Privacy Policy for Job Blaster Chrome Extension

Introduction

Job Blaster ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how the Job Blaster Chrome Extension ("Extension") collects, uses, stores, and protects your personal information.

Information We Collect

Personal Information

• Account Information: Email address, name (collected during registration via Supabase authentication)
• Profile Data: First name, last name, email, phone number, location, LinkedIn profile, GitHub profile, portfolio URL (used for job application autofill)
• Resume and Cover Letter Data: Content, file URLs, and metadata of resumes and cover letters you upload to Job Blaster

Job Application Data

• Job Information: Job title, company name, location, salary, job description, job posting URL, application tracking system (ATS) type
• Application Status: Whether you've saved, applied to, or been rejected from jobs
• Application Timestamps: Dates when you saved or applied to jobs

Technical Information

• Authentication Tokens: Secure session tokens stored locally in your browser for authentication purposes
• Browser Storage: Temporary data stored in Chrome's local storage for extension functionality
• Usage Data: Information about which job boards you visit and use the extension on

How We Use Your Information

We use the information we collect to:

1. Provide Core Functionality:
   • Autofill job application forms with your profile information
   • Save job postings to your Job Blaster account
   • Track your job application status
   • Link resumes and cover letters to specific job applications
2. Authentication and Security:
   • Authenticate your identity using Supabase authentication
   • Maintain secure sessions between the extension and our servers
   • Protect against unauthorized access
3. Service Improvement:
   • Improve extension functionality and user experience
   • Debug technical issues
   • Analyze usage patterns (aggregated and anonymized)

Interview Recordings

All interview practice recordings are processed locally in your browser and are never uploaded to our servers. You have full control over your recordings and can download or delete them at any time.

Data Storage and Security

Local Storage

• Authentication tokens and session data are stored locally in your browser using Chrome's chrome.storage.local API
• Profile data may be temporarily cached locally for faster autofill performance
• All local data is encrypted by Chrome's storage mechanisms

Server Storage

• Your account information, job data, resumes, and cover letters are stored on our secure servers
• Data is transmitted over HTTPS encryption
• We use industry-standard security practices to protect your data

Third-Party Services

• Supabase: We use Supabase for user authentication. Supabase's privacy policy applies to authentication data:https://supabase.com/privacy
• Hosting Services: Our servers are hosted on secure cloud infrastructure

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

1. Service Providers: With trusted third-party service providers who assist in operating our service (e.g., Supabase for authentication, cloud hosting providers)
2. Legal Requirements: When required by law, court order, or government regulation
3. Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
4. With Your Consent: When you explicitly authorize us to share your information

Your Rights and Choices

You have the right to:

1. Access Your Data: View all personal information we have collected about you
2. Update Your Data: Modify your profile information, resumes, and cover letters at any time
3. Delete Your Data: Request deletion of your account and all associated data
4. Opt-Out: Uninstall the extension at any time, which will stop data collection
5. Export Your Data: Request a copy of your data in a portable format

To exercise these rights, contact us at the email address provided below.

Data Retention

• We retain your account data and job application information for as long as your account is active
• If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes
• Aggregated, anonymized data may be retained indefinitely for analytics purposes

Children's Privacy

Job Blaster is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Extension, you consent to the transfer of your information to these countries.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Notifying you through the Extension or via email (for significant changes)

Your continued use of the Extension after changes become effective constitutes acceptance of the updated Privacy Policy.

Extension Permissions

The Extension requires the following Chrome permissions:

• activeTab: To access the current tab's content for job scraping and form autofill
• storage: To store authentication tokens and cached profile data locally
• scripting: To inject the extension panel into job board pages
• identity: For OAuth authentication flows
• host_permissions: To access job board websites (Greenhouse, Lever, Ashby, LinkedIn, Indeed, etc.) and our API servers

These permissions are necessary for the Extension's core functionality. We do not use these permissions to collect data beyond what is described in this Privacy Policy.

Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Children's Online Privacy Protection Act (COPPA)
• Other applicable data protection laws