Privacy Policy

The JobRun Autofill extension is a fill-only assistant. It:

• Stores an access token locally in the browser’s extension storage so it can authenticate to your JobRun account. This token never leaves the extension’s background context and is never exposed to the web pages you visit.
• Reads form fields on the current page only when you open the side panel and click Scan (and automatically on known application boards: Greenhouse, Lever, and Ashby). It reads field labels and types to decide what to fill.
• Fills form fields with values from your JobRun profile after you review them. Nothing is ever submitted automatically — you always click the site’s own submit button.

• Account & profile data — your name, contact details, work history, and CV content that you provide to JobRun. This is stored in your JobRun account and used to fill applications and generate answers.
• Field labels & screening questions — to map a form and draft answers, the extension sends the detected field labels and any screening question text to the JobRun app’s server, which uses a third-party AI provider (OpenAI) to produce suggestions grounded in your profile.
• Application records — when you choose “Log application to JobRun”, the job and application details are saved to your account so you can track them.

Your data is used solely to provide JobRun’s features: filling applications, generating tailored answers, and tracking your job search. We do not sell your data, use it for advertising, or track your browsing activity across sites.

We share data only with service providers that make the product work, including:

• OpenAI — to generate field mappings and screening-question answers.
• Infrastructure providers — hosting (Vercel), database (Neon), and file storage (Cloudflare R2) used to run the app and store your documents.

These providers process data on our behalf and are not permitted to use it otherwise.

Your profile and application data remain in your account until you delete them. You can revoke the extension’s access token at any time from Settings → Account → Browser Extension in the app, which immediately stops the extension from accessing your account. Uninstalling the extension removes the locally stored token.

Access tokens are transmitted over HTTPS and stored only in the browser’s protected extension storage. Web pages you visit cannot read your token or your profile data.

Questions about this policy or your data? Email christianmclark92@gmail.com.