Privacy Policy

Network Growth Assistant (“the service”) helps you plan LinkedIn networking and a job search. It is operated from British Columbia, Canada, and this policy is written to follow British Columbia's Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). It says what we collect, why, who else handles it, and how to see, correct or remove it.

Who is responsible

Shervin Babaei is responsible for the personal information described here and is the person who handles privacy questions and requests. Contact: shervinb22@gmail.com.

What this app never does

• It never asks for your LinkedIn password or cookies.
• It never scrapes LinkedIn, sends invitations or messages for you, or acts on your LinkedIn account. You do that yourself.
• It does not sell your personal information or show advertising.

What we collect, and why

We collect only what is needed to run the features you use:

• Your account (to sign you in and keep your data separate from everyone else's): your email address and, if you use Google sign-in, the name and email Google shares with us. We do not receive your Google password.
• What you add (to provide the tracking you asked for): candidates and people you save, notes, tags and reminders, your schools, disciplines and targets, saved jobs, applications, interviews, saved searches and settings.
• Your resume (to check job fit and draft tailored versions): the file you upload, the text read from it, and any tailored versions and cover letters you create. Files are kept in private storage that only your account can read.
• Imports (to avoid suggesting people you already know): from a LinkedIn data export or contact list we keep names, companies, positions and dates. Email addresses in those files are not stored, and the file itself is not kept.
• Your own AI key, if you add one (to run AI features on your account): stored encrypted and never sent to your browser.
• Operational records (to deliver alerts and keep the service safe): notifications, email delivery records and usage counters used to limit abuse.
• Cookies: a sign-in session cookie and a cookie that remembers your display settings (theme, density, text size). We do not use advertising or analytics cookies.

Page speed and error reports

To keep the service fast and fix problems, your browser sends us small reports about how pages performed (for example how long the main content took to appear) and about errors that occurred. They are sent to our own database, not to an analytics or error-tracking company. A report holds only the type of page (such as “/applications/[id]”, never a name or an id), the measurement or a cleaned error message, and whether the device is a phone or a computer. We remove email addresses, keys, links, ids and profile addresses from error messages before saving them. Reports are not linked to your account, your IP address is not stored with them, and they are deleted after 30 days (measurements) or 90 days (errors). If your browser sends “Do Not Track”, no reports are sent.

Your consent

By creating an account and using a feature, you consent to us collecting, using and disclosing your personal information for the purposes above. Optional features need a further step from you, such as adding an AI key, using an AI feature or turning on email alerts. You can withdraw consent at any time by deleting the data in question or your account (see “Your rights”), though some features cannot work without it.

Information about other people

You may add information about other people, such as candidates, contacts and people found through Discover. Add only what you are entitled to use, such as details they made public or that you know through your own work, and use it only to manage your own networking and job search. Discover reads public pages only and never LinkedIn. If you are in someone's list and want your information removed, contact us at shervinb22@gmail.com and we will help, including by removing it from the account concerned where we can identify it.

Who else handles your information

• Supabase hosts the database, sign-in and file storage.
• Vercel runs the website and its scheduled jobs.
• Google provides sign-in if you choose it.
• AI providers (Google Gemini by default, or Anthropic): only when you use an AI feature, the text needed for that feature (for example your resume and a job posting, or a note you ask to reword) is sent to the provider. On Gemini's free tier, Google may use what is sent to improve its products; on its paid tier it says it does not. If that is a concern, do not use AI features or use your own paid key. Everything except the AI rewriting itself works without AI.
• Job and research sources: searches send your search words, country and place (not your resume) to public job sources such as employer job boards, Jobicy, Remotive, Arbeitnow and, when enabled, Careerjet, Adzuna and USAJOBS. Careerjet also receives your IP address and browser type, as its terms require. Discover searches public sources such as GitHub, ORCID and web search.
• An email provider sends sign-in links and, if you turn them on, job-alert emails.

These providers act for us and have their own privacy policies. We share only what each feature needs, and we do not sell personal information. We may also disclose information when the law requires it, such as a valid court order.

Where your information is processed

Our providers may store or process information outside Canada, including in the United States. Your information can therefore be subject to the laws of those places, including access by their courts and authorities. If you are not comfortable with that, please do not use the service.

How long we keep it

• Your data stays until you delete it or delete your account, which removes your records and stored files.
• Read notifications are deleted after 90 days and email delivery records after 30 days.
• Backups kept by our hosting providers can hold deleted data for a short time before they expire.

Your rights

• Access and export: Settings downloads everything tied to your account. You can also ask us for access to your personal information and how it has been used or disclosed.
• Correction: you can edit your information in the app, or ask us to correct it.
• Deletion: Settings has “Delete my account and data”, and you can delete individual resumes, documents, candidates and saved searches.
• Withdraw consent to optional features, such as turning off email alerts. Every alert email also has a one-click unsubscribe link.
• We will answer a written request within the time the law requires, generally 30 business days, and will explain if we cannot provide something.
• Complaints: contact us first at shervinb22@gmail.com. You may also complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca), or, for matters under PIPEDA, to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Email

We send only what you ask for: sign-in links and, if you turn them on, job-alert emails. We do not send marketing email. This is consistent with Canada's Anti-Spam Legislation (CASL).

Security and incidents

Data is encrypted in transit and every database table is protected by row-level security, so an account can only read its own rows. No system is perfectly secure. If an incident creates a real risk of significant harm to you, we will tell you and, where required, report it to the Privacy Commissioner of Canada.

Age

This service is not intended for anyone under 16.

Changes

If we change this policy in a way that matters, we will update the date above and, where we can, tell you in the app.