Privacy Policy
Last updated 27 July 2026
The short version. Applytrac detects job application form fields, fills them from a profile you control, and tracks the applications you submit. Your Resume and profile are stored in your own browser. The applications you submit — and a copy of the Resume you sent with each one — are saved to your own account so you can track them. We do not sell, rent or trade your personal information or job application data to anyone, and we do not use it to train AI models. Anything optional is off until you switch it on, and you can delete everything at any time.
1. Single purpose
Applytrac has one purpose: to detect job application fields and help you auto-fill and track job applications. We do not use the extension for advertising, analytics resale, price comparison, content injection, or any purpose unrelated to that.
2. What we collect, and where it lives
Your contact details and answers stay on your machine. The extension stores them in chrome.storage.local, which is sandboxed to the extension and unreadable by the websites you visit. You can add a passphrase to encrypt them at rest (AES-GCM); the key is held in memory for the browser session only.
Resumes are the exception, and deliberately so: they are stored in your account, so the web app and every browser you sign in from use the same set instead of a per-browser copy that drifts. Deleting a Resume in the web app removes it everywhere, including the file.
| Data | Where it lives | Why |
|---|---|---|
| Contact details, work history, education, answers you reuse, learned per-site corrections | Your browser only (chrome.storage.local). Never uploaded. | Filling forms without sending your details to a server. |
| Your Resume files and their text | Our database and private file storage, in your account. Requires being signed in. | One Resume Vault behind both the web app and the extension: you upload once and can fill, score and attach with it from anywhere, and your history shows which Resume went to which company. |
| Account email, name, password | Our authentication provider (Supabase, hosted in the United States). | Signing you in and linking your pipeline to you. |
| Applications you submit: company, role, job URL, job description, the questions and the answers you submitted, which Resume you used, status and your notes | Our database, in your account. | This is the tracker itself — the application list and reminders you came for. |
| Usage counters (number of autofills and AI drafts per month) | Our database, in your account. | Enforcing free-plan limits and billing. |
| Payment details | Stripe. We never see or store your card number. | Subscriptions. |
| Optional: anonymous field-structure reports | Our servers, not linked to your identity. | Improving field detection. Off unless you switch it on. |
3. We do not sell your personal information
Applytrac does not sell, rent, or trade your personal information or job application data to third parties. We do not share it for cross-context behavioural advertising, and we have no advertising business. We use a small number of processors strictly to run the product — Supabase (database and authentication), Stripe (payments), and Anthropic (AI drafting, see §5) — and they may only process data on our instructions.
4. Site access is limited on purpose
The extension runs automatically only on known job boards and applicant tracking systems (for example LinkedIn, Indeed, Greenhouse, Lever, Workday, Ashby, iCIMS). For any other careers site, nothing runs until you click “Enable Applytrac on this site” and Chrome asks you to grant that one site. You can revoke any grant from chrome://extensions.
5. How AI requests are handled
Field mapping (“which field is this?”) sends page structure only — tag names, labels, placeholders and nearby text — never the values in the form. Before that payload leaves the page we strip identifiers from it: email addresses, URLs, Social Security / national ID numbers, payment card numbers, phone numbers, dates and street addresses, plus any exact value we know is in your stored profile.
Two features do send personal content, and only when you explicitly click them: “Extract profile with AI” (sends your Resume text once) and “Draft with AI” (sends the question and relevant profile context so an answer can be written for you to edit).
These requests are processed transiently through our API endpoints to Anthropic’s API and are not used to train AI models. We keep the drafted answer only where you can see it — in your answer bank or the application record.
6. Optional data sharing is opt-in
Under Settings → Your data in the extension you control two switches, both off by default:
- Share anonymous field structure. When on, fields we failed to recognise are reported as redacted structure so detection improves for everyone. It contains no answers, no Resume, no screenshots, and is not linked to your account identity. Turning it off also discards anything still queued locally.
Shared field-mapping knowledge is stored as structure only — an ATS name, a field signature hash, and the field type it turned out to be. It carries no user identifier.
7. Your rights and how to exercise them
If you are a California resident, the CCPA/CPRA gives you the right to know what we collect, to delete it, to correct it, and not to be discriminated against for asking. You do not need to be in California to use any of the controls below.
- Delete everything on your device: extension → Settings → Account → Delete my data → “Wipe this browser”.
- Delete your account and all cloud data: web app → Settings → Delete account. This permanently removes your pipeline, Resumes, answers, notes, usage history and your login. It cannot be undone.
- Export: any application can be downloaded as a Markdown profile from its detail panel.
- Correct or ask a question: email privacy@applytrac.com.
8. Retention
Pipeline data is kept until you delete it or close your account. Anonymous field-structure reports are retained in aggregate and are not tied to you. Local browser data lives until you wipe it or remove the extension.
9. Children
Applytrac is not directed to children under 13 and we do not knowingly collect their data.
10. Changes
If we change how data is used, we will update this page and the date above, and any new data sharing will remain off until you opt in.
Questions? privacy@applytrac.com