# Key data flows

## Add and track a job

The UI submits a reviewed manual or URL-import form to the API. The API validates and normalizes the payload, writes the opportunity/application records, and records a job event. Follow-up, correspondence, attachments, reminders, analytics, and exports build on that application record.

## Career and CV

`/career` owns the master career profile. CV upload/extraction produces bounded artifacts and extraction runs; tailored CVs and cover-letter revisions retain their own editable/history records while referring back to the profile and job context. Playwright renders PDFs in the API process with admission and timeout limits.

## Mail and notifications

Gmail, Microsoft Graph, and IMAP connections are user-owned and encrypted where appropriate. Gmail imports use a human review queue before uncertain matches are linked. SMTP sends password/reset, verification, reminder, and reviewed employer messages; delivery state is retained where the feature supports it.

## AI

The API sends authenticated, policy-qualified requests to the internal FastAPI service. The service performs local summarisation/extraction and can route selected CV tasks to an explicitly enabled provider. Inputs are bounded, parser work is isolated, and AI output remains editable/reviewable.