Privacy
There is no server in the loop, so there is nothing for us to keep. This page states exactly what stays on your device, what leaves it, and the one opt-in exception. The formal policy is further down the same page.
What stays on your device
Your résumé, your cover-letter template, your profile details and your API key are held in your browser's local extension storage.
Uploaded documents are read on your device. When Pro tailors your Word file, the file itself never moves.
What leaves, and where it goes
One request, made from your machine directly to the AI provider you selected. It carries your résumé text verbatim — including whatever its header holds — and the job description.
- generativelanguage.googleapis.com
- api.openai.com
- api.anthropic.com
- localhost · 127.0.0.1
The one exception: AutoJob Pro AI
Pro subscribers can choose AutoJob Pro AI instead of holding an API key. This is the only path where your job and résumé text reaches our server: we relay the request to a third-party AI provider and hand back the result. The extension shows it as Managed in the provider list.
We don't build a profile from it and we don't use it to train anything. We can't promise zero logging at the infrastructure layer, so we won't: if that matters to you, use your own key or a local model — both keep your text away from us entirely.
It is opt-in, never preselected, and nothing falls back to it. It adds no new browser permission. The only thing we keep is a monthly run counter tied to a hashed billing email, capped at 100 runs a month. Requests are relayed by our Cloudflare Worker to Google's Gemini API; the policy below names it, and we update that page if it ever changes.
Permissions, and why each one exists
Three permissions, no more. Nothing is requested for analytics, because there are none.
- storage
- Keeps your résumé, profile and key in this browser between sessions.
- activeTab
- Reads the job description from the tab you are looking at, when you click Read job.
- scripting
- Fills the fields of the application form in front of you. It never clicks Submit.
Alongside those, the extension declares host access to the four AI endpoints listed above so it can send your generation request. That list is fixed in the manifest, and the install prompt shows nothing wider. It is not the whole list of hosts we can reach: AutoJob Pro AI calls our own relay, which allows the request by CORS and so needs no host permission at all.
No account
There is no sign-up and no profile on our side. If you bought Pro, Stripe holds your billing records and a hashed-email run counter expires on its own.
No analytics
No telemetry of any kind, in the free version or in Pro.
No cookies
This site sets none, and the extension needs none.
Privacy Policy
The formal version. Everything above says the same thing in plain language.
Who is responsible
Black Flag LLC, New Hampshire, USA, is the data controller for the limited processing described below. Contact: [email protected].
What we do not collect
No accounts. No analytics or telemetry of any kind, in the free version or in Pro. This website sets no cookies and loads no third-party scripts or fonts. We do not sell or share personal information, and we do not build advertising profiles.
Data stored on your device
Your résumé text and files, cover-letter template, profile answers, provider choice,
API key, licence code and any application-tracker entries are stored by your browser
in extension local storage (chrome.storage.local). We cannot read them.
Uninstalling the extension removes them, and you can clear them at any time from
inside the extension.
Data sent to your AI provider
When you use your own key, the paragraph text of your résumé and the job description are sent from your browser directly to the provider you selected, using your credentials. That transfer is governed by your agreement with that provider, and we are not a party to it. Your document file itself is never transmitted.
Your identity details — name, phone, address and links — are used to fill forms on your machine and are not added to the request to the model. Your résumé text is sent verbatim, so any contact details you put in its header travel with it.
Form autofill
Autofill runs locally in your browser, on the page you chose, when you ask for it. The extension fills fields from your saved profile and never submits an application — you review and press Submit yourself. Work-authorization, sponsorship and demographic questions are never answered from a guess.
Data we process
Billing. Stripe collects and processes your payment details and email. We receive your billing email address and subscription status. We never receive card numbers, and Stripe never receives your résumé, profile, job data or AI key.
AutoJob Pro AI (optional, Pro only). If you opt in, your job description and résumé text are relayed through our server to a third-party AI provider and the result is returned to you. We do not store that content, and we do not use it to train anything. We also keep a monthly run counter keyed to a one-way hash of your billing email, to enforce the 100-run limit; we cannot read your address back out of it.
Server logs. Our hosting provider produces standard request logs for this website and for the Pro AI relay, which may include IP address, timestamp and user agent, and are used for security and abuse prevention.
AutoJob Pro and billing
Checkout is out-of-band: the extension opens a hosted Stripe page in an ordinary browser tab, and no payment code runs inside the extension. Your entitlement is a digitally signed licence code that the extension verifies on your device against a public key built into it, so using Pro makes no licence network calls and adds no additional permissions. The token, which contains your billing email, is stored locally alongside your other settings. One-click activation from the License Center is optional; pasting the code works just as well.
Subprocessors
Stripe, Inc. — payment processing and subscription billing.
Cloudflare, Inc. — website hosting, licence issuing and the Pro AI relay.
Resend — delivery of licence emails.
Google LLC (Gemini API) — inference for AutoJob Pro AI only. If we change provider
we will update this page before the change takes effect.
Retention
Billing records are kept as long as required for tax and accounting law. The Pro AI run counter expires automatically about seventy days after it is written, which covers the current and prior month. We do not retain Pro AI request content after the request completes, though we cannot guarantee that no copy exists in infrastructure-level logs — if that is unacceptable for your situation, use your own API key or a local model, which do not involve us at all.
Legal bases (UK and EEA)
Performance of a contract, for billing and for providing AutoJob Pro AI. Legitimate interests, for security, fraud prevention and enforcing usage limits. Legal obligation, for tax and accounting records.
International transfers
Processing takes place in the United States. Where personal data is transferred from the UK or EEA, we rely on the appropriate safeguards offered by our processors, including Standard Contractual Clauses.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port or object to the processing of your personal data, and to withdraw consent. California residents may request to know, delete and correct personal information, and to opt out of sale or sharing — we do neither. Most of what AutoJob holds is on your own device and under your direct control; for anything we hold, email [email protected] and we will respond within 30 days. You may also complain to your local supervisory authority.
Children
AutoJob is not intended for anyone under 16 and we do not knowingly process their data.
Changes
Material changes will be posted on this page with a new date. Continued use after a change indicates acceptance.