Privacy Policy

Effective date: 9 September 2026 · Last updated: 9 September 2026

1. About Jonno’s Jobs and Agentic Labs Limited

Jonno’s Jobs (https://jonnosjobs.com and https://teacher.jonnosjobs.com) is owned and operated by Agentic Labs Limited, a New Zealand registered company ("we", "us", or "our").

We provide tools for New Zealand educators to discover teaching vacancies from the NZ Education Gazette, organize their job search, manage résumés, and track applications.

2. What Information We Collect

Depending on how you use Jonno’s Jobs, we collect the following categories of information:

• Account and Profile Information: When you sign in using an authentication provider (Google, Microsoft, or GitHub), we receive your verified email address, full name, profile image URL, and unique account identifier.
• Job Application and Search Records: When you choose to use our tracking tools, we store your saved search queries, email alert preferences, uploaded résumé/CV documents (e.g. PDF files), custom application email templates, application statuses, notes, and timeline events.
• Connected Mail Credentials: If you voluntarily connect an external mailbox (such as Gmail or Microsoft Outlook) to send application emails directly from the app, we securely store encrypted OAuth 2.0 access and refresh tokens. We never receive or store your email password.
• Technical and Security Logs: We collect session cookies, IP addresses, browser user-agents, and timestamped security events to authenticate sessions, prevent abuse, and protect our infrastructure.

3. How We Use Information

We use your personal data strictly to deliver and maintain the services you request, including:

• Authenticating your account and maintaining your session securely.
• Storing and displaying your job searches, application notes, and uploaded CV files.
• Delivering email notification digests for saved searches when you enable alerts.
• Dispatching job application emails on your explicit command using your connected mailbox.
• Diagnosing technical issues, preventing fraud, and ensuring service security.

4. Google API Services User Data Policy & Limited Use Disclosure

Jonno’s Jobs’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you choose to connect your Google account in our Connected Mail feature, our application requests the following restricted Google OAuth scope:

https://www.googleapis.com/auth/gmail.send

Scope Purpose: This scope is requested and used solely to send the specific job application email and résumé attachment that you compose and review, addressed to the designated school or employer contact email address.

No Inbox Access: We do not request, access, read, search, or index your inbox, sent messages, or message history (we do not request gmail.readonly or gmail.modify). Signing in with Google for authentication does not grant mail sending permissions; mail integration requires your separate, explicit consent under Connected Mail.

5. Data Sharing, Transfer, and Disclosure of Google User Data

Jonno’s Jobs does not share, transfer, or disclose Google user data to any third parties, except in the following necessary circumstances:

• Delivery to Recipient Schools: When you click "Send application" for a vacancy, your message and attached résumé file are transmitted via Google’s Gmail API directly to the recipient school or employer’s email server.
• Legal Obligations: We may disclose information only where strictly required by applicable law, regulation, legal process, or governmental request.

We make the following strict commitments regarding Google user data:

• No Sale of Data: We do not sell, rent, lease, or trade Google user data or any personal information to third parties for any purpose.
• No Advertising: We do not use, transfer, or disclose Google user data for serving advertisements, including personalized, retargeted, or interest-based advertising.
• No AI/ML Training: We do not use Google user data to train, develop, or improve machine learning or artificial intelligence (AI) models.
• No Human Inspection: No human personnel at Agentic Labs Limited read your email messages or tokens, except when you have granted explicit affirmative consent for a specific support request, when required by law, or when necessary for critical security investigations.

6. Data Protection and Security Mechanisms for Sensitive Data

We implement rigorous technical, administrative, and physical security measures to safeguard your sensitive data and Google user information:

• Encryption in Transit: All data transmitted between your browser, our application servers, and Google APIs is encrypted using Transport Layer Security (TLS 1.2 and TLS 1.3) over HTTPS, with HTTP Strict Transport Security (HSTS) enforced.
• Encryption at Rest: Sensitive credentials, including OAuth access tokens and refresh tokens, are encrypted at rest using industry-standard authenticated encryption (AES-256-GCM) before being stored in Cloudflare D1 databases.
• Least Privilege Access: The application requests only the single minimal permission needed to transmit application emails (gmail.send). Our administrative dashboards have no mechanism to decrypt your OAuth tokens, read your email messages, or access your stored CV files.
• Per-User Tenant Isolation: All user records, templates, CVs, and mail connections are strictly compartmentalized by authenticated user ID. Other users cannot access your records.
• Token Revocation and Instant Deletion: You can disconnect your Google mailbox at any time via Connected Mail by clicking "Disconnect mailbox". This immediately and permanently deletes all stored OAuth tokens from our database. Furthermore, you can revoke access at any time via your Google Account Security Permissions.
• Enterprise Cloud Infrastructure: Jonno’s Jobs is hosted on Cloudflare’s global edge network, providing enterprise-grade DDoS mitigation, automated firewall protections (WAF), and certified data center security (SOC 2 Type II, ISO 27001).

7. Data Retention, Disconnection, and Account Deletion

You maintain continuous control over your personal data:

• Managing and Deleting Content: You can delete individual CV files, templates, saved searches, and application tracking records at any time directly through the application interface.
• Disconnecting Mail: Disconnecting a mailbox immediately purges the stored OAuth tokens from active storage.
• Full Account Deletion: You can request complete deletion of your account and all associated records, or request a complete export of your personal data, by emailing contact@jonnosjobs.com. We will process verified account deletion requests within 10 business days.

8. Your Rights and Contact Information

Under the New Zealand Privacy Act 2020, you have the right to access personal information held about you and to request corrections.

If you have questions, comments, or requests regarding this Privacy Policy or our privacy practices, please contact:

Agentic Labs Limited
Attention: Privacy Officer
Email: contact@jonnosjobs.com
Website: https://jonnosjobs.com

If a privacy concern is not resolved to your satisfaction, you have the right to contact the Office of the New Zealand Privacy Commissioner.