ECAS runs your job search: it reads your CV, applies on your behalf under permissions you set, and contacts people at companies you’re targeting when you’ve authorised that. This page describes what it collects to do that, and what it never does with it.
ECAS (getecas.com) is operated by Qasim, an individual, not a registered company. For anything on this page — a question, a correction, a deletion — write to qass0022@gmail.com.
To sign you in: your name, email address, and profile photo from LinkedIn. That’s the entire scope we request — not your work history, not your connections, not anything else on your profile.
What you tell us directly, in kickoff: your CV, and the answers you give across identity, target roles and countries, compensation figures, availability, and screening questions (work authorisation, notice period, references, and similar). Four of those questions — ethnicity, religion, disability, criminal record — are asked only if you separately agree to it; otherwise they’re recorded as “prefer not to say” and never asked again.
Your CV: we extract its text to build a structured record of your career, which is what every application and message is drawn from. Nothing on it is invented, rounded, or improved — if it isn’t on your CV or in your own answers, it doesn’t go out under your name.
Your Google account, if you connect it: connecting Gmail is optional and separate from signing in. If you connect it, we store the token that lets your campaign read, label, and send email on your behalf — never more than that; we never request permission to delete your mail or manage your account.
To run your campaign: draft and submit applications, evaluate how well a role fits what you’ve told us, and — only where you’ve granted it — email a decision-maker on your behalf once their address is verified. Every action taken is logged and visible to you.
The employers and people you’re applying to or reaching out to necessarily see what you’ve authorised us to send them: your application, or a message under your name. That’s the product working as intended, not a disclosure to a third party.
We use a small number of infrastructure providers to run ECAS, each processing only what its job requires: a database provider to store your answers, a hosting provider for the web app, a compute provider that runs your own private automation instance, an AI provider that reads your CV to build your career record, and a payments provider that handles your card directly — your card number never reaches getecas.com. If you sign in with LinkedIn or connect Google, those two companies are involved in exactly the authentication exchange that requires. We also use a third-party service to confirm a contact email is real and deliverable before anything is ever sent to it.
None of these providers get to use your data for their own purposes. We don’t sell data, and we don’t share it with anyone outside this list.
Nothing is shared, sold, or scraped from you. Nothing is posted, followed, or messaged on your behalf without a permission you specifically granted — every one of those is a switch you control and can turn off, and one switch stops everything mid-flight, immediately, whenever you want.
Ethnicity, religion, disability, and criminal history are collected only with a second, separate agreement from you — declining it changes nothing else about the product. Any answer you do give is used only where you’ve told us it may be used, on forms that ask for it directly; it is never inferred, guessed, or applied without your say-so.
We keep your CV and application data for as long as your campaign is active and for a reasonable period after, in case you return. If you want it deleted sooner — CV included — write to qass0022@gmail.com and we will remove it. This is a request we handle directly today, not yet a self-serve button in the product.
You can ask to see what we hold on you, correct it, withdraw any consent you’ve given (special-category answers included), or have it deleted, at any time — write to qass0022@gmail.com. Withdrawing consent stops future use; it doesn’t undo an application already sent with your permission.
Data moves over encrypted connections and is held with providers chosen for that purpose. Access to it is limited to the operator running your campaign.
If this changes in a way that matters, we’ll update the effective date above. Continuing to use ECAS after a change means you’ve seen it.