone.
The one thing that does leave
If you configure an API key, Career Ops uses a language model to score how well a job fits you and to research companies. Those requests contain the text of public job postings and the profile you wrote about yourself, and they go to the API provider you configured, which for the default configuration is Anthropic. Their terms govern what happens to that request.
The contents of your email are not part of those requests. If you set no API key, the tool makes no calls to a language model at all, and the rest of it still works.
Other traffic
To find open roles, Career Ops fetches public job boards directly, the same pages you could open in a browser. Those employers see an ordinary web request. No identifying information about you is attached.
Revoking access
You can withdraw the Gmail permission at any time from your
Google account permissions
page. The tool stops working immediately; nothing already on your disk is affected. To
remove the stored credential locally, delete the token.json file.
Contact
Questions about any of this go to sunterbb@gmail.com. The source is on GitHub, so you are welcome to check that this page is accurate rather than take my word for it.