# Security - Job Beast

Security

# How We Handle Your Data

Job Beast processes your resume and integrates with your email on terms _you_ control. Here’s exactly what we access, what we don’t, and how everything is protected.

## Email Integration

*   **We can’t read your inbox.**Job Beast holds no key to your mailbox — only emails you explicitly hand to us reach our servers.
*   You choose how replies reach us — manual forward or a one-click add-on. See our [Email Integration page](/email-integration) for both options.
*   For sending applications you approve, we use the `gmail.send`scope — non-restricted, no read access.
*   Our Gmail add-on uses scoped permissions limited to the single message you have open in front of you, and only while the panel is active.
*   `forward@jobbeast.org` is a Job Beast-owned mailbox read by our backend only. No humans browse it.
*   You can stop at any time — uninstall the add-on or simply stop forwarding.

## Resume Handling

*   Your resume PDF is encrypted at rest (AES-256)
*   It’s used exclusively for job matching and AI analysis
*   It’s never shared with employers, third parties, or used to train models
*   You can delete it at any time — deletion is permanent

## Data Storage & Encryption

*   AES-256 encryption at rest for all stored data
*   TLS 1.3 encryption for all data in transit
*   OAuth tokens encrypted and refreshed automatically
*   No passwords stored — authentication via secure tokens

## Your Rights

*   Delete your account and all data at any time
*   Export your data on request
*   All data subject to the retention and deletion terms in our Privacy Policy

## Questions

If you have questions about how we handle your data, contact us at [info@jobbeast.org](mailto:info@jobbeast.org).