Privacy Policy
Last updated 28 October 2026
Who we are
Thuolo is operated by Wayvis Capital LLC, a California limited liability company (“we”, “us”). We are the data controller for the personal data described here. You can reach us at rafiki@oduorwebservices.com.
What we collect, and why
Account
| What | Why |
|---|---|
| Email address | To sign you in, verify the address, reset a password, and send the alerts and reminders you ask for. |
| Password | Stored only as a bcrypt hash. We cannot read it. |
| First and last name (optional) | Shown on the resumes the Resume Studio builds for you. Nowhere else. |
| Google account identifier | Only if you sign in with Google: the identifier Google returns, so we can recognise you next time. |
| Microsoft account identifier | Only if you sign in with Microsoft (a personal Outlook or Hotmail account, or a work or school account): your name, your email address and an identifier for your Microsoft account and its organisation, so we can recognise you next time. We never receive your Microsoft password, and signing in gives us no access to your mailbox, files or contacts. Outlook inbox tracking, below, is a separate choice. |
| A generated pseudonym | Used in place of your name in Jothuolo community threads. You do not choose it and it is not linked to your name anywhere a reader can see. |
| Time zone (optional) | So alerts are not sent to you between 10pm and 7am. |
| School email address (optional) | Only if you ask for student pricing. We store the address you claim, the part after the @, and whether the link we sent to it was followed - so the discount can be checked and re-checked once a year. It is never used to email you anything else, and never shown to anyone. |
| Plan and credit history | Which plan the account is on, and one row per AI action recording the feature, the credits it cost and how many tokens the model used. It is how the allowance on your Billing page is calculated and how we know what the service costs to run. It records that an action happened, never what you wrote in it. |
Profile
| What | Why |
|---|---|
| Headline, experience level, skills, target cities | The inputs to the match score and to search filters. |
| Resume text | Pasted by you, or extracted from a PDF you upload. The PDF itself is not stored; only the text we extract from it is. It is the basis for the match score, the Resume Studio and the interview coach. |
| LinkedIn profile text (optional) | Only what you paste in. We have no connection to LinkedIn and never fetch anything from it. |
| A numeric embedding of your profile | A list of numbers derived from the text above, used to rank jobs by similarity. It cannot be turned back into your resume. |
Activity
| What | Why |
|---|---|
| Jobs you save, their stage, your notes and checklist items, and when each stage changed | This is your pipeline. The timestamps produce your reply rate and “going cold” reminders. |
| Saved searches and alert settings, and a record of which alerts were sent | To send each alert once and never twice. |
| Posts, comments and votes in Jothuolo | Shown to other signed-in users under your pseudonym. A post can carry a badge saying which stage of that company’s process you reached, taken from your own pipeline. Nothing else about you is shown. |
| Messages you send to the copilot and the interview coach | Sent to the AI provider to generate a reply. The copilot’s job searches are run against our own database. Conversations are not stored after the session ends. |
| Feedback you submit | Read by us to improve the product. Feedback can be sent anonymously. |
| Reports of posts or comments | To moderate the community. |
LinkedIn connections (optional)
If you upload the Connections.csv that LinkedIn lets you download, we store each connection’s name, LinkedIn profile link, company, position and the date you connected, so a job or company page can show you who you know there. We do not keep the file’s email addresses, we never send your connections to an AI provider, and nobody but you can see them. If you upload the whole export zip, we also keep the names of your own schools and employers from it, so a job can offer LinkedIn searches for alumni there; nothing about anyone else is looked up. Each upload replaces the last. Remove them at any time from the LinkedIn page.
Outlook (optional, off by default)
If you connect Outlook (a personal Outlook or Hotmail account, or a work or school Microsoft account), we ask Microsoft for read-only access to your mail and store the refresh token Microsoft gives us, encrypted at rest. Every two hours we read the subject and preview of mail that arrived in your inbox since the last check, keep only messages that look like interview scheduling (a keyword filter such as “interview” or “next steps”), and send only those to the AI provider to classify, exactly as for Gmail. We never send, delete or change mail, and we do not store your messages. Some schools require their IT team to approve apps that read school email; that approval is between you and your school. Disconnect at any time from the Profile page; this deletes the token immediately.
Gmail (optional, off by default)
If you connect Gmail, we ask Google for read-only access and store the refresh token Google gives us, encrypted at rest. A few times a day we search your recent mail for messages that look like interview scheduling (a keyword filter such as “interview” or “phone screen”, restricted to the last three days) and send only those candidates to the AI provider to classify. When one matches a company in your pipeline, that application is moved to Interviewing and a one-line note is added. We do not read, store or index anything else in your mailbox. Disconnect at any time from the Profile page; this deletes the token immediately.
Thuolo’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Thuolo for Chrome (optional; Pro, Student Pro and Founding)
If you install the browser extension and connect it on the Chrome extension page, it holds a copy of your Thuolo session in the extension’s own storage. On Greenhouse, Lever, Ashby, Workday, iCIMS, Workable, SmartRecruiters and Jobvite pages it sends us the address of the page you have open, and nothing from the page itself, so we can look up the posting and show your score. On LinkedIn and Indeed job pages it sends the job title, company name and location shown on the page, and nothing else from it (not the description, the poster or anything about you), so we can check whether the same opening is live on the employer’s own careers site. When you open its popup on any other site, it sends that site’s address once to look up the company’s Jothuolo threads. It does not read pages in the background or keep a browsing history.
Its autofill fills application fields only when you click Fill, and only empty ones. Your name and email come from your account; the phone number, address, links, employer, education and saved answers you choose in the extension (such as how you heard about a job, whether you need sponsorship, or how you answer the voluntary self-identification questions) stay in your browser and are never sent to us. Its settings, such as when the card appears and the sites where it stays quiet, are kept in Chrome’s synced storage, so they follow your Chrome profile. It fills a work-authorisation, sponsorship or self-identification question or desired-salary question only with an answer you saved, and never fills current or past pay, criminal-history or free-text questions. When you click an application form’s Submit button on a posting we know, it moves that posting to Applied in your pipeline and shows an Undo button; it reads nothing from the form to do this. Disconnecting on the Chrome extension page, or removing the extension, deletes its copy of your session.
Technical
Our hosting providers keep standard server logs (IP address, browser type, the pages requested and when) for security and debugging. We rate-limit requests by IP address to protect the service; those counters expire within an hour. We do not use analytics scripts, advertising pixels or fingerprinting.
When something breaks on our side, an error report goes to Sentry so we can fix it: the kind of error, where in our code it happened, and which page of the API was asked for. Nothing else about the request goes with it - not its contents, not your browser, not the error’s own message (which could quote what you wrote) - so it never includes your resume, your profile, your messages, your email address or sign-in tokens. The report is rebuilt from that short list before it leaves our server, rather than edited down from everything.
Cookies and local storage
Thuolo sets no tracking cookies. Your sign-in session is a token kept in your browser’s local storage, along with small conveniences such as which matches you have already seen. Signing out removes the token. Google Sign-In, if you use it, sets its own cookies under Google’s policy. Signing in with Microsoft sets one short-lived cookie on our API, holding nothing but a random check value, which is deleted when you come back from Microsoft and expires after ten minutes either way; Microsoft sets its own cookies under its own policy.
Who else sees your data
We share data only with the providers needed to run the service, each bound by its own terms:
- Anthropic (United States): receives resume text, LinkedIn text, job descriptions and your messages to power resume parsing, the Resume Studio, the LinkedIn Analyzer, the copilot, the interview coach and the classification of interview emails.
- Voyage AI (United States): receives profile text to produce the embedding used for matching.
- Google: only if you sign in with Google or connect Gmail.
- Microsoft: only if you sign in with Microsoft or connect Outlook. Microsoft tells us your name, email address and account identifier, and, if you connect Outlook, the recent mail described above; we tell Microsoft nothing about you beyond the fact that you are using Thuolo.
- Resend: delivers our emails (verification, password reset, alerts, reminders).
- Railway (United States): hosts the API and the database.
- Stripe (United States): processes payments for paid plans. You enter your card details on Stripe’s own checkout page, so Thuolo never receives your full card number. Stripe receives your email address and payment details; we keep your Stripe customer and subscription IDs, your plan, its status and its billing dates, so we can tell which plan you are on.
- Cloudflare and Vercel: host and serve the web app. If sign-up shows a Cloudflare Turnstile check, Cloudflare sees the signals it uses to tell people from scripts.
- Sentry (United States): receives error reports with your content removed, as described under Technical above.
We do not sell personal data and we do not share it for cross-context behavioural advertising. We will disclose data if the law requires it, and we will tell you when we are allowed to.
Job listings
The jobs on Thuolo come from employers’ public applicant-tracking boards (Greenhouse, Lever, Ashby, Workday) and from public aggregator feeds (RemoteOK, Arbeitnow, Jobicy). Company logos are fetched by our server and stored by us, so that browsing the board does not tell a third party which employers you look at; when an employer has no logo of its own we fall back to its website icon from DuckDuckGo or Google, fetched by our server rather than your browser. Applying always happens on the employer’s own site, under their privacy policy.
How long we keep it
- Account and profile data: until you delete your account.
- Pipeline, alerts, posts and comments: until you delete them or your account.
- Gmail token: until you disconnect Gmail or delete your account.
- Outlook token: until you disconnect Outlook or delete your account.
- LinkedIn connections: until you remove them, upload a new file, or delete your account.
- Feedback: kept after account deletion, with the link to your account removed.
- Backups: our database backups roll off on a normal rotation of at most 30 days.
Your rights and controls
You can do all of the following yourself, without asking:
- Edit or clear any profile field, including your resume text, on the Profile page.
- Disconnect Gmail or Outlook on the Profile page.
- Remove your LinkedIn connections on the LinkedIn page.
- Turn off or delete any alert on the Profile page, or use the one-click link in any alert email.
- Delete your account on the Profile page. Your profile, pipeline, alerts and Gmail and Outlook tokens are deleted immediately; posts and comments are removed from view.
You can also email us to ask for a copy of the data we hold about you, to correct it, or to have it deleted. We answer within 30 days and will not ask you why. If you are in California, these are your rights under the CCPA/CPRA; if you are in the European Economic Area or United Kingdom, they are your rights under the GDPR, and our legal basis for processing is the contract with you (running the service you signed up for) and, for Gmail, your consent. You also have the right to complain to your local data protection authority.
Where the data lives
Our servers and providers are in the United States. If you use Thuolo from elsewhere, your data is transferred to and processed in the United States.
Security
Passwords are hashed with bcrypt. Gmail and Outlook tokens are encrypted at rest. All traffic is over HTTPS. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.
Age
Thuolo is for people looking for work and is not directed at children. You must be at least 16 to use it. We do not knowingly collect data from anyone under 16; if you believe we have, email us and we will delete it.
AI features
Match scores, resume drafts, LinkedIn suggestions, interview feedback and copilot replies are generated by AI models. They can be wrong. They are a starting point for your judgement, not a decision about you, and no automated decision on Thuolo has a legal or similarly significant effect on you.
Changes
When this policy changes, the date at the top changes with it. If a change affects what we collect or who we share it with, we will email you before it takes effect.