Legal
Privacy Policy
Last updated 12 November 2026.
This policy explains what Worklist (“we”) collects when you use worklist.in and the Worklist app, why we need it, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023. Questions go to hello@worklist.in.
What we collect
- Account: your name, email address and profile photo from Google when you sign in.
- Profile: what you enter or what we read from your resume: headline, experience, skills, projects, education, job preferences and links. We keep the text we extract, not the PDF itself.
- Job search: the roles we match you to, your saved and hidden jobs, your pipeline board, tailored resumes, proofs of work and how often each proof was opened.
- Emails you send: the recipient, subject and text of each email you send through Worklist.
- Billing: your plan and subscription status. Card and UPI details go straight to our payment provider and never reach us.
- Technical: your IP address and browser type with each sign-in session, to keep your account secure.
Gmail
If you connect Gmail, we ask Google for permission to:
- Send email as you, only when you press send on an email you have approved. Proof alerts are sent from your account to yourself.
- Read recent email, limited to the subject, sender and a short preview, to spot replies from companies on your board and move them to the right stage. We don't store your messages.
Worklist's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Gmail data for ads, don't sell it, don't let people read it, and don't use it to train AI models. You can disconnect at any time from your Google account settings.
How we use it
- To match you to roles, tailor resumes, build proofs of work and send the emails you approve.
- To show your public portfolio and proofs to the people you share them with.
- To run billing, prevent abuse and keep the service secure.
- To email you about your account. We don't send marketing email without asking.
We don't sell your personal data, and we don't show ads.
Who we share it with
Only with services that help us run Worklist, and only what they need:
- Anthropic (AI): your profile, resume text and job descriptions, to score matches, tailor resumes and write proofs. Anthropic does not train on this data.
- Google: sign-in, Gmail, and PageSpeed Insights for checking company websites.
- Dodo Payments: payments and subscriptions.
- Cloudflare and our database host: hosting and storage.
- GitHub: your public profile and repositories, if you add your GitHub username.
Some of these services process data outside India. We may also share data if the law requires it.
What's public
Your portfolio page (/u/your-name) and any proof you share (/p/…) can be seen by anyone with the link. Proof pages are hidden from search engines. Nothing else in your account is public.
Cookies
We use one cookie to keep you signed in and one to remember light or dark mode. We don't use advertising or tracking cookies.
How long we keep it
We keep your data while your account is open. If you ask us to delete your account, we delete your profile, matches, resumes, proofs, emails and Gmail connection within 30 days. We keep billing records for as long as tax law requires.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or withdraw consent at any time by writing to hello@worklist.in. If you're not happy with our reply, you can complain to the Data Protection Board of India.
Children
Worklist is for people aged 18 and over. We don't knowingly collect data from children.
Changes
If we change this policy in a way that matters, we'll email you before the change takes effect.