What you are asked to agree to

What changed since you last agreed to this

If you accepted version 2, one thing has been added, and it is the one version 2 told you to expect.

Your Search Team can now send an application for you. Version 2 said applying was "not built, and not authorized by this document". It is built, for jobs where there is somebody to email, and this is the conversation that was promised.

Nothing has been removed, and nothing about the model, your mailbox, or your credentials has been loosened.

Nothing else has changed. Nothing was quietly removed. Applying to jobs in your name is still not authorized, and still not built.

First, what your Search Team actually is

Your Search Team is software. It is a set of AI agents — large language models — that read your mail, draft your messages, and act on your behalf.

No person is reading your mailbox.

We call it a Search Team everywhere else because that is what it does for you. Here, where you are deciding whether to hand it authority, you should know exactly what it is.

What you are authorizing it to do

This is the whole list. There is no "and similar activities" at the end of it.

• Read your job-search mailbox. To find employer replies, job alerts, and the sign-in codes that employer portals send.
• Send email from your address, as you. Follow-ups and replies to employers. These arrive looking like you wrote them, because as far as the recipient is concerned, you did.
• Send your search to Anthropic, so a model can read it. Your profile answers, the job postings being considered for you, and the messages in your job-search mailbox go to Anthropic — the company that makes Claude, the model your Search Team thinks with.
• Send an application in your name, to an employer you approved it for. By email, with the exact resume and the exact letter you read and said yes to, from your address and over your name.

That is what Fried Mango can do today. It is deliberately short.

About applying, because it is the new one

You approve every single application, one at a time, before it goes. Not a setting you turn on once, and not "applications like this one". You read the exact letter and open the exact resume, and you say yes to that one. If either is rewritten afterwards your yes no longer covers it, and we ask again.

We do not decide a job is worth applying to and then apply. Your Search Team reads postings and decides which are worth your time; it writes what it would send; then it stops. The sending is your act, performed by us on your instruction.

The resume an employer opens is the file you opened. It is made once, when the words are written, and stored exactly as it is. We never rebuild it on the way out — so what lands in their inbox is the document you looked at, not a fresh version of it.

Only by email, and only where there is somebody to write to. Where a job can only be applied for on the employer's own system, your Search Team cannot do it and will tell you so rather than quietly leaving it in a queue. Filling in employers' forms is not built and is not authorized by this document.

One thing we will not do without asking you again: apply to more than one job at an employer where you are already talking to someone. Applying past your own recruiter is worse than doing nothing, so those come to you as a conversation to have rather than an application to send.

About the third one, because it is new

Anthropic is a supplier, not a partner. They run the model; they do not get a say in your search and they are not told who you are beyond what is in the text we send. We chose to name them rather than say "an AI provider", because a name is something you can look up and a category is not.

What they may do with it, in their words and ours:

• They do not train models on it. Their commercial terms for the interface we use say so directly, and that is the basis on which we send anything at all.
• They delete it within thirty days. That is their standard retention for this interface. It is not zero — we have no arrangement with them for zero — so for up to a month a copy of what was sent exists on their systems as well as ours.
• One exception, which we would rather you heard from us. If something we send trips their abuse detection, they may keep it for as long as two years while they look into it. We do not expect that to happen to a job search. We are telling you because a promise of thirty days with a footnote is worse than a plain description of both.

If we ever add a second model company, that is a new version of this document and we ask you again. Not a notice, not a footnote — the same conversation we are having now. That is the reason this names one company instead of leaving room.

What it will not do

• It will not apply for a job you have not approved, and it will not treat one approval as permission for the next.
• Nothing goes out until you have read the exact words and said yes. Not a summary. Not "an email like this one". The actual text, the one that will be sent.
• It will not touch any mailbox but the one you signed in with.
• It will not put what it reads into a model that serves anybody else. What you tell it and what it finds makes your search better, which is the whole point of it. None of it trains a general model, none of it improves another candidate's Search Team, and Anthropic does not train on it at all.
• It will not send your credentials anywhere. The model never receives the key to your mailbox, your passwords, or anything that would let it or anyone holding it sign in as you.
• No person here reads your mailbox — not for support, not for debugging, not out of curiosity.

Why we asked you to make a separate Gmail

Because this authorization is real, and it should be as small as it can be.

A mailbox made for your job search contains your job search. Your everyday account contains fifteen years of your life. We would rather not be able to read that, and you should not want us to — a Search Team reading job postings all day is one bad posting away from reading things that are nobody's business.

That reasoning got stronger with version 2, not weaker. What we can read is now also what we can send to a model, and the smallest mailbox is the smallest version of both.

It protects you the other way too. If something ever goes wrong with the job-search account — ours or Google's fault or nobody's — you have lost a mailbox you made two months ago, not the address your bank, your doctor and your family use.

This is a version 0

Fried Mango is new. It works, and it is not finished. What it can do will grow.

Two different things will happen as it grows, and we promise different things about each:

The second one is the promise that matters. If we ever change what it does as you, we will ask — not tell. A new verb means a new version of this document and a fresh acceptance, and until you accept it, the new thing does not happen.

That is why the list above is short and specific rather than broad and comfortable. A broad authorization would let us grow into it quietly. This one cannot. Version 3 exists because of exactly that: sending an application was a new verb, so you are reading this instead of being told afterwards.

What is coming, so you are not surprised by the shape of it: applying through an employer's own hiring system rather than by email, and creating an account on one where that is required. Neither is built, and neither is authorized by this document. When they exist, you will be asked.

If you change your mind

You can revoke Fried Mango's access to your mailbox at any time, from your Google account's permissions page, without asking us. It takes about thirty seconds and everything stops.

You can also just tell us, and we will stop and delete what you would like deleted.

Who this applies to

The first seven accounts, and no more than seven. Each one is invited personally.

If you are reading this, you are one of them.

Why there are only seven

Fried Mango is a version 0. It works, and it is not finished.

You are not getting a deal. You are running your actual job search on new software — which is about the least forgiving thing anyone can test anything with, because a missed reply or a badly worded follow-up is not a bug report, it is a job you did not get.

Seven is small because seven is how many people can be paid real attention. If something goes wrong you will be talking to a person who knows your account, not to a queue.

What we get from this is the only thing that actually proves a job-search tool works: whether it holds up across real searches, run by people who are not us. That is worth a great deal, and the free period is what it costs. It is not a promotion.

What will change is the product — more of it, and better. What it does on your behalf is a different matter, and is covered separately in the authorization you accepted alongside this: if that list ever grows, we ask you again rather than telling you.

What you pay right now

Nothing.

How long that lasts

At least two months, counted from the day you accept these terms — not from the day you signed in, and not from the day you were invited.

"At least" is the honest word. Two months is a floor, not a deadline. It may run longer, and if it does you will not have to ask or chase anyone: it simply continues until we tell you otherwise, and we cannot tell you otherwise without giving you notice.

What happens when it ends

The standard rate is $100 per month, billed up front.

Before any of that happens, we will ask you for payment details. We do not have them, we are not holding them, and nothing can be charged to you until you give them to us and say yes.

What you will get before you are ever charged

Thirty days' notice, in two places:

1. An email, to the address you signed in with.
2. A banner on your dashboard, which stays until you have dealt with it.

Two places rather than one because an email can go to spam and a banner can go unread, and neither of those is your fault. Thirty days is enough time to decide, to export what is yours, or to leave.

Because the free period is a minimum of two months and the notice is thirty days, the earliest you could hear from us about money is about a month in. If you have heard nothing, nothing is happening.

One thing this does NOT promise

Being early does not lock in a price. If the standard rate changes later, you pay the standard rate.

This is written down because it would be easy to leave vague and let you assume otherwise. What being early gets you is a long free period, honest notice, and somebody's actual attention. It does not get you a permanent rate, and pretending otherwise now would only be a worse conversation in a year.

If you leave

You can stop at any time, and there is nothing to cancel while you are not paying. Your data is yours; ask and we will give you a copy, or delete it.

If this document changes

A material change — anything about price, duration, or notice — requires your agreement again. You will be asked; it will not happen quietly, and the old version stays on record as the one you originally accepted.

Fixing a typo is not a material change.