Service Authorization & Confidentiality

1. What this document is

You are asking Polisha, operated by Tobi Aina, to work on material that matters to you: your resume, your professional profile, or your email inbox. This document is the permission slip. It is deliberately specific, so you know the exact limits of what you are agreeing to.

It applies alongside our Terms of Service and Privacy Policy, across all six packages: Polisha Inbox ($39), Polisha LinkedIn ($69), Polisha Resume ($79), Polisha Visibility ($89), Polisha Applications ($129), Polisha Complete ($149). If anything here conflicts with a general statement elsewhere on https://getpolisha.com, this document governs the question of access.

2. Which packages involve account access, and which involve none

Account access is not universal here. Read this before you assume you have to hand over anything.

• Polisha Resume: no account access. You send a resume file or link; we send documents back. No password, no credential, nothing to sign into.
• Polisha LinkedIn: no account access. You send a profile URL; we send a document you paste in yourself. We never sign into LinkedIn.
• Polisha Applications: no account access, because it is the resume and LinkedIn services together.
• Polisha Inbox: temporary access to one email account is required, because organizing an inbox cannot be done from the outside.
• Polisha Visibility and Polisha Complete: temporary access to one email account is required, because both contain Polisha Inbox.

Important: If your package does not include Polisha Inbox, sections 4 to 7 and section 10 do not apply to you. You will never be asked for a password of any kind.

3. What you are authorizing

You authorize us to do the things listed below that belong to the package you bought, and only those things.

Resume work, Polisha Resume and any bundle containing it:

• Read the resume and supporting material you send us.
• Rewrite and restructure it in an ATS-friendly format, tailored toward the one target role you named.
• Rewrite your bullet points to be achievement-focused, using only the real work you told us about.
• Add relevant keywords drawn from your target role and any sample job description you provide.
• Deliver the finished resume in Word and PDF, to a maximum of two pages.

LinkedIn work, Polisha LinkedIn and any bundle containing it:

• Review your LinkedIn profile as it appears publicly or as you show it to us, and write an audit of it.
• Write a new headline, a new About section, and optimized experience-section content for you.
• Recommend skills and keywords, and reposition how you are described for recruiters.
• Deliver all of that LinkedIn content to you as a document you paste into your own profile.

Inbox work, Polisha Inbox and any bundle containing it:

• Sign into the one email account you nominate, using the temporary password you provide, for the sole purpose of organizing it.
• Create, rename and arrange folders and labels for your job search.
• Create filters and rules that route recruiter mail, application confirmations, interview mail and job alerts into those folders.
• Archive or categorize existing job-search mail so that it is findable.
• Unsubscribe from mailing lists and newsletters that you have told us you do not want.
• Send you a completion checklist describing what was changed.

4. How temporary email access works

This section applies only to packages that include Polisha Inbox. We never receive a permanent password. The access model is deliberately short-lived:

1. You change your email password to a unique temporary password, one you have never used on any other account.
2. You go to Bitwarden Send, create a Send containing that temporary password, and set it to expire within a few days.
3. You paste only the Send link into the intake form. The form has no password field and will never ask for one.
4. We open the Send link, retrieve the temporary password, and sign in.
5. We do the organization work listed in section 3, and nothing else.
6. We sign out, remove the account from any mail client or device used, and delete the temporary password and the Send link.
7. We email you a completion notice. You then change the temporary password straight away.

Important: Never send a password by email, WhatsApp, SMS, a chat message or an ordinary web form. Bitwarden Send is the only channel we accept. If your Send expires before we open it, we will ask you to create a new one, we will never ask you to send the password another way.

The contents of your Send never appear in our notifications, analytics, server logs or order tracker. Our record shows only that a link was received and, later, that the credential was destroyed.

5. What we never ask for

On any package, if anyone claiming to be us asks for any of the following, it is not us. Stop and email hellopolisha@outlook.com

• Your LinkedIn password.
• Any permanent password to any account.
• Any password at all, on a resume-only, LinkedIn-only or Polisha Applications order.
• Your recovery email address credentials.
• Account recovery codes.
• Two-factor authentication backup codes.
• Banking, payment-app or investment account passwords.
• Government, tax or immigration account passwords.
• Social media passwords.
• Your SIN, passport number, date of birth or any government identification number.

6. What we will not do inside your inbox

While signed into your email account, we will not:

• Download, copy, screenshot or forward any message that is unrelated to the authorized work.
• Read messages that are clearly personal, medical or financial. If a message is obviously private, we move on without opening it.
• Permanently delete any important email. Unwanted mail is archived, categorized or unsubscribed from according to your stated preferences, never destroyed without your authorization.
• Filter, archive or unsubscribe anything from a sender you told us to protect.
• Empty your trash, spam or archive folders.
• Change your password, recovery options, security settings, forwarding rules, signature or any account setting beyond the folders, labels and filters we agreed.
• Send, reply to or delete email as you. We never write to anyone from your account.
• Open or use any other service connected to that account, cloud storage, calendar, photos, documents, contacts or payment services.
• Add a device, app password or third-party integration to your account.
• Use your inbox contents for any purpose other than organizing it for you.

If we come across something that looks sensitive, urgent or unrelated, a bank alert, a medical letter, a legal notice, we leave it exactly where it is and, if it seems important, mention it to you in general terms in the completion email.

7. The limits of the inbox work

• One mailbox. Polisha Inbox covers a single Gmail or Outlook account, the one you nominate. A second mailbox is a separate order.
• Up to 5,000 existing emails are organized.
• If your mailbox holds more than that, we prioritise recent mail and job-search-related mail, set up filters so that new mail sorts itself from then on, and tell you plainly in the completion email where the work stopped.
• Polisha Inbox carries no formal revision. If we made an error in the setup, a filter routing the wrong mail, a mislabelled folder, a protected sender we filtered anyway, we correct it, and that is not a revision, it is fixing our own mistake.
• If a correction needs access again, you create a new temporary password and a new Bitwarden Send link, because we do not keep the old one.

8. Accurate information and our no-fabrication commitment

This applies to every package, and it is not negotiable.

Important: We never invent, exaggerate or misrepresent your experience, qualifications, employers, job titles, dates, certifications, education or achievements, on a resume, on a LinkedIn profile, or anywhere else. Everything we write about you is drawn from what you actually did.

You warrant that everything you give us is accurate, complete and truthful, and you are solely responsible for its accuracy. We do not verify your claims; we present real experience well. Review everything we deliver before you publish or submit it, once it is on your profile or in an application, it is your statement about yourself.

If you ask us to misrepresent your qualifications, we will say so and offer an honest alternative. If you insist, we will decline the order or halt work on it: a full refund if we decline before substantive work has begun, and a refund at our reasonable discretion under the Refund Policy if we halt after it has. Misrepresentation on a job application can have serious consequences for you, including a withdrawn offer or dismissal after you are hired.

9. Confidentiality

Everything we learn about you in the course of this work is confidential. That includes your resume, your career history, your salary details, the contents of your inbox, the fact that you are job-searching, and the fact that you are a customer at all.

• We do not discuss your job search with anyone.
• We do not name you, quote you or show your materials as an example without your written permission.
• We do not sell, share or publish anything you give us.
• We use your information only to deliver the package you paid for.
• The only exception is where the law requires disclosure.

This obligation does not end when the work does. It continues indefinitely.

10. Deleting credentials and signing out

On packages that included inbox access, as soon as your work is complete and before we send the completion email, we:

1. Sign out of your email account.
2. Remove the account from any browser profile or mail client used for the work.
3. Delete the temporary password from wherever it was held.
4. Delete the Bitwarden Send link.
5. Clear any working notes containing credentials.

We keep no copy of your temporary password. If you later ask us for work that needs inbox access again, you will need to create a new temporary password and a new Send link. On packages without inbox access there is nothing to delete, because there was never a credential.

11. Your own obligations

On every package you agree to give us accurate information and to review what we deliver before you use it. If your package includes inbox access, security is also shared, and you agree to:

• Confirm that you own the email account, or that you have the clear right to authorize access to it.
• Use a unique temporary password that you do not use anywhere else.
• Set an expiry on your Bitwarden Send.
• Tell us which senders must be protected from filtering, archiving or unsubscribing.
• Change the temporary password immediately when you receive the completion email, not tomorrow, not next week.
• Sign out all other sessions on the account once you have changed it.
• Turn two-factor authentication back on if you disabled it to let us in.
• Tell us straight away if anything about your account looks wrong.

Important: Change your temporary password as soon as you receive the completion email. Until you do, a password you shared over the internet is still live on your account.

12. LinkedIn: no password, ever

LinkedIn's User Agreement prohibits sharing your account or password with anyone. We follow that rule without exception, on every package. We never ask for your LinkedIn password and never sign into your LinkedIn account.

Instead, your rewritten headline, About section and experience content are delivered as a clean document with clear instructions. You paste each piece into your own profile, in your own session, in a few minutes.

If you would rather have help while you do it, you may ask for a short optional screen-share or remote-control session. In that session you remain signed in, you remain in control of your own device, and you enter the content yourself. It is optional and is not part of the standard asynchronous service.

13. No guarantee of employment, interviews or screening results

These packages improve your professional presentation and the organization of your job search. That is all they do, and that is all we claim they do.

• We do not guarantee a job.
• We do not guarantee interviews.
• We do not guarantee recruiter replies, profile views or any level of engagement.
• We do not guarantee any outcome, ranking, parsing score or “ATS pass rate” from any employer's screening software. Applicant tracking systems vary widely between employers and change over time; we build to widely-accepted parsing and formatting practice and make no claim of compatibility with any named product.
• We do not guarantee any specific result of any kind.

Hiring decisions rest entirely with employers and recruiters. They depend on your experience, your qualifications, market conditions, timing, competition and your own effort in applying. We are not a recruitment agency and we do not represent you to employers.

14. Withdrawing your authorization

You can withdraw this authorization at any time, for any reason, without explanation. If your package includes inbox access:

1. Change your email password immediately. This is the fastest and most complete step.
2. Sign out other sessions on the account.
3. Email hellopolisha@outlook.com to tell us you have withdrawn access.

On a package with no account access, a single email to hellopolisha@outlook.com is enough. When we receive your notice, we stop work immediately, delete any credential and Send link we hold, and confirm by email. We will send you whatever portion of the work was already complete. Any refund is handled under the Refund Policy, including the pro-rating rule for partly-started bundles.

15. What you agree to when you tick the consent box

By ticking the consent box before payment or intake, you confirm that:

• You have read this document and agree to it.
• Everything you give us about your experience, qualifications, employers, titles, dates, education and certifications is accurate and truthful, and you understand we will not invent, exaggerate or misrepresent any of it.
• You authorize Polisha to carry out only the tasks listed in section 3 that belong to the package you bought.
• If your package includes Polisha Inbox: you own the email account you are nominating, or you are authorized to grant access to it, and you authorize us to sign into that one account using a temporary password shared only through an encrypted, expiring Bitwarden Send link.
• If your package does not include Polisha Inbox: you understand that no account access, password or credential of any kind will be requested.
• You understand that your LinkedIn password will never be requested and that you will paste the LinkedIn content into your own profile yourself.
• You understand that credentials, where any exist, are deleted as soon as the work is complete, and that you must change your temporary password immediately afterwards.
• You understand that no employment, interview, recruiter reply or screening result is guaranteed.
• You understand that you may withdraw this authorization at any time.

If anything in this document is unclear, ask before you tick the box. Email hellopolisha@outlook.com Privacy and data-deletion requests go to hellopolisha@outlook.com

16. Not legal advice

This document was prepared as a practical draft for the convenience of the business owner. It is not legal advice and does not create a lawyer-client relationship. It should be reviewed and adapted by a qualified lawyer in Ontario, Canada before the service goes live.