Zapjobs.ai

Privacy Policy

Last updated: February 2025

1. Introduction

Zapjobs.ai ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, browser extension, and related services (collectively, the "Service"). By using the Service, you agree to this policy.

Single purpose of the Chrome extension: The Zapjobs.ai Chrome extension has a single purpose—to help you auto-fill job application forms and track your job search using your saved resume and profile. All data we collect in the extension is used only for this purpose.

2. Information we collect

We collect the following categories of information:

  • Account and profile: Email address, name, profile picture (avatar), and account identifiers when you sign up or use the Service. In the extension, we store session-related data (e.g., user ID, email) and profile (email, full name, avatar) in local browser storage so you stay signed in.
  • Extension local storage: Auth state (user and profile) and current job context (application ID, job title, company name) in the extension's local storage. A cover letter file (PDF or DOCX) may be held temporarily in memory when you choose one for upload or fill; it is not written to disk and is cleared when you clear it or close the extension.
  • Form and page data (extension only, when you act): When you use the "Auto-fill" or form-extraction feature, we read the visible text and structure of the job application form on the current page (labels, field types, placeholders, options) and the page URL. We do not read or collect form or page content from any site until you trigger this feature.
  • Job and application data: Job URL, job title, company name, job description, form structure, generated answers, cover letters, and application status. This is stored in your account on our servers and, in the extension, only the current job context is stored locally.
  • Resume and documents: Resume and similar documents you upload via the website. We process and store these to generate answers and cover letters.
  • Technical data: IP address, browser and device type, and timestamps in connection with authentication and API requests. We do not use third-party analytics or advertising in the extension.

What we do not do: We do not collect data from web pages except when you use the auto-fill feature on that page. We do not sell your personal information. We do not use extension or service data for advertising.

3. How we use your information

We use your information solely to:

  • Operate the Service (authentication, form extraction, answer and cover letter generation, storing your applications and resume).
  • Store and manage your applications and resume so you can use them across sessions and devices.
  • Comply with legal obligations and enforce our terms.

Every use of form content, tabs, and storage in the extension is necessary for auto-fill and job-search tracking only.

4. Data sharing and disclosure

We do not sell your personal information.

We may share your information only as follows:

  • Service providers: We use Supabase (hosting, database, authentication, storage, and backend functions), Stripe (payment processing on the website), and hosting providers (e.g., for the website and API). These parties process data only to operate the Service under contract and do not use your data for their own marketing or sale.
  • Legal and safety: When required by law, to protect our or others' rights or safety, or in connection with a merger or sale of assets (with notice where required by law).

5. Data retention

We retain your data only as long as necessary:

  • Account and profile: Until you delete your account, then as required by law or our internal policies (e.g., a short period for backups).
  • Job applications and generated data: Until you delete them or your account.
  • Resume and documents: Until you delete them or your account.
  • Extension local storage: Cleared when you remove the extension or sign out. The in-memory cover letter file is not persisted.

6. Your rights

Depending on your location, you may have the right to access, correct, delete, or port your data, or to object to or restrict certain processing.

You can manage your account and much of your data in the dashboard. To request access, correction, deletion, or portability, or to exercise other rights, contact us via the Contact page or at the email address provided there. To permanently delete your account and all associated data (profile, resumes, job applications), use the "Delete account" option in your account settings.

7. Do not sell or share my personal information (CCPA)

We do not sell or share your personal information for cross-context behavioral advertising. If you are a California resident, you may request that we do not sell or share your personal information; we do not engage in such practices, but you can contact us to confirm or exercise your preferences via the Contact page.

8. Chrome extension – permissions and disclosure

Our extension requests the following permissions. Each is used only for the single purpose described above:

  • Storage: To store your auth state and current job context locally so the extension works without re-login and remembers the current application.
  • Tabs: To get the active tab's URL and to send messages to the content script on that tab for form extraction and auto-fill only.
  • Side panel: To show the extension interface in the browser side panel.

Host permissions: We request access to our web app (to check sign-in status), to Supabase (to authenticate and send job and application data to your account), and to all URLs so the extension can run on job application pages to extract form content and fill fields when you choose to. We do not collect or use page content for any other purpose.

Prominent disclosure: When you use the auto-fill feature, we read the visible form content and field labels on the current page only to generate and fill answers. This data is processed and stored only as part of your job application in your account. We do not sell it or use it for advertising. Our full privacy policy is linked in the extension's side panel.

9. International privacy laws

GDPR (EU/EEA): If you are in the European Economic Area, we process your data on lawful bases such as contract performance, consent, or legitimate interest. You have the right to access, rectify, erase, restrict processing, data portability, object, withdraw consent, and lodge a complaint with a supervisory authority. Our data controller is Zapjobs.ai. We use service providers that may process data in the EU or under appropriate safeguards (e.g., standard contractual clauses).

CCPA/CPRA (California): We have described the categories of personal information we collect in this policy. We do not sell or share personal information for cross-context behavioral advertising. You have the right to know, delete, correct, and port your data, and to limit use of sensitive personal information. We do not discriminate for exercising these rights.

COPPA: Our Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

10. Data security

We implement reasonable technical and organizational measures to protect your data (e.g., encryption in transit, access controls, secure storage). No method of transmission or storage is 100% secure; we cannot guarantee absolute security. If you have concerns about a potential breach, please contact us.

11. Children

The Service is not intended for users under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance. For material changes, we may provide additional notice where required by law.

13. Contact

For privacy-related questions or requests (including access, deletion, portability, or "Do Not Sell"), contact us via the Contact page or at support@zapjobs.ai.