Last updated September 21, 2026
This policy explains what Compleo collects, why, who else processes it, how long we keep it, and how to make us delete it. It covers the website at compleo.ai and the application at compleo.ai/app.
Compleo is operated by L&J LLC, a limited liability company registered in Michigan, United States. We are the data controller for the information described here. For any privacy question, or to exercise any right in section 10, write to privacy@compleo.ai.
We collect only what the product needs to work. Specifically:
We do not use advertising trackers, we do not run third-party analytics that profile you across other websites, and we set no advertising cookies. The only cookies Compleo sets are the ones that keep you signed in.
We do not use your resume, your drafts or your contacts to train any machine learning model, ours or anyone else's. We do not sell your data. We do not share it with advertisers. There is no advertising on Compleo.
This is the part most privacy policies leave out, so we will be direct about it. To do its job, Compleo holds business contact information about people who are not our customers and never visited this site — typically a hiring manager at a company with an open role.
For those people we hold: name, job title, employer, work email address, and the public job posting the role came from. It comes from published job listings and from business contact databases that we license, named in section 7. It is workplace information — not home addresses, not personal email accounts, nothing about their private life.
We use it for one purpose: to let a job seeker send one relevant introduction to the person who would actually make the hiring decision. We do not build profiles, we do not track what those people do, and we do not resell their details.
If you have received an email sent through Compleo and want your details removed, write to privacy@compleo.ai and we will delete them and suppress that address from future searches. You do not need an account and you do not need to explain why.
Compleo does not touch your mailbox unless you explicitly connect it. If you do, we request exactly one Google permission: send only (https://www.googleapis.com/auth/gmail.send). That permission is insert-only. It cannot read, list, modify or delete anything in your mailbox, and we request no other Gmail permission.
We use it for one purpose: to send the specific emails you have read and clicked send on, from your own address. Nothing is sent automatically and nothing is sent in bulk. We store the access and refresh tokens Google issues solely so you do not have to reconnect before every send. They are held in a database that is encrypted at rest, in a column no browser-facing account is permitted to read.
You can disconnect at any time, either inside Compleo or from your Google account permissions page. When you disconnect, we delete the stored tokens immediately.
Connecting Gmail is optional. Without it, Compleo simply opens a pre-filled draft in your own email client and you press send there.
Compleo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to send the message you asked us to send, we do not use it for advertising, we do not use it to train models, and no human at Compleo reads it except where you specifically ask us to for support, or where the law requires it.
You can optionally turn on a signature link: a one-page summary of your background, hosted at an address of its own, linked under your sign-off. It is off unless you switch it on, and it contains only the summary we read from your resume, never the file you uploaded.
When someone follows that link we record that the page was opened, which contact the link was sent to, the time, and the referring site if there is one. We show that back to you so you can tell who read your summary.
We do not use tracking pixels. Nothing in your emails reports back when a message is opened or read. The only thing recorded is a deliberate click on a visible link, and the page itself tells the reader that the person who sent it can see they visited.
We do not record the reader's IP address, device or any identifier beyond the company If you upload a PDF, we keep the file so you can offer it to a reader who wants the detail. It is stored privately and is never downloadable unless you switch that on separately, which is a different decision from publishing the summary. Switching it off, or deleting your account, removes the file.
The page also carries a reply form. If a reader writes to you through it, we store the name, email address and message they chose to give us, show them to the candidate, and keep them until the candidate or the sender asks us to delete them. We do not use those details for anything else and we never add them to a mailing list.
We do not record the reader's IP address, device or any identifier beyond the company we already knew we were writing to. The link carries a random token rather than the recipient's email address, so a reader who forwards it is not disclosing their own address in the URL. Turning the feature off takes the page down; deleting your account deletes the page and the click history with it.
We use a small number of service providers. Each receives only what it needs, is bound by contract to use it only on our instructions, and none of them may sell it.
We will also disclose information if we are legally required to, or to protect our rights or someone's safety. If Compleo is ever sold or merged, your data may transfer to the buyer, who would be bound by this policy; we would tell you before that happened.
Compleo is operated from the United States and your data is stored there. If you are in the European Economic Area, the United Kingdom or Switzerland, this means your data is transferred outside your country. Where that happens we rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies.
Closing your account deletes your resume, drafts and contacts. Backups are overwritten on a rolling 30-day cycle, so a copy may persist in backup for up to 30 days after deletion.
Wherever you live, you can ask us to show you what we hold about you, correct it, export it in a portable format, or delete it. You can also object to a particular use, or ask us to restrict it.
Depending on where you live you may have additional rights — for example under the GDPR in Europe and the UK, or under the CCPA in California, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those laws define it, so there is nothing to opt out of on that front.
To exercise any of these, email privacy@compleo.ai. We will respond within 30 days. We will not charge you and we will not ask you to justify the request. If you are in the EEA or UK and are unhappy with our answer, you may complain to your local data protection authority.
Data is encrypted in transit, and at rest by our database host. Access to each row is restricted to the account that owns it. Your Gmail refresh token is held in a column that browser-facing accounts are explicitly denied permission to read, so it is reachable only by the server process that sends your mail. Access to production systems is limited to people who need it. No system is perfect, and we will tell affected users promptly if we ever discover a breach that puts their data at risk.
Compleo is a tool for working professionals and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, tell us and we will delete it.
If we change this policy we will update the date at the top. If a change materially affects how we use your data, we will email you before it takes effect rather than relying on you to notice.
L&J LLC, Michigan, United States — privacy@compleo.ai.