Browser extension privacy

01 What the extension accesses

When you're on a job posting or an application form, the extension reads the content of that active page so it can recognize fields, show an ATS match, and flag visa-sponsorship signals. To fill applications, it uses the profile you provide — such as your name, contact details, work history, links, and résumé. It activates only on job boards and applicant-tracking sites, not on your general browsing.

02 Where your data lives

Your profile and résumé are stored locally in your browser (extension storage). The extension does nottransmit that content to JobHakken's servers. If you also run the JobHakken desktop app, the extension can exchange your profile/résumé with it over a local connection on your own machine (127.0.0.1, token-guarded) — that traffic never leaves your computer. You can use the extension on its own (bring-your-own-AI-key), with no account and no desktop app required.

03 AI features (opt-in)

Some extension features (such as drafting application answers, an ATS match, or résumé tailoring) use a large language model, and run only when you ask. When they do, the minimum text needed (for example, the question and the relevant part of your résumé) is sent to generate the result:

• Your own AI key — the request goes directly from your browser to the provider you configure, under your own account and their terms. We never see your key or that traffic.
• Managed AI (if you're signed in on a paid plan) — the request goes through JobHakken's metered AI proxy to a zero-data-retentionprovider that doesn't retain prompts or train on your content. It's processed to produce your result, never stored by us.

If you never use the AI features, none of your résumé or application content leaves your device through the extension.

04 Permissions, and why we ask

• Access to job-board / application pages (host permissions) — to read the current application form and fill it. Scoped to job boards and ATS sites.
• Storage — to keep your profile and settings locally in the browser.
• Active tab / scripting — to detect and fill fields on the page you're on when you use the extension.
• Local connection to the desktop app — to sync your profile/résumé with JobHakken on your own machine (127.0.0.1) when the app is running.

We request the minimum needed for these features and use them only for the purposes described here.

05What we don't do

We do not sell or rent your data, share it with advertisers, use it for advertising or unrelated purposes, or transfer it except as needed to provide a feature you invoke (the AI provider for an AI request you start). The extension does not track your browsing and includes no third-party analytics or advertising SDKs. It never submits an application on your behalf — you review and submit.

06 Deleting your data

Your extension data is on your device, so it's yours to remove: clear the extension's stored data from its settings, or remove the extension from your browser. If you also used the desktop app or a JobHakken account, see the main Privacy Policy for those.

07 Changes

We may update this policy as the extension evolves. When we make a material change, we'll update the date above. Continued use after a change means you accept the update.