SECURITY & TRUST
Security, in plain language.
This page describes the controls used by GetYourJobs today. It is a practical summary, not a claim of independent certification or a guarantee that online services are risk free.
Last updated: 26 October 2026
Your account controls your data
Firebase Authentication handles sign-in. Firestore rules and authenticated server APIs limit access to the signed-in account. Server routes verify the Firebase identity before they read or change account data.
Separate assistant access
The optional Codex connection uses a separate authorization grant for job leads and approved tracker actions. It does not grant the GetYourJobs connector access to your resume or Gmail, and it cannot send messages or submit applications. You can revoke the connection in GetYourJobs settings.
Server credentials stay server side
Provider credentials used by the server are configured as server-side secrets. The web app uses public Firebase configuration for sign-in; private provider keys are not intended to be shipped in the browser bundle.
Review before taking action
Job imports and generated outreach are drafts for your review. GetYourJobs does not automatically email people or apply to jobs on your behalf. See the Privacy Policy for information about data and service providers.
To report a security concern, email aakashkamal8505@gmail.com. Please include a way to reproduce the issue, and do not send passwords, access tokens, or resume content. We do not operate a paid bug bounty program.