Privacy Policy

Last updated 30 July 2026

SeaFormat ("we", "us") is a Telegram bot that helps seafarers find and apply to maritime opportunities. This policy explains what data we collect, how we use it, and the choices you have. By using SeaFormat you agree to this policy.

Information we collect

• Telegram account data — your Telegram user ID and basic profile data needed to operate the bot.
• Profile you enter — rank, vessel type, experience, salary expectation, and availability.
• Documents — CV / resume files you upload so they can be attached to job applications.
• Email address — the address you connect and use to send job applications.

Google user data

If you connect a Gmail account to send applications, we request only the gmail.send scope. This means:

• We send emails only on your instruction — either you review an individual application and press send, or you switch on the optional auto-apply feature, which sends only within the limits you configure and which you can turn off at any time.
• We never read, list, or store the contents of your mailbox, inbox, or any messages.
• We send nothing at all until you connect a mailbox and ask us to apply on your behalf.

Limited Use disclosure

SeaFormat's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data security

We protect your data — and in particular sensitive data such as credentials and Google user data — with the following measures:

• Encryption in transit — all data is transmitted over encrypted connections (HTTPS/TLS).
• Encryption at rest for sensitive credentials — email app passwords and Google OAuth tokens are encrypted at rest using industry-standard encryption (Fernet/AES) and are never stored in plaintext.
• Minimal use of Google user data — data accessed through the gmail.send scope is used only to send job application emails you have confirmed; we never read, store, or log the contents of your mailbox.
• Protected document storage — uploaded documents (CVs, certificates) are stored securely with restricted access and are deleted on your request (/deletedata removes your profile, documents, and credentials).
• Restricted access — access to stored data is limited to what is needed to operate the service; we do not sell or share your personal data with third parties.
• Limited retention — data is retained only as long as needed to provide the service and is removed on account or data deletion.

Data retention and deletion

• You can delete all of your data at any time by sending the /deletedata command in the bot. This removes your Career Profile, uploaded documents, Saved Opportunities, and stored email credentials. Application History is retained (it contains no personal data beyond the opportunities you applied to). Anonymous usage counters (document scan and CV parse allowances) are also retained to prevent allowance resets — they hold no personal information.
• You can independently revoke SeaFormat's access to your Google account at any time at myaccount.google.com.

Sharing and subprocessors

We do not sell or share your personal data with third parties for their own purposes. We use the following subprocessors solely to operate the service:

• Hosting / infrastructure — to run the service and store data.
• AI provider — to help draft and format application content.
• Stripe — to process subscription payments.

Contact

For privacy requests or questions, contact us at jobs@seaformat.io.