Privacy

Stored on your device

Your job board, saved vacancy details, snapshots, notes and reminders are stored in this browser. Settings are kept in Chrome extension storage. Export a CSV backup from Settings before clearing browser data or removing the extension. Local tracking needs no account.

Permissions and job sites

Storage keeps your data. Alarms and notifications deliver reminders. Active tab and scripting read the vacancy you choose to save, or open the form-filling panel when you click “Fill this form”; if a page cannot be read, use the manual form.

Automatic duplicate badges run on supported job sites: LinkedIn, Indeed, Greenhouse, Lever, Workday, Ashby, SmartRecruiters, Glassdoor, Workable and ZipRecruiter. On application forms of these sites the form-filling panel appears on its own. On other sites nothing runs until you click. The extension does not need your browsing history.

Application forms

The form-filling panel reads the fields of the application form in the open tab. Your answer memory and your main resume fill the questions they know right on your device, without sending anything. The extension never submits a form and never clicks Next, Review or Submit: you check the answers and send the application yourself.

Ask AI is optional, needs an active pass and runs only when you press it. Then the questions the panel could not fill (their labels and choices), your main resume and your answer memory pass through our server to OpenAI, which suggests answers for that page. Answers you marked as sensitive, such as voluntary diversity questions, are sent only on the step that asks them. We do not store or log these texts; we keep only a count of AI pages per day. OpenAI may keep requests for up to 30 days to check for abuse and does not use them to train its models. Answers from AI are highlighted for you to review. Answers you confirm are added to your answer memory, which stays on your device and is encrypted before sync like the rest of your data.

Usage statistics

Website visits are measured with Rybbit, without cookies. The extension sends separate anonymous usage statistics to EvaSoft's own PostHog server (analytics.evasoft.pro): only events and numbers, never job titles, companies, notes, vacancy texts or links, or e-mail addresses. IP addresses are discarded. Turn this off with “Share anonymous usage statistics” in Settings; it is on by default.

Optional online features

Everything below applies only if you use the optional online features. Sync, licensing and resume parsing are described in the parts that follow.

Sync and the cloud copy

Your records are encrypted on your device before they leave it. Our server stores the encrypted records, their size, change time and version number, and locked key envelopes that we cannot open. We cannot read your board, notes or vacancy details. The recovery link (your recovery key) never passes through us. The sign-in code we e-mail you passes through our server but does not open your data. If you allow it, a Chrome sync envelope lets anyone with access to your Chrome account open your board; you can turn this off in Settings. Losing both your password and your recovery key means losing the cloud copy. The cloud copy is kept until you press “Delete cloud copy” in Settings.

Purchases

Purchases are handled by Creem (Armitage Labs OÜ, Estonia), the Merchant of Record for all orders; the charge appears on your statement as CREEM.IO* STORE. Payment details stay with Creem; it tells us your e-mail, the item bought and the order number, together with two values our checkout page attaches to the order: your installation ID and a one-time code that lets the extension turn the pass on by itself. Creem's checkout window opens only on the checkout page of this website, never inside the extension. We keep your license key only as a hash; the key itself is in the e-mail sent to you. Codes and keys are e-mailed through Resend. See also EvaSoft's Privacy Policy and Refund Policy.

Resume parsing

Uploading a resume (PDF or Word) is optional. When you press the parse button, the file and its text pass through our server to OpenAI, which reads out your name, skills and experience. We do not store or log the file or its text. OpenAI may keep requests for up to 30 days to check for abuse; OpenAI does not use it to train its models. Each installation can run up to 30 resume scans a day; we keep only a counter for this, never the texts. Please do not upload anything you do not want processed this way. Resumes and attached files that you sync to the cloud are stored only as encrypted data that we cannot read. Importing a CSV file works the same way: to recognize the columns, the column headers and up to 20 sample rows pass through our server to OpenAI; we do not store or log them. Other AI features, if added, will work the same way and be described here.

Hosting

The service runs on Cloudflare. Server logs contain only counters and status codes, not your content.

Questions

Job Application Tracker is made by EvaSoft. Contact hello@evasoft.pro.