Vocaryn
Vocaryn

Privacy Policy

Last updated: 10 October 2026

Who we are

Vocaryn is operated by Zevqo Labs ("we"). Contact: [email protected].

What Vocaryn does

Vocaryn finds public job listings that match your Career Facts. It writes application text that you or our checks confirm is supported by your facts. If you turn on auto-apply, it submits applications for you on employers’ official application pages.

Information we collect

Your email address, if you join the waitlist on our home page (no account needed)
Why: To tell you when your place opens
Stored: Our database
Account email and Google sign-in details
Why: To create and secure your account
Stored: Our database
Career Facts you enter or confirm, and resume files you upload
Why: To match jobs and write applications
Stored: Our database and private file storage
Answer Bank: name, email, phone, location, links, work authorization, citizenship, sponsorship need, salary expectation, notice period, languages
Why: To fill application forms when you turn on auto-apply
Stored: Our database
Campaigns, prepared applications, the text we wrote, and a receipt of every auto-apply attempt (each question and the answer we gave)
Why: So you can review what was prepared and sent
Stored: Our database
If you connect Gmail: the sender, subject and a short preview of recent emails, plus a refresh token
Why: Only to recognise employers’ confirmation, interview and rejection emails for applications you submitted
Stored: Our database; the token is encrypted in our database vault
If you use the Vocaryn Autofill extension and sign in: for each application, the job title, company, link and outcome, and the labels (never the answers) of questions that need you
Why: To show the extension’s activity on your dashboard
Stored: Our database
If you turn on notifications: the address your browser’s push service gives for this browser, and the keys that encrypt notices for it
Why: To send you short notices when your agent needs you to act
Stored: Our database
We do not collect your contacts, your device location, advertising identifiers or your card, UPI or bank details. When you pay, you enter those on Cashfree’s pages; we keep the order record (what you bought, the amount, any coupon, the payment date, and Cashfree’s payment and autopay references), which the law requires us to keep even after you delete your account.

How we use it

•
To match you to jobs and prepare applications.
•
To submit applications, only if you turn on auto-apply and within your credits.
•
To show you what happened, including receipts and employer replies.
Demographic questions on employer forms are left blank, or answered "prefer not to say" when the form requires an answer. We never answer questions about age, criminal history, background checks or identity numbers for you.
Privacy notices and consents on employers’ forms. When you turn on auto-apply you separately allow Vocaryn to accept, on your behalf, the privacy notices, terms and data-processing consents an employer requires in order to apply. We decline optional extras such as marketing emails, interview recording and talent-community lists. The receipt for each application shows what was accepted. You can withdraw this by stopping auto-apply at any time.
Answers written from your resume. Where a form asks something our rules cannot answer, an AI model may answer it from your own resume, Answer Bank and verified Career Facts. A factual answer must be an exact quote from that material, and the rest is checked in code before use. Answers that came from your resume are saved so the same question is answered the same way next time; you can see and remove them in the Answer Bank.
Browser extension (Vocaryn Autofill). It stores your profile in your own browser. It can show notices on your own computer (for example that it is signed out, that an update is available, or that it stopped); these never leave your computer.
Notices from your agent. When you need to act (answer a question, update the extension, reconnect Gmail, renew a plan), the agent says so once on Home. If you turn on notifications in Profile or on Home, it also sends one short notice per reason, at most a few a day and none between 11 pm and 7 am India time (except interview invitations and payment problems). A notice says only what to do, such as “Reconnect Gmail”: never your answers, your resume or an employer’s page.
We do not sell your personal information and we do not use it for advertising.

Who we share it with

•
Employers and their hiring systems (for example Greenhouse, Lever and Ashby): the application details you asked us to submit, and only for jobs you applied to, yourself or through auto-apply.
•
AI model providers (open-weight models over hosted APIs): Mistral AI, and during our early-access period also Cerebras, Cloudflare Workers AI, GitHub Models, Groq, Hugging Face, NVIDIA, Ollama, OpenRouter, AI Singapore (SEA-LION) and Z.ai, reached through a routing service we run ourselves. They receive the job description, your verified Career Facts, the text of your resume and your Answer Bank, to draft application text and answer form questions. Some of these providers offer free tiers that may keep or review the text they receive; at launch we will move to a paid provider and update this list. Questions about identity numbers, demographics, health, criminal history, age and bank details are never sent.
•
Hostinger: hosts the server in India that runs our database (open-source Supabase software we operate ourselves), your files and our background workers.
•
Google: sign-in, and read-only Gmail access if you connect it.
•
Cloudflare: serves this website and our domain names.
•
Cashfree Payments India: processes payments and autopay mandates. It receives your name, email, mobile number and the amount and item you are paying for.
•
Your browser’s push service, if you turn on notifications (Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge): it relays each notice to your browser. The notice is encrypted for your browser, so the push service cannot read it.

Google user data (Gmail)

Vocaryn’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
•
We read only message metadata and short previews, to detect employer replies to your applications.
•
We do not use Gmail data for advertising.
•
We do not let people read it except to fix a problem you report, or where the law requires.
•
We do not transfer it except as needed to provide this feature.
You can disconnect Gmail at any time in Profile. Disconnecting deletes the stored token.

Your choices and rights

•
You can edit or remove Career Facts and Answer Bank answers.
•
You can replace your resume, stop auto-apply at any time, and disconnect Gmail.
•
You can turn notifications off in Profile, or block them in your browser’s settings.
•
You can download a copy of your data in the app (Privacy and your data). You can ask us to delete your data in the app (Privacy requests) or by emailing us. We respond within the time the law requires, and we may keep the minimum records the law obliges us to.

Security

•
Access to your records is restricted to your account by database rules.
•
Server keys never ship in the app, and resume files are private.
•
No system is perfectly secure. Tell us promptly if you suspect a problem.

Retention

•
Your account data (Career Facts, Answer Bank, resume, campaigns, applications and receipts) is kept until you remove it or ask us to delete your account.
•
Employer replies we matched to an application are kept with that application, on the same terms.
•
The live view of the agent keeps its step log for 7 days. The screenshot of an application in progress is deleted when that run ends.
•
The resume file tailored for each application is not kept: the server deletes it as soon as the application ends, and a file made for the browser extension is deleted within a few minutes of the extension fetching it (at most an hour). Its text and ATS match are kept with the application’s receipt, or with the extension’s request.
•
Requests the extension makes to the agent for a tailored resume are deleted after 2 days.
•
Notices from your agent are kept for 30 days after their reason clears. A browser’s notification address is deleted when you turn notifications off, or when its push service tells us it is no longer valid.
•
We will update this page if these periods change.

Children

Vocaryn is not for people under 18.

Changes

We will post updates here and, for material changes, tell you in the app.