Youth4work AI connector privacy policy
This page explains what happens to your data when you connect an AI app (such as Claude or ChatGPT) to your Youth4work account through our connector at mcp.youth4work.com.
Last updated: 4 October 2026.
Who we are
The connector is run by Youth4work (Y4W Learning Pvt. Ltd.), the operator of www.youth4work.com. Contact: support@youth4work.com.
The short version
- The connector only works after you sign in and approve it. It then acts as you, with the same permissions you have on youth4work.com, and nothing more.
- We do not sell your data. We do not use your data, or your conversations, to train AI models.
- We never see your chats with the AI app. We only see the tool requests the AI app sends us (for example "search jobs for Python in Pune") and we answer them.
- Sign-in tokens are stored hashed and encrypted. Your password is never stored by the connector.
- Every action that changes something is logged, and there are daily limits on actions that reach other people.
- You can disconnect at any time from your AI app, and ask us to revoke all connections by e-mail.
Two services, two policies
When you use the connector, two companies handle your data:
- Youth4work handles the data on your Youth4work account and the requests the connector receives. This page and our terms cover that.
- Your AI app provider (for example Anthropic for Claude, OpenAI for ChatGPT) handles your conversation, including whatever Youth4work data the connector returns into the chat. Their own privacy policy covers that. We do not control what they store or for how long.
Only share with your AI app what you are comfortable with that provider processing.
What the connector can access
The connector gives your AI app the same access you have when signed in on youth4work.com. What that means depends on your account type.
Job seeker accounts
| Data | What the connector can do |
|---|---|
| Your profile | Read and edit your name, headline, about, career aim, city, preferred locations, skills, education, class 10/12 schooling, work experience, projects, salary details, activities, video resume link, social links, profile photo and banner. |
| Private details | Read and edit your e-mail, mobile, alternate contacts, gender, date of birth, address and PIN code, and your account settings (profile privacy, e-mail notifications, auto-apply). These are returned only to you. |
| CV and documents | Upload or replace your CV; upload, replace or delete private documents (marksheets, certificates). |
| Jobs | See recommended jobs, apply to a job, and list your applications. When you apply, the employer sees your profile and CV, as on the site. |
| Skill tests | See recommended tests and your scores. Tests are always taken by you in your own browser, never by the AI. |
| WorkMail | Read your WorkMail conversations (opening one marks it read) and send messages in your name. |
| People | Find people you may know (public profiles only: name, username, headline, city, profile link; never e-mail or phone). |
Employer accounts
| Data | What the connector can do |
|---|---|
| Company profile | Read and edit your company page: about texts, website, size, turnover, industries, office locations, company representative contact details, social links, logo and banner. |
| Jobs | Post, edit, close and reopen your jobs, and read their details and statistics. |
| Applicants | List people who applied to your jobs (profile summary, skills, scores, whether they have a CV), shortlist and rate them, and keep private notes. |
| Candidates | Search job seekers with public profiles who match a job, and read a candidate's profile as employers see it on the site (without contact details). |
| Contact details | Reveal a candidate's e-mail, mobile and CV link, one candidate at a time, only for job seekers with public profiles or people who applied to your jobs. Limited to 50 different candidates a day, and every reveal is logged. |
| Assessments | Create custom tests, add questions, invite people by e-mail or username, and read results (names, usernames, e-mail addresses, scores, section scores, time taken and the number of webcam snapshots). |
| WorkMail | Read your WorkMail conversations and send messages in your name (up to 50 recipients per message). |
Everyone, including without signing in
Public Youth4work data: live jobs, public talent profiles (no contact details), mock tests and college pages. The public server at mcp.youth4work.com/public/mcp returns only this public data and needs no account.
What the connector cannot do
- It cannot take tests for anyone, make payments, buy services, or deactivate your account.
- It cannot see other people's private profiles, or contact details except through the employer "reveal" described above.
- It cannot read your conversation with the AI app, your AI app's memory, or files you have not asked it to upload.
What we collect when you use the connector
- Sign-in. When you sign in with a Youth4work password, the password is checked by youth4work.com and is not stored by the connector. When you sign in with Google, Google sends us your name, e-mail address, whether the e-mail is verified, and your Google account ID, which we use to find or create your Youth4work account. If you create an account on the sign-in page, we collect what the form asks for (name, e-mail, optional mobile, city, and for employers the company name, designation and website), as on youth4work.com.
- Connection records. The AI app's name and its web address, the access it was granted, and when.
- Tool requests. The tool the AI app called and the details it sent (for example the job you applied to, or the text of a message). Data you ask the AI app to save (a new headline, a CV file) is stored on your Youth4work account exactly as if you had done it on the site.
- Audit log. For every action that changes something, we record your user ID, the action, the item it affected, the AI app's name, a short note (up to 400 characters) and the time.
- Technical data. Our hosting provider, Cloudflare, processes IP addresses for security and rate limiting.
How we use it
- To carry out the actions you or your AI app request, as you could on youth4work.com.
- To enforce daily limits and rate limits, prevent spam and abuse, and investigate problems or complaints.
- To keep the service secure and working.
We do not sell your data, use it for advertising through the connector, or use your data or your requests to train AI models. Youth4work does not receive your conversations with the AI app.
How tokens are protected
Connections use OAuth 2.1 with PKCE. Access tokens last one hour; refresh tokens last up to 90 days and change each time they are used. We store only hashes of tokens, and the account details attached to a connection are encrypted. The sign-in page itself keeps a short-lived record (15 minutes) while you sign in. All traffic uses HTTPS.
Daily limits and safeguards
To protect other members, actions that reach other people or change a lot of data have daily limits per account, for example: 25 job applications, 30 WorkMail messages for job seekers (100 recipients for employers), 10 job posts, 50 contact reveals and 500 assessment invitations a day. The full list is in the docs. Actions that reach other people are marked so your AI app asks you before running them. Private and deactivated profiles never appear in searches.
Sharing
- With other members, only when you take an action that shares data, the same as on the site (for example applying to a job shares your profile and CV with that employer; sending a WorkMail shares the message).
- With your AI app provider, the results of the tool requests your AI app makes on your behalf.
- With service providers that run the service for us: Cloudflare (hosting and security), Microsoft Azure (Youth4work's servers and database), Google (only if you use Google sign-in), and our e-mail provider for notifications.
- When the law requires it.
How long we keep data
- Access tokens: 1 hour. Refresh tokens: up to 90 days, or until you disconnect or we revoke them.
- Sign-in page records: 15 minutes.
- Audit log: 12 months, then deleted.
- Your Youth4work account data (profile, applications, messages, jobs): as described in the Youth4work terms, until you delete it or close your account.
Disconnect and revoke access
- Claude: Settings (or Customize), Connectors, Youth4work, then Disconnect or Remove.
- ChatGPT: Settings, Apps (or Plugins), Youth4work, then Disconnect.
- Other apps: remove the Youth4work server from the app's MCP settings.
- Revoke everything: e-mail support@youth4work.com from your account's e-mail address and we will revoke every AI connection on your account.
Disconnecting stops future access. It does not undo actions already taken (for example a sent message or a submitted application), and it does not delete data your AI app provider already holds.
Your choices and rights
You can see and correct your data on youth4work.com, make your profile private, turn off e-mail notifications, and ask us to delete your account. Write to support@youth4work.com for access, correction, deletion or any privacy question. Grievance officer: Rachit Jain, support@youth4work.com.
Children
The connector is meant for job seekers and employers. Do not use it if you are under the minimum age set in the Youth4work terms.
Changes
We will update this page when the connector changes how it handles data, and change the date at the top.
youth4work.com · AI connector · Docs · Connector terms · Youth4work terms