Venado – Privacy Policy

Last updated: 5 October 2026

Venado (“the app”, available at app.venado-rec.com) is a private, internal recruiting workspace operated by Venado Recruiting and used only by its own team members. It is not offered to the general public. This page explains what data the app accesses through a team member’s Google account and how that data is used.

What we access and why

When a team member signs in with Google, the app asks for these permissions:

• Name and email address (basic profile) – to identify who is signed in and to allow only approved team accounts.
• Gmail – send only (gmail.send) – to send emails that the team member explicitly composes and sends from inside the app, such as a candidate submission to a client. The app cannot read, search, list or delete anything in the mailbox.
• Google Calendar – events (calendar.events) – to create and update interview events that the team member schedules from inside the app.

How the data is used and stored

Google data is used only to provide the features described above, on behalf of the signed-in team member. To keep sending email and creating calendar events without asking for a new sign-in every time, the app stores an OAuth refresh token for each team member in its database (hosted on Supabase). This table is not readable from the browser and is accessed only by the app’s server code. The app does not copy or keep the contents of any email or calendar beyond the records it creates itself (for example, a log entry that an email was sent to a client).

Sharing

We do not sell Google user data, do not use it for advertising, and do not share it with third parties, except with the infrastructure providers needed to run the app (Supabase for the database and Vercel for hosting), or where required by law. Google user data is not used to develop, improve or train generalized AI or machine-learning models, and no human reads it except as needed to operate the service or fix a problem the team member reports.

Venado’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Recruiting data

Separately from Google data, the app stores candidate, job and client information that the team enters for recruiting purposes. It is visible only to authorized team members, and to a client only through that client’s private report link.

Revoking access and deletion

A team member can revoke the app’s access at any time at myaccount.google.com/permissions. To have the stored token or any other data deleted, email ofer@venado-rec.com and it will be removed.

Changes and contact

If this policy changes, the date above will be updated. Questions: ofer@venado-rec.com.