Privacy Policy

This policy applies to personal information we process about job seekers who use the Service, whether through the web application or the browser extension. It does not apply to third-party websites you visit (such as company career sites or applicant-tracking systems), which have their own privacy practices.

Job Seeker OS provides tools that help job seekers score how well a job matches their background, tailor their resumes and application materials, and fill out job application forms more efficiently. For the purposes of data-protection law, we act as the “controller” of the personal information described in this policy. You can reach us using the details in the Contact us section.

We collect only the data needed to operate the Service:

• Account information. When you sign in, we process your name and email address through our authentication provider to identify and secure your account.
• Career profile data. Information you provide to build your profile and resumes — such as your name, contact details, links, work history, education, and skills — which the extension uses to help you fill out job application forms and which the Service uses to generate tailored materials.
• Job-posting content. When you open the extension on a job page or request a score, we read the visible job description and the page URL and send them to our servers to generate a match score and tailor application materials. Job postings you save are stored with your account.
• Application answers. Non-sensitive answers you give on application forms may be saved to your answer bank so you don’t have to re-enter them on future applications.
• On-device settings. Your sign-in session and preferences (such as which autofill actions are enabled and which resume to use) are stored locally in your browser via the extension’s local storage and are not, by themselves, transmitted to us for any purpose other than operating the extension.
• Technical and diagnostic data. Like most online services, our servers process basic technical information needed to deliver and secure the Service, such as request metadata and error logs. We do not use this to build advertising profiles.

The extension is built to leave sensitive fields entirely to you. When it detects them on an application form, it never reads, pre-fills, accepts, writes, or saves their values. This includes:

• Passwords and account credentials
• Payment and bank details (card numbers, account and routing numbers, IBAN)
• Government identifiers (Social Security number, national ID, national insurance, passport, driver’s license, tax ID)
• Equal-opportunity and demographic self-identification (gender, race, ethnicity, national origin, veteran or disability status, sexual orientation)
• Date of birth and salary history

These fields are recognized only so they can be deliberately skipped. We do not knowingly collect special-category (sensitive) personal data through the Service.

We use the information above only to provide and improve the Service, specifically to:

• Score how well a job posting matches your profile and resume;
• Generate and tailor resumes, cover letters, and interview materials;
• Help you fill out job application forms with your own information;
• Maintain your account, settings, and saved applications;
• Secure the Service, prevent abuse, and debug problems; and
• Comply with our legal obligations.

Where data-protection law (such as the GDPR or UK GDPR) applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you sign up for, including scoring, document generation, and autofill.
• Legitimate interests — to secure, maintain, and improve the Service, where those interests are not overridden by your rights.
• Consent — where required, for example before reading a page’s content (which only happens on your explicit action). You may withdraw consent at any time.
• Legal obligation — where we must process data to comply with applicable law.

• We do not sell or rent your personal data to third parties.
• We do not use or transfer your data for purposes unrelated to the Service’s core function.
• We do not use your data to determine creditworthiness or for lending purposes.
• We do not use your data for advertising or to build advertising profiles.
• We do not allow our AI providers to use your data to train their models.

We share data only with service providers (sub-processors) that help us run the Service, and only as needed to deliver it. They act on our behalf under contract and may not use your data for their own purposes. Our principal sub-processors are:

• Vercel — application hosting and content delivery.
• Supabase — database, authentication, and file storage.
• Anthropic and OpenAI — AI processing that generates job scores, tailored documents, and related text from the job and profile content you submit.

If we add a payment processor for paid plans, it will handle billing details directly and is added to this list. We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of our users, the public, or the Service. If we are involved in a merger, acquisition, or asset sale, we will continue to protect your information and notify you of any change in how it is handled.

We and our sub-processors may process your information in countries other than your own, including the United States. Where we transfer personal data internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect it in line with applicable data-protection law.

We retain your account and profile data for as long as your account is active, and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Job-posting content and generated materials are retained while they remain useful to your account or until you delete them. On-device settings and your session are removed when you sign out or uninstall the extension. When data is no longer needed, we delete or anonymize it.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access a copy of the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data and close your account;
• Receive your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent; and
• Not receive discriminatory treatment for exercising these rights.

You can review and update much of your profile directly in the web app, clear the extension’s local data by removing the extension, and exercise any of the rights above by contacting us at sorokin.mike@gmail.com. We will respond within the time required by applicable law. If you are in the EEA or UK and believe we have not addressed your concern, you may lodge a complaint with your local data protection authority.

The extension requests broad host access so it can read a job description on whatever career site you are viewing, because job postings live on thousands of company and applicant-tracking sites that cannot be listed in advance. The extension only reads a page’s content when you open its side panel or request a score on that page — it does not monitor your browsing in the background, and it does not log keystrokes, mouse movements, clicks, or your general web history. Data the extension stores on your device is used solely to operate the extension.

The web app uses cookies and similar technologies that are necessary to keep you signed in and to operate core features. We do not use them for cross-site advertising. The browser extension does not use advertising cookies. Where we use privacy-respecting analytics to understand aggregate usage and improve the Service, it is not used to track you across other sites.

We use industry-standard measures to protect your information in transit and at rest, including encryption of data sent between the extension, the web app, and our servers, and access controls that limit who can reach your data. No method of transmission or storage is completely secure, but we work continuously to protect your data.

The Service is intended for users aged 16 and older and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where the changes are material, take additional steps to notify you within the Service. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy, want to exercise your rights, or have a concern about how your data is handled, contact us at sorokin.mike@gmail.com.