Extension Privacy Policy
This policy explains how the RecruitMyself browser extension (“Job Application Autofill & AI Resume Tailor by RecruitMyself”) handles your information. It covers the extension specifically; for the RecruitMyself website and account, see our main Privacy Policy.
What the extension does
The extension has a single purpose: to help you apply for jobs faster. On a job posting you are viewing, it reads the job description, prefills the application form with details you have provided, and tailors your resume to that job — you always review and submit the application yourself. The extension does nothing until you click it or its on-page assistant.
Information the extension accesses
- The job posting on the page you are viewing (its title and description).
- The structure of the application form (field labels and types) so it can map and fill the right fields.
- Your RecruitMyself profile details — name, email, phone, location, professional links, and headline — fetched from your account to prefill forms.
- Custom fields you choose to save in Settings (for example: desired salary, notice period, work authorization).
- The resume you select or upload, so it can be tailored to the job.
- Basic usage events: which action you took, the job-board domain, and your before/after match score. These never include the values you typed or your answers.
How that information is used
- Prefill application forms with your details, locally in your browser.
- Tailor and download a resume matched to the job (the job description and your resume are sent to the RecruitMyself API for this).
- Improve community form-mapping accuracy by remembering the field’s location on a page (its selector) — never the value you entered.
- Anonymous product analytics to understand which features are used.
What we never do
- We never expose your personal details to the web page or its owner. Form values are injected straight into the fields and are never broadcast through page messaging.
- We never sell or rent your data, and we use no advertising or third-party tracking networks.
- The shared form-mapping registry stores only anonymous selectors (e.g. input#email) — never your name, email, answers, or resume content.
- The extension reads only the page you are on (its top frame), only when you act, and never embedded sub-frames.
Permissions and why we ask for them
Chrome shows you the permissions an extension requests. Here is exactly what each one is used for:
storage
Saves your settings (custom fields, preferred resume template, API endpoint, and toggles) and your sign-in token locally in your own browser.
activeTab + tabs
Lets the extension read the job posting on the tab you are actively viewing at the moment you open the extension. It does not monitor your tabs in the background.
scripting
Fills the application form on the page you choose. Your values are passed directly into the form fields as function arguments — they are never posted to, or readable by, the host web page.
downloads
Saves the tailored resume PDF to your computer when you ask the extension to generate one.
identity
Signs you in securely with your RecruitMyself account through Google or LinkedIn (OAuth). The extension never sees or stores your password.
Host access: boards-api.greenhouse.io, api.lever.co
Reads the job description from these job boards’ public posting APIs so it can tailor your resume accurately.
Host access: *.recruitmyself.com
Communicates with the RecruitMyself API to fetch your profile for prefill and to tailor and download your resume.
Content script on all sites
Job applications live on thousands of different company career sites, so the extension must be able to run wherever you apply. It stays passive until you click the extension, reads only the current top-level page, and never runs inside embedded frames.
Signing in
You sign in through Google or LinkedIn using Chrome’s secure OAuth flow. The extension receives only a session token, which it stores in your browser’s local extension storage. It never sees, handles, or stores your password.
Where your data is stored and how long we keep it
Your settings and session token are stored locally in your browser using Chrome’s extension storage, and remain until you sign out or uninstall the extension. Your profile and resume are held on RecruitMyself’s servers under our main Privacy Policy, which sets out our retention and deletion timelines. The shared form-mapping registry contains only anonymous page selectors and no personal data.
Your controls
- Turn auto-learn, auto-tracking of applications, and the on-page assistant on or off any time from the extension’s Settings.
- Sign out from the extension to clear your stored token.
- Uninstall the extension to remove all of its locally stored data from your browser.
- Delete your RecruitMyself account from the website to remove your profile and resume data held on our servers.
Children's privacy
The extension is not intended for anyone under 16. We do not knowingly process data from minors through the extension.
Changes to this policy
We may update this policy as the extension evolves. Material changes will be reflected here with a new “last updated” date.
Contact
Questions about the extension and your privacy? Email Info@recruitmyself.com or reach us through our contact page.