Skip to main content

Privacy Policy

Last updated: May 5, 2026

1. Introduction

The Solution Hub ("we", "our", or "us") operates TSH Office Portal, a staff-facing platform that helps newcomers, international students, and visa applicants secure jobs in Canada. We provide client intake, job tracking, cold-email outreach, and LinkedIn content services. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, phone number, work permit details, and résumé content provided during client onboarding.
  • Gmail Data: Gmail access tokens used to send outreach emails to hiring managers from your own Gmail address, and read access used solely to detect and display replies to those outreach emails — for example, a hiring manager responding to your application (described in Section 4).
  • LinkedIn Data: LinkedIn profile information and access tokens used to publish staff-approved content on your profile.
  • Job-Application Data: Job listings you target, applications submitted on your behalf, and follow-up activity history.
  • Content Data: Topics, schedules, draft and sent emails, draft and published posts.

3. How We Use Your Information

  • To send personalised outreach emails to hiring managers via your own Gmail account, with each email reviewed by staff before it leaves.
  • To detect and display replies from hiring managers to the outreach emails you sent, so we can show you responses, classify their intent, and pause a campaign on a bounce before it damages your sender reputation.
  • To draft and publish staff-approved LinkedIn content on your profile.
  • To track job applications, run follow-ups, and report progress to you.
  • To manage your service plan, schedule, and communication preferences.

4. Gmail Data Usage

TSH Office Portal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request the following Google scopes and use each only as described below:

  • https://www.googleapis.com/auth/gmail.send — used only to send outreach emails composed and reviewed by our staff to hiring managers from your own Gmail address. Replies go to your inbox, not ours. We never send mail without your prior consent.
  • https://www.googleapis.com/auth/gmail.readonly — used only to detect and display replies to the outreach emails the app sent on your behalf. We read message content solely on the email threads the app itself started (identified from the messages we sent for you); we never read your general inbox or mail unrelated to your outreach. Reply content is shown to you and to the TSH staff assisting you, and is retained only as long as needed to provide the service. We do not use this data for advertising, and we do not use it to train AI models.
  • https://www.googleapis.com/auth/userinfo.email — used only to identify which Gmail address you connected, so we send from and monitor the correct account. We do not build an advertising or marketing profile from it.

Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the user-facing features described above; we do not transfer it to others except as needed to provide those features, to comply with applicable law, or as part of a merger or acquisition with notice to you; we do not use it for advertising; and no humans read your Google user data except the TSH staff operating the service on your behalf, with your consent, where required for security or to comply with law, or on data that has been aggregated and anonymised.

You may revoke our access at any time via Google Account permissions. Revocation immediately stops all email-sending and bounce-detection activity.

5. Data Storage and Security

Your data is stored in Supabase (PostgreSQL hosted in Canada) with role-based access restricted to authorised TSH staff. OAuth access and refresh tokens are encrypted at rest with an application-managed key, stored in a separate access-controlled table, and are never logged or exposed in client-side code. Reply content is retained only as long as needed to provide the service and is automatically redacted within 12 months of receipt (we keep only non-content metadata such as the reply classification after that). You can request deletion of your data at any time (see Section 7); when your account is deleted, your stored Google tokens and reply content are purged and your Google access is revoked. Disconnecting your Google account revokes our access immediately. We implement industry-standard security measures including HTTPS/TLS, signed session cookies, and audit logging of staff actions on your data.

6. Data Sharing

We do not sell or trade your personal information. We share it with service providers only as necessary to provide our services: Google (Gmail API) to send your outreach and detect replies, LinkedIn (API) to publish staff-approved content, and Anthropic (Claude API) to classify the text of hiring-manager replies so we can show you what each reply means. Anthropic processes this content under API terms that prohibit using it to train their models. We do not otherwise disclose your Google user data to third parties.

7. Your Rights

You have the right to:

  • Access your personal data.
  • Request deletion of your data.
  • Revoke access to your LinkedIn or Gmail accounts at any time.
  • Opt out of our services.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at thesolutionhub6@gmail.com.