Security

Built by engineers. Secured for engineers.

We know what it means to hand over the keys to your GitHub and LinkedIn. FetchWork was built with paranoid-level security from day one.

Our guarantees

The commitments that don't change, whatever ships next.

The GitHub scopes we request are read-only. We can read what you approve; we cannot modify your code.

GitHub and LinkedIn are read through their official OAuth consent flows. Nothing is scraped.

We never email employers on your behalf without explicit, per-job approval.

You're the customer, not the product. Your profile is never sold or made searchable to recruiters.

The boring, important parts — the ones that keep the blast radius of any single token close to zero.

Encryption in transit (TLS) and at rest for stored data.

Least-privilege access internally; we request the narrowest OAuth scopes that make the product work.

Revoke a connection from your provider's settings and we stop reading immediately.

Delete-on-request: ask us and your derived profile is removed.

Found something? We want to know. Email us with steps to reproduce and we'll acknowledge it quickly. We don't pursue good-faith security research.