Privacy Policy

What the extension reads

The browser extension reads exactly one cookie — the httpOnly aa_session cookie set by autoapplyagent.online when you sign in — and uses it to authenticate its own requests back to that same domain. This is the cookies permission in the manifest, and it exists for no other purpose: an extension's network requests are cross-site, so the session cookie your browser already holds is not sent automatically, and this is how the extension proves it's really you without a second password.

On a job application page, the extension (scripting + activeTab) reads visible form field labels to match them against your profile, and writes your résumé data into those fields. It does not read the rest of the page, does not track your browsing on any site outside the specific job-board domains listed in the manifest, and never runs unless you click the extension's own button.

What is sent, and where

The extension sends the job title, company, and application URL you are viewing to autoapplyagent.online — nowhere else — and receives back your identity fields, résumé PDF, and drafted answers to fill into the form. No data is sent to any third party, no analytics or tracking script runs in the extension, and nothing is stored by the extension itself (the storage permission holds only your signed-in state locally, in your own browser).

What it never does

• It never clicks Submit — you review every field and submit yourself.
• It never touches a CAPTCHA — it only tells you one is present.
• It never fabricates an answer to a screening question. If your profile has not stated an answer, the field is left blank and flagged for you.

Your account data

Your résumé, profile, and application history live on autoapplyagent.online, in a database we operate — not with any third-party data broker. To have your account and data deleted, email the address below; there is no self-serve delete button on the profile page yet.

Contact

Questions about this policy or your data: fcpuru95@gmail.com.