This document is published in English only. The English text is the binding version.
Last updated: 27 October 2026
This policy covers Jobfinder, our job-search app at jobfinder.ctoteachings.com, and the Jobfinder connector your own AI assistant uses. It is separate from, and more specific than, the CTO Teachings website privacy policy, which covers our consulting business. CTO Teachings LLC is the controller of the information described here. Your use of Jobfinder is also governed by the Jobfinder Terms of Use.
Jobfinder keeps your professional profile, the job sites you want searched, the jobs your assistant finds, and the résumés it drafts for you. Today Jobfinder itself runs no AI model (we may use AI services to sort mail sent to a Jobfinder address, as described below). The reading, searching, matching and writing are done by the AI assistant you connect (for example Claude or ChatGPT), which reads and writes your Jobfinder data through the connector you authorise.
Account information, from Google Sign-In. Signing in with Google is the only way to use Jobfinder today. We receive Google's identity token only — no access or refresh token and no extra permissions — and from it we store your email address, your Google account identifier, your display name and the URL of your Google profile picture. We do not copy the picture itself. We also record which version of the Terms of Use you accepted and when, and any roles on your account.
Your job-search profile. Against your account we store what you and your assistant save in Jobfinder:
Résumé PDFs. When a résumé draft is saved, our server prints it to a PDF and stores it in a private Google Cloud Storage bucket that is not publicly readable. Only you, signed in, can download it.
Your Jobfinder email address and the mail it receives. During setup you choose either a Jobfinder address (name@jobfinder.ctoteachings.com) or your own Gmail address for your job search. If you choose a Jobfinder address, we keep the address you picked, which choice you made, whether you allowed a bounce to name you, and when you last used Jobfinder. We receive, store and automatically process all mail sent to that address, including with AI services: the whole original message, with its attachments, is stored in a private Google Cloud Storage bucket, and its sender, subject, text, attachment names, the job we matched it to and its category are stored with your account, so that we can sort it and match it to your jobs. Mail sent to your address is received by Cloudflare, which routes it to our servers. If you choose your Gmail instead, we receive none of your mail.
Job sites and problem reports. Jobfinder keeps a shared catalogue of job websites. If your assistant adds a site or reports a problem with one, that entry joins the catalogue other users see; a site entry contains no information about you.
Your AI connection. When you connect an assistant, we store the authorisation that lets it use your Jobfinder account and when you connected it.
Diagnostic information. When something fails in the website, it reports the error to Sentry, our error-reporting provider, including the error, the page, the app version, and your account identifier, email address and display name so we can find the problem. For a session that hits an error, Sentry's session-replay feature records a reconstruction of what was on screen, including text and anything you typed in that session. Ordinary sessions are not recorded. Our servers also keep operational logs of requests, which include your account identifier.
The connector gives the assistant you authorise access to your Jobfinder profile, preferences, experience and facts, questions, matched jobs, résumé context and the mail your Jobfinder address received, so that it can do the work for you. That assistant is run by its own provider (for example Anthropic or OpenAI), not by us, and what it does with the information is governed by your agreement with that provider. Anything you show your assistant from outside Jobfinder, such as a CV file, is read by the assistant; Jobfinder receives only the facts it saves. You can remove the connector at any time in your assistant's settings, or ask us to revoke it.
Jobfinder does not access your Gmail, contacts, calendar, files or any other data in your Google account; the only mail we receive is mail sent to a Jobfinder address you chose. It does not upload files from your device, track your location, show ads, or use advertising identifiers. The website’s use of Google Analytics, and of the LinkedIn Insight Tag and the Meta Pixel to measure our own ad campaigns after you click OK, is described under “Website Analytics and the Consent Notice” below.
The Jobfinder website, ctoteachings.com and our other websites use Google Analytics 4, provided by Google, to understand in aggregate how visitors find and use them: which pages are viewed, which links to our products are followed, and whether key steps such as signing up, finishing setup or sending an enquiry succeed. We never send Google your name, email address or account ID. Google Analytics runs in Google’s consent mode: before you click OK on the notice shown on your first visit it sets no analytics cookies and sends Google only cookieless signals. After you click OK it sets first-party cookies (_ga and _ga_*) on ctoteachings.com and its subdomains, and we remember your OK in a cookie named ctot_consent on the same domain for up to two years, so the notice does not appear again on any of our sites in that browser. Google processes this information under its own privacy policy, and you can opt out of Google Analytics on every site with Google’s browser add-on.
Ad measurement: the LinkedIn Insight Tag and the Meta Pixel. Only after you click OK on the notice, our websites may also load the LinkedIn Insight Tag (LinkedIn) and the Meta Pixel (Meta Platforms); neither is loaded before that, and neither is ever loaded inside the LangLearn mobile app. We use them for ad measurement and retargeting: to count how many people who saw or clicked one of our ads went on to visit our sites, follow a link to one of our products, sign up or send an enquiry, and to show our ads again to people who have visited. They record the pages you view and those steps, and may set cookies such as Meta’s _fbp. We never send LinkedIn or Meta your name, email address or account ID, but they may recognise you if you use their services in the same browser, so this measurement is not anonymous to them. They process it under their own privacy policies (LinkedIn, Meta).
The notice offers only OK because our services are free, and to stay that way we rely on this analytics and ad measurement. If you do not want it, please do not continue, or block Google Analytics, the LinkedIn Insight Tag and the Meta Pixel in your browser.
Anonymous notice counter. So we can tell how many visitors leave without clicking OK, each site also tells our own server when the notice is shown, when OK is clicked, and when a page is closed while the notice is still showing, with roughly how long it was shown as a range such as 3–5 seconds; our short links likewise count each click. That message contains only which of these happened, the site’s host name, the page path and, for a visit that arrived through one of our short links, that link’s code and page version: no identifier and no query string, and no cookie is read or stored with it. Like any request it reaches our server with an IP address, which our hosting provider logs for security; we do not combine it with anything else. These counts are kept in our server logs for about 30 days.
Short links and page versions. When you arrive through one of our short links (ctoteachings.com/a/…), the link sets a cookie named ctot_campaign that tells the page which campaign the link belongs to; the page deletes it as soon as it has read it, and it expires after two minutes in any case. If the link compares versions of a page, a cookie named ctot_exp_ plus the test’s name remembers for 30 days which version you were shown, so you see the same one if you return.
Your account and Jobfinder data are stored in Google Cloud Firestore in the United States, in a Google Cloud project we control, and résumé PDFs and the original mail your Jobfinder address received in Google Cloud Storage. Our servers run on Google Cloud Run, the website is served by Cloudflare, and mail to a Jobfinder address is received and routed by Cloudflare. When your Jobfinder address is paused after 30 days without use, we send you one notice through Brevo, our email-sending provider. Error reports go to Sentry. These providers may process information in countries other than yours; we take reasonable steps to keep it protected in line with this policy.
We use your information only to run Jobfinder for you: to sign you in, to keep your profile and results, to give your connected assistant what it needs, to print your résumés, to receive, sort and match the mail sent to your Jobfinder address, to keep the service secure, and to find and fix problems. We do not use it for advertising, we do not sell it, and we do not use it to train AI models.
We do not sell your personal information. We share it with the service providers that make Jobfinder work — Google (sign-in, Cloud Firestore, Cloud Storage, Cloud Run), Cloudflare (website hosting, and receiving and routing mail to a Jobfinder address), Brevo (the one notice when your address is paused) and Sentry (error reporting) — each processing it on our instructions. Your data goes to the AI assistant you connected because you authorised it. Jobfinder sends nothing to employers or job sites. Beyond that we disclose information only where we are legally required to, where it is necessary to protect our rights or someone’s safety, or to a successor entity in a merger or reorganisation of our business.
We keep your account and Jobfinder data, including résumé PDFs and the mail sent to your Jobfinder address, for as long as your account exists, because they are your job search. A Jobfinder address is never given to anyone else, even after your account is deleted; mail to it is then bounced. Firestore backups are kept for seven days, so deleted data leaves our backups within a week. Error reports are retained by Sentry, and server logs by Google Cloud, under their own retention schedules, on the order of weeks to months, not indefinitely.
Your assistant can remove experience entries and profile facts at any time. We will make a best effort to delete your account and data on request, including résumé PDFs and the mail sent to your Jobfinder address. Email [email protected] from the address you signed in with. You can also ask for a copy of what we hold about you, or for a correction. A site you added to the shared job-site catalogue stays in the catalogue, since it contains nothing about you.
Depending on where you live, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to withdraw consent, and to request a copy of your data. Email [email protected] or use our contact page and we will respond in line with applicable law. You can disconnect your AI assistant in its own settings, or sign out, at any time.
Jobfinder is for people aged 18 and over, and we do not knowingly collect personal information from children.
Sign-in and every request to our servers use encrypted connections. Résumé PDFs and the original mail sent to your Jobfinder address sit in private buckets that only our server can read. Access to production data is limited to the people who need it. No system is perfectly secure, but we work to protect your information and to limit who can reach it.
We may update this policy as Jobfinder changes. When we do, we will revise the "Last updated" date above, and the change takes effect once posted on this page.
Questions about this policy, a request to exercise your rights, or a request to delete your account: email [email protected] or use our contact page. The terms that govern your use of Jobfinder are in the Jobfinder Terms of Use.