Privacy Policy

Last updated: March 2026

Jyl ("we", "us", "our") is a service that helps Working Holiday Visa holders in Australia find farm employment by sending personalized job applications on their behalf. This privacy policy explains how we collect, use, and protect your personal information.

1. Information We Collect

When you use Jyl, we collect the following information:

• Google Account Data: Your name, email address, and profile picture via Google OAuth2 sign-in.
• Gmail Access: Permission to send emails on your behalf through the Gmail API. We only use the gmail.send scope -- we never read your inbox or existing emails.
• Profile Information: Your first name, last name, age, phone number, work experience description, and personal message as provided during campaign setup.
• CV/Resume: Your uploaded PDF resume, stored securely on our servers and attached to outgoing applications.
• Payment Information: Processed securely by Stripe. We never store your credit card details.

2. How We Use Your Information

Your information is used exclusively to:

• Generate and send personalized job application emails to farms from your Gmail account.
• Attach your CV to outgoing emails.
• Display your campaign progress and email logs on your dashboard.
• Process payments via Stripe.
• Maintain your account session.

3. Google OAuth & Gmail

Jyl uses Google OAuth2 for authentication and the Gmail API to send emails. Here's what you should know:

• We request gmail.send permission only -- we cannot read, modify, or delete your existing emails.
• We store your OAuth access token and refresh token securely in our database to send emails on your behalf.
• Emails are sent directly from your Gmail account. Farms see your real name and email address.
• You can revoke Jyl's access at any time from your Google Account permissions.

4. Stripe Payments

All payment processing is handled by Stripe. We do not store, process, or have access to your full credit card number. We only store the Stripe session ID for payment verification.

5. CV Storage

Your uploaded CV (PDF) is stored on our secure server. It is used solely to attach to your job application emails. You can delete your campaign and associated CV at any time from your dashboard.

6. Data Retention

• Your account data is retained as long as your account is active.
• Campaign data and email logs are retained for 12 months after campaign completion.
• You can request deletion of all your data at any time by contacting us.

7. Third-Party Services

Jyl uses the following third-party services:

• Google APIs: For authentication and sending emails via Gmail.
• Stripe: For secure payment processing.
• Railway: For hosting and database infrastructure.
• KIE.AI: For AI-powered email content generation. Your profile data (name, experience, target state) is sent to generate personalized cover letters. No email addresses or payment data are shared.

8. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit.
• Secure session management with encrypted cookies.
• OAuth2 token storage with database encryption.
• No storage of plaintext passwords -- we use Google OAuth exclusively.

9. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Revoke Gmail access at any time via your Google Account.
• Export your campaign data.

10. Contact

If you have any questions about this privacy policy or your data, please contact us at:

Email: privacy@jyl.app

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of any material changes via email. Continued use of Jyl after changes constitutes acceptance of the updated policy.