Back to jobArcher

Privacy Policy

What this covers

This describes what jobArcher (jobarcher.in) and the jobArcher Auto-Apply browser extension collect about you, why, and how you can have it removed. It covers both the web app and the extension, since the extension is only ever a client of the web app's own API -- it has no separate account system, no database of its own, and no third-party analytics.

What we collect

The profile you give us: name, email, phone number, resume file, LinkedIn URL, location, and the job preferences and answers you fill in during onboarding. Your activity on jobArcher: jobs you swipe on, accept, or mark applied, and the matching signals we generate from your profile against job postings. If you sign in with Google, we receive the account details Google shares at sign-in (name, email, profile photo) -- nothing else from that account.

What the browser extension adds

Connecting the extension does not create a second account or a second copy of your data. Clicking "Connect" on jobarcher.in mints a single-purpose device token, tied to your signed-in session, and stores it in the extension's local browser storage (chrome.storage.local) -- readable only by the extension, on that one browser. The extension holds no database URL, no API key, and no password: it reaches nothing but jobarcher.in's own /api/extension/* routes, authenticated by that one token. We store only a one-way hash of the token, never the raw value, so a database compromise on our side does not yield a working credential. Disconnecting from the extension's popup revokes that token on our server immediately; it stops working even if you never uninstall the extension.

How the extension uses your data

For jobs you've explicitly accepted in jobArcher, the extension opens the application page, reads the ~7 profile values above from our API, fills the form's fields, and submits it after a short on-screen countdown you can cancel. It never answers demographic or voluntary-disclosure questions (EEO, gender, race, disability, veteran status), and never answers a question it doesn't hold a fact for (work authorisation, salary, notice period, free-text "why do you want to work here") -- those are always left for you to finish by hand. It stops immediately, without attempting to solve or bypass anything, if the page shows a CAPTCHA or similar challenge. The extension requests broad host permissions ("all sites") only because a job's application form can be on any employer's domain, decided by data in your own account -- not something we can list in advance. It does not run on, read, or collect anything from any other page you browse.

Who we share it with

The employer or applicant-tracking system (Greenhouse, Lever, Workday, or similar) for any job you apply to, automatically via the extension or by hand -- that is the normal, necessary effect of submitting an application. Our infrastructure providers (database hosting, email delivery, payment processing) who process data on our behalf under their own security commitments, strictly to run the service. We do not sell your personal data, and we do not share your profile or resume with any employer or third party except by submitting an application you asked for.

Analytics and cookies

The web app (not the extension) uses Google Analytics and Microsoft Clarity to understand how jobArcher is used: pages visited, clicks, device and browser type, approximate location from your IP address, and steps such as signing up, uploading a resume, finishing onboarding, seeing a plan, and buying a pass. Both set cookies in your browser for this. We do not send them your name, email, phone number, or resume; Clarity sessions are linked to a random account id, not to who you are. You can block these cookies in your browser settings without losing access to jobArcher.

Retention and deletion

We keep your profile and activity for as long as your account exists, so matching and your application tracker keep working. Write to us (see Contact, below) and we will delete your account data, including your resume; this also revokes every browser device token tied to your account.

Security

Device tokens are stored as a one-way hash, never in plain text. The extension never sends your jobarcher.in session cookie anywhere -- only the scoped device token, over HTTPS. The extension bundle contains no remote code and no analytics of its own; everything it can do is built from this repository and reviewable in the Chrome Web Store listing.

Your choices

You decide which accepted jobs the extension runs on, and can stop a run at any time from the extension popup. Disconnecting revokes its access immediately. You can ask us to correct or delete your data at any time -- see Contact, below.

Contact

Questions about this policy, or a request to access, correct, or delete your data: support@jobarcher.in.

Governing law

This policy is governed by the laws of the Government of India, and by jobArcher.