What we store, what we never ask for.
The short version: we never ask for your job-board logins, your resume lives on our servers, and you can export or delete it. The details are below.
This website
It is a static site. It sets no cookies, runs no analytics, embeds no third-party scripts, fonts or trackers, and has no forms. Whoever hosts it may keep ordinary server logs; we do not receive or use them.
Your job-board logins
We never ask for them and we never store them. There is no place in the app or the browser extension to enter a Naukri, LinkedIn, Indeed or other job-board password. You sign in on each board's own site, in your own Chrome. Our servers don't accept board cookies or session tokens, and the extension doesn't request permission to read cookies.
What the service stores
| Data | Why | How it is handled |
|---|---|---|
| Account: email, password, optional two-factor secret | To sign you in | Passwords are hashed, never stored as text. The two-factor secret is encrypted with your own key. |
| Resume, profile, target roles, saved answers | To tailor resumes and fill forms | Stored on our servers and separated per account by row-level security. File downloads are ownership-checked. |
| Jobs, tailored resumes, applications and their status | To run your dashboard | Same as above. An application is marked applied only when the evidence from the board supports it. |
| Company-portal accounts (optional: only if you allow it) | Some employers require an account before you can apply | The email you gave plus a generated password, encrypted with your own key. Shown only after you re-enter your password, and released only to your paired browser while it applies to that employer. |
| Mailbox app password (optional: only if you connect an inbox) | To spot replies and interview invites | Encrypted with your own key. Read-only access, one mailbox per account, from a fixed list of providers (Gmail, Outlook, Yahoo, Zoho, iCloud, Rediffmail). |
| Security activity: sign-ins, browser pairings, password reveals, exports | To keep your account safe | Recorded with IP address and device details. |
| AI usage (amounts, not content) | To apply each plan's fair-use allowance | Counted per account and shown on your usage page. |
AI processing
To write and check your tailored resume, answer form questions and prepare interviews, your resume and the job text are processed by AI model providers that we use on your behalf. Your resume is not shared with job boards or employers except inside applications you send.
The Chrome extension
The extension asks for access to all websites, because it has to fill in forms on whichever employer's page a job lives on. It does not read your cookies, and it does not record what you type on a job board's login page. It talks to our servers with its own revocable device token; every new pairing is emailed to you, and you can disconnect any browser from your account page. Applications run in a dedicated window of your own browser, from your own IP address.
Consents you control
Each of these is off until you switch it on, and each can be switched off again: automated submission, company-portal accounts, changing your resume on a board profile, reading your mailbox, and screenshots.
Backups, export and deletion
- Backups: we keep encrypted, off-site backups on a rolling schedule. Deleted data can remain in backups until they age out, which can take up to about six months.
- Export: download your data as a file from the account page (up to three exports a day; each stays available for 24 hours). Exports leave out passwords and secrets.
- Delete: delete your account from the account page. It is permanent and cannot be undone. It cannot remove accounts that were created on employers' sites or applications you already sent.
Questions or complaints
Write to support@auto-job-apply.com. If something on this page doesn't match what the product does, that is a bug and we want to hear about it.