Privacy Policy

This notice covers jobsistant.com, the Jobsistant dashboard, and the Jobsistant browser extension. Jobsistant (“we”, “us”) is operated from Bengaluru, Karnataka, India and is responsible for the processing described here. Questions, privacy requests and grievances can be sent to [email protected].

1. How the browser extension accesses a page

Jobsistant shows a first-run disclosure and does not read a page or contact our product service until you accept it. After that:

• Automatic recognition uses 21 declared application-platform host patterns. These cover 16 ATS platforms plus Amazon Jobs. Your browser shows the exact sites in the extension’s permission details. Recognition can show an invitation; filling still requires your action.
• Every other website is click-only. Jobsistant does not inject its form reader or detect forms there in the background. Clicking the Jobsistant toolbar icon gives temporary access to the current page through the browser’s activeTab permission. If you open it from the browser’s side-panel menu instead, the browser may ask you to allow only that website.
• Access follows the page you chose. Temporary access ends when you leave that site or close the tab. A website permission can be removed at any time in the browser’s extension settings (chrome://extensions in Chrome, edge://extensions in Edge, brave://extensions in Brave, about:addons in Firefox). Jobsistant does not compile or sell your general browsing history.

2. Information we collect

Website, accounts and early-access records

• Your email address when you create an account or join an optional product-update list, together with a referral code or referring page, IP address, user agent and signup time used to operate and protect those services.
• Anonymous website audience measurement (Umami), which is cookie-free, stores no IP address or user identifier, and can be turned off at any time. Optional website analytics that run only if you enable them. The product demo video loads from YouTube only if you press play. The details and controls for all three are in our Cookie Policy.
• Routine server records such as request time, IP address and browser type.

Account and professional profile

• Account details such as your name, email address, a one-way password hash or Google sign-in identifier, session records, and a revocable token used to connect the extension.
• The professional information you add to your Super Context, including work history, education, projects, skills, locations, links, work authorization and application facts. This may come from a resume you upload, a profile document or link you provide, dashboard edits, and answers you choose to save through the extension.
• Uploaded resumes and documents generated at your request, such as tailored resumes and cover letters.

Optional job-site sign-in · local to this browser

Optional job-site sign-in is included in extension 1.0.4.

In versions offering this feature, you may separately enter one job-site email and password in the extension’s own setup or Account menu. The saved email and password stay in this browser on this device. They are never sent to Jobsistant or its AI providers and are not added to your professional profile. Clicking to fill puts them in the job site’s form. The extension never reads passwords back from a page and excludes account controls from ordinary profile filling and answer save-back. It does not choose a social sign-in provider, fill verification codes, tick consent boxes, or press a site’s sign-in, create-account or submit buttons.

The record uses extension-local browser storage, with no Jobsistant server backup or browser sync. It is not a separately encrypted password vault; access to your browser profile can expose it. Unique passwords in a password manager are safer. Never use your email-account or Jobsistant password for this optional saved pair.

Remove in the extension, explicit sign-out from the extension’s Account menu, or uninstalling the extension deletes this browser’s saved copy. Closing the browser or temporary account-token expiry does not. Dashboard sign-out and deleting cloud profile data are separate actions; use Remove if you want to erase the local pair. Deletion does not delete an employer’s account.

Sign-in interactions use account-associated product analytics with closed categories for the action, email/password button, page type and vendor. These events contain no credential values, lengths, page URLs, form labels or password-rule text. They are not anonymous account activity.

Application pages and product activity

• On a page where Jobsistant is active: the application URL, job-description text, job title and company where available, and form signals such as field labels, input types, option text and surrounding structure.
• Application activity needed for your history and for reliable filling, including fields filled, skipped, corrected or left for you and the confidence result. Values in the form are not included in the field-classification request.
• Answers you type into recognized application fields while Jobsistant is active may be saved to your account so they can be reused later. The first-run disclosure calls this out before it begins, and turning Jobsistant off stops it.
• Product analytics associated with an account identifier. Signup details may be associated with the analytics profile, but product events use a fixed schema and do not contain resume text, form answers, field questions, job descriptions, company names or URLs.

3. Information Jobsistant excludes

The extension filters the following categories locally before page information is sent. It does not collect, store, or fill them:

• Passwords and credentials read from third-party pages. The only exception to storing or filling job-site credentials is the optional pair you enter directly in the extension, described above. It stays outside our servers, AI processing and professional profile.
• CAPTCHA and other human-verification responses.
• Payment-card, bank-account or other payment-instrument details.
• Government identity numbers such as passport, national identity and social security numbers.

Jobsistant currently leaves voluntary self-identification questions—such as race or ethnicity, gender, disability and veteran status—for you. It does not infer, transmit, save, or fill those answers through the extension. We will provide a new notice and explicit, category-specific choice before offering any feature that changes this behavior.

4. How we use information

• To create and secure your account and connect the browser extension.
• To parse information you provide, match application fields, reuse your saved answers, draft grounded responses, generate documents, and show your application history.
• To provide support, diagnose errors, prevent abuse and protect the service.
• To improve form recognition using non-value structural information, as described below.
• To comply with law and enforce our terms.

Where a law requires a legal basis, we rely on performance of our agreement with you, consent where requested, legitimate interests in operating and securing the service, and compliance with legal obligations. We do not make an automated decision that submits an application or produces a legal or similarly significant effect; you review and submit.

5. Your information and shared form structure stay separate

• Your content is account-scoped. Your profile, documents, saved answers and application activity are not placed into the shared form-recognition table.
• Shared recognition data contains no user-entered values. It can contain a normalized field label, field type and structural fingerprint so the same kind of field is recognized more reliably later. Release checks enforce this separation.

6. Service providers and disclosures

We do not sell personal information and do not disclose it to advertisers, recruiters or employers as a separate Jobsistant data product. Information is shared only as reasonably necessary with providers that support:

• cloud hosting, databases and document storage;
• AI processing used to parse documents, understand a job description, draft an answer or generate a requested document;
• account authentication, transactional email, security and error diagnosis;
• product analytics and website analytics.

AI services receive only the material needed to perform the feature you requested. We do not use your content to train a Jobsistant model or permit it to be used for advertising. AI gateways and model providers may retain limited data under their security, abuse-prevention and legal policies; provider practices can vary by selected endpoint. You can ask us for the current provider categories and safeguards.

We may also disclose information with your specific consent, when required by law, to protect users or the service, or in connection with a merger, financing, acquisition or sale of assets. In a business transaction, this policy continues to apply until you are notified of a change.

7. Chrome Web Store Limited Use

Jobsistant’s use and transfer of information received from Google Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that information only to provide or improve Jobsistant’s user-facing job-application assistance. We do not use or transfer it for personalized advertising, retargeting, creditworthiness or lending.

Human access to extension user data is prohibited except with your specific consent for support, when necessary for security or abuse investigation, when required by law, or after aggregation and anonymization for internal operations.

8. Microsoft Edge Add-ons and Firefox Add-ons

Jobsistant is also distributed through Microsoft Edge Add-ons. The Edge store listing discloses the data categories Microsoft requires developers to declare. Jobsistant declares four, shown publicly on the listing: personally identifiable information, because your name and contact details flow through fills; authentication information, because the extension stores a revocable account token and the optional local job-site sign-in described above; user activity, because application actions such as fields filled, corrected or skipped are recorded to provide your fill history; and website content, because it reads the form labels and job description on the page you fill.

Jobsistant is also distributed through Firefox Add-ons. Firefox shows the data an extension declares on its listing and when you install it. Jobsistant declares five required categories: website content, because it reads the form labels and job description on the page you fill; website activity, because an answer you correct can be saved back to your profile; browsing activity, because it recognises application-platform pages; personally identifying information, because your name and contact details flow through fills; and authentication information, for the revocable account token and the optional local job-site sign-in. Technical and interaction data is listed as optional and is not collected: the extension contains no analytics.

The handling described in this policy — including the exclusions in section 3 — is identical in every supported browser.

9. Retention and security

• Account content and application activity are generally kept while your account remains open and as needed to provide the service. You may request deletion as described below.
• Early-access records are kept until you ask us to remove them or they are no longer needed for the early-access programme.
• Session and extension tokens expire or are removed when revoked. Security and server logs are retained only as long as reasonably needed for diagnosis, security and legal duties.
• Backups are protected and age out on a limited schedule. Non-personal shared field structure may remain because it contains no user-entered answers.

We use safeguards appropriate to the data, including encrypted network transport, access controls, account-level authorization, short-lived document links and release checks for the product’s privacy boundaries. No online service can promise absolute security; please contact us promptly if you believe your account is at risk. More detail is available on our Security page.

10. Your choices and rights

• View and correct supported profile information in the dashboard.
• Request access to, a portable copy of, correction of, or deletion of personal information by emailing [email protected]. Full-account export and deletion are handled as verified privacy requests where a self-service control is not available.
• Turn Jobsistant off from the panel, sign out, revoke site access in the browser’s extension settings, or uninstall the extension.
• Turn off anonymous website analytics, or decline or change optional website analytics, in Cookie settings.
• Object to or ask us to restrict processing where applicable, and complain to the data protection authority available in your jurisdiction.

We may need to verify your identity and may retain limited information where law requires it, including for security, fraud prevention, accounting or legal claims. We respond within the period required by applicable law and do not discriminate against anyone for exercising a privacy right.

11. International processing

Jobsistant is operated from India and some providers operate in other countries. Information may therefore be processed outside your country. Where applicable law requires transfer safeguards, we use contractual or other recognized safeguards appropriate to the transfer.

12. Children and policy changes

Jobsistant is not directed to children under 16 and we do not knowingly create accounts for them. Contact us if you believe a child has provided personal information.

We may update this notice as the service or law changes. The date at the top identifies the current version. If a change materially affects how we use personal information, we will provide notice through the service, by email, or by another appropriate means before the change takes effect where required.

13. Contact

Privacy questions, rights requests and grievances may be directed to [email protected]. Please describe the request and the Jobsistant account email involved; do not send a password, government identity number or payment information.