Privacy Policy

1. Introduction

ApplyMate ("we," "our," or "the Extension") is a Chrome browser extension that helps you streamline your LinkedIn job search. This Privacy Policy explains how we handle your data and what information we collect.

This Privacy Policy applies to our Chrome extension and its associated services. By using ApplyMate, you agree to the data practices described in this policy.

2. Important: Not Affiliated with LinkedIn

3. Data We Collect

3.1 Local Storage (No Transmission)

All of the following data is stored locally in your browser's Chrome storage and is never sent to our servers or any third party:

Configuration Data (config_v1)

• Your phone number
• Email address
• Years of experience
• Notice period
• Current and expected salary/CTC
• Custom job keywords (include/exclude lists)
• Daily application limits
• Other LinkedIn profile preferences

Application History (history_v1, daily_stats)

• Job titles and company names
• LinkedIn job IDs
• Application status (Applied, Skipped, Failed)
• Timestamps of applications
• Success/failure reasons
• Daily application counts
• Application outcome tracking

Email Configuration (if Gmail enabled)

• Gmail authentication tokens (access_token, expiry_date, refresh_token)
• Email sending history
• Email template preferences
• Resume and cover letter data (optional)

Extension Settings (settings)

• Toggle switches for features
• UI preferences
• Notification settings
• Session state

4. How We Use Data

In Your Browser (Local Processing)

ApplyMate uses your configuration data to:

• Automatically identify and fill LinkedIn job application forms
• Filter jobs based on your keyword preferences
• Track which jobs you've already applied to (prevent duplicates)
• Maintain application history and statistics
• Generate dashboard analytics
• Calculate daily application limits

Optional: Gmail Integration

If you enable Gmail integration:

• We request permission to send emails on your behalf via Gmail API
• Authentication tokens are stored locally only
• We never store Gmail credentials on servers
• We never read your emails or contact list
• We only compose and send emails as you configure

Optional: Sentry Error Reporting

If enabled (configured via environment variable during build):

• Non-PII error messages may be sent to Sentry for debugging
• This feature is disabled by default in production builds
• All Sentry reporting goes through encrypted HTTPS
• We never intentionally send personal data to Sentry

5. Third-Party Services

5.1 LinkedIn (Required)

• Your use of ApplyMate requires an active LinkedIn account
• LinkedIn can see that you're using automation and may flag/restrict your account
• ApplyMate does not store or transmit your LinkedIn password
• We access LinkedIn only through your browser session

5.2 Google/Gmail (Optional)

• Gmail integration is opt-in only
• Authentication uses OAuth 2.0 (secure delegation, no password storage)
• Gmail tokens are stored locally, never on our servers
• You can revoke access at any time in Google Account settings

5.3 Sentry.io (Optional, Disabled by Default)

• If error reporting is enabled, anonymized error traces go to Sentry
• Sentry processes are encrypted in transit (TLS)
• We never intentionally send PII to Sentry
• You can disable by uninstalling the extension or via environment configuration

6. Data Storage & Security

6.1 Storage Location

• Primary: Chrome's chrome.storage.local (your device, encrypted by Chrome)
• Optional Backend: If you enable cloud backup, encrypted storage on a backend service
• No Third-Party Servers by Default: All data stays in your browser

6.2 Security Measures

• Chrome's native storage API handles encryption at rest
• All external communication (Gmail API, optional backend) uses HTTPS/TLS
• OAuth tokens are managed through secure, delegated authentication
• Extension code is reviewed by Chrome Web Store before distribution

6.3 What We Cannot Access

• ❌ We cannot access your LinkedIn password
• ❌ We cannot access other Chrome extensions or tabs' data
• ❌ We cannot read your personal emails
• ❌ We cannot see your LinkedIn message history
• ❌ We cannot access your financial or payment information

7. User Rights & Data Control

You have full control over your data:

Right to Know

• All data is visible in ApplyMate's UI (Configuration, History tabs)
• You can export your application history at any time

Right to Deletion

• Delete Local Data: Clear your configuration and history via the Extension's Settings menu
• Revoke Gmail Access: Disconnect Gmail in Extension settings or at myaccount.google.com/permissions
• Uninstall Extension: Removes all ApplyMate data from your device

Right to Portability

• Application history can be exported as JSON (feature available in Dashboard)
• Configuration can be exported for backup/transfer

Right to Object

• Stop using the extension at any time
• No usage tracking or marketing analytics to object to

8. Data Retention

Configuration & Settings

• Active Use: Kept while you use the extension
• Inactive: After 6 months of no use, you should manually delete

Application History

• Storage Limit: Last 2,000 application records maintained (auto-prune oldest)
• Manual Deletion: Delete individual records or all history via Settings
• Uninstall: All data deleted when extension is removed

Email Records (if Gmail enabled)

• Storage: Last 500 email sending records
• Retention: Manual deletion recommended after 12 months
• Auto-Delete: Emails deleted from Gmail inbox are not recovered by extension

Logs

• Console Logs: Stored in browser memory (cleared on page refresh)
• No Persistent Logs: Extension does not write logs to disk by default

9. International Data Transfers

ApplyMate is designed for local-only processing. If you enable optional cloud features or error reporting:

GDPR Compliance (EU Users)

• Data transfers to error tracking (Sentry) are covered by Standard Contractual Clauses (SCCs)
• You may request details of data processors in compliance with GDPR Article 28
• Right to lodge complaints with your national data protection authority

CCPA Compliance (California Users)

• You have the right to know, delete, and opt-out of sales of personal information
• We do not "sell" personal information as defined by CCPA
• You can delete data by uninstalling the extension

10. Cookies & Tracking

• ❌ ApplyMate does NOT use cookies
• ❌ No tracking pixels or analytics
• ❌ No user behavior tracking
• ✅ Your browser's LinkedIn session cookies allow us to interact with LinkedIn (not ApplyMate's doing)

11. Contact & Data Protection

If you have questions about this Privacy Policy, need to exercise your rights, or want to report a privacy concern:

• Email: wasim.akh2@gmail.com
• Response Time: We aim to respond within 30 days
• Data Protection Officer: Wasim Akhtar

12. Physical Address

ApplyMate is operated by:

• Aahana Tech
• Gautam Buddha Nagar
• Uttar Pradesh, India

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

1. Updating the "Last Updated" date
2. Posting a new version in the extension's settings
3. Requiring explicit consent for major changes

Your continued use of ApplyMate after changes constitutes acceptance of the updated policy.

14. Disclaimer