JobHire Quick Apply — Privacy Policy

1. Who Is Responsible for Your Data

Depending on where you are located, your “data controller” (or equivalent under applicable law) for data processed through the Extension is:

• United States users: EL AI Solutions LLC Address: 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States Contact: support@jobhire.ai
• Users outside the United States: JOBHIRE AI LIMITED Address: K. Skokou 1, Capital Chambers, 2nd Floor, Flat/Office 201, 1061 Nicosia, Cyprus Contact: support@jobhire.ai

The JobHire Quick Apply Extension and underlying technology are developed and owned by JOBHIRE AI LIMITED (the “Non-US Seller”) and are licensed to EL AI Solutions LLC (the “US Seller”) for distribution and sublicensing in the United States. When you use the Extension, your Personal Information may be processed by the applicable Seller and its service providers (including the Non-US Seller as a technology provider for U.S. users) consistent with this Policy.

For the purposes of the EU/UK General Data Protection Regulation (“GDPR” / “UK GDPR”), JOBHIRE AI LIMITED is the data controller for users outside the United States. For the purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), EL AI Solutions LLC is the business with respect to California residents.

2. Compliance with Chrome Web Store Requirements

The Extension’s use of information received from Chrome browser APIs and from the websites on which it operates adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use the data we collect through the Extension solely to provide and improve the auto-fill functionality of the Extension; we do not use it for advertising, do not sell it as defined under applicable law, do not transfer it to third parties except as strictly necessary to provide the service, and do not allow humans to read it except: (i) with your consent, (ii) for security purposes, (iii) to comply with applicable law, or (iv) where the data has been aggregated and de-identified.

The Extension has a single purpose: to detect job application forms on third-party websites and auto-fill them with information from the user’s JobHire account.

3. Information We Collect and How

3.1 Information Stored Locally on Your Device

The Extension uses the Chrome chrome.storage API (sandboxed and inaccessible to websites) to store the following on your device:

• Your JobHire authentication token, issued after you sign in through the Extension.
• A cached copy of your JobHire profile and resume Q&A answers, fetched once from JobHire servers at sign-in to enable faster auto-fill.
• Your currently selected resume / CV identifier.

This locally stored data is automatically deleted when you sign out of the Extension or uninstall it.

3.2 Information Sent to JobHire Servers

When you manually trigger an auto-fill action on a job application page, the Extension sends the following to our backend servers (domains: *.jobhire.ai and *.jobhire.tech):

• The structure of the detected job application form on the current page, limited to: field labels, field types, allowed values (e.g., dropdown options), and CSS selectors. We do not send the full page content, surrounding text, or any information outside the detected form.
• Your JobHire authentication token, transmitted securely in the request header so we can identify you and retrieve your profile data.
• Application records and log files generated by your use of the Extension, which may include:
  • The URL of the current job application page.
  • The browser user-agent string.
  • The Extension version number.
  • A summary of the fill outcome (e.g., number of fields detected vs. successfully filled).
  • The labels of detected form fields and the corresponding values submitted by the Extension on your behalf to complete the application.

Because these records reflect the data used to complete your applications, they may include the same categories of personal information that you have provided in your JobHire profile (such as identifiers and professional/employment information). Access is restricted to authorized JobHire personnel and processors acting under confidentiality obligations. Retention is governed by Section 7 (“Data Retention”).

3.3 Information Read from the Current Webpage

To detect job application forms and perform auto-fill, the Extension’s content script reads the Document Object Model (“DOM”) of the page you are visiting. This reading is strictly limited to form-related elements (labels, input types, and selectors) on pages where you have explicitly activated the Extension’s fill panel.

The Extension does not read or transmit:

• Any data you type yourself into forms.
• Content outside detected job application forms.
• Browsing history or activity on sites where the Extension’s fill panel has not been activated.

3.4 Information We Do Not Collect

The Extension does not collect or transmit:

• Your general browsing history.
• Cookies, session data, or authentication credentials from third-party websites.
• Keystrokes, mouse clicks, or any user interactions outside the Extension’s own interface.
• Any data from websites where you have not activated the fill panel.
• Any financial, health, biometric, or government-ID information beyond what you have already voluntarily provided to your JobHire account.

The Extension itself does not use cookies, web beacons, fingerprinting, or any third-party analytics or advertising trackers. (The main JobHire website uses cookies as described in the Main Policy.)

3.5 Categories of Personal Information (CCPA/CPRA)

For California residents, the categories of personal information we collect through the Extension, mapped to the categories enumerated in Cal. Civ. Code § 1798.140, are:

• Identifiers (e.g., name, email address, phone number, online identifier, authentication token).
• Personal information categories listed in Cal. Civ. Code § 1798.80(e) (e.g., employment history).
• Professional or employment-related information (e.g., job titles, work history, resume content).
• Education information (where included in your profile).
• Internet or other electronic network activity information (URL of the current job application page, user-agent string, Extension interaction logs).
• Inferences drawn from the above by the LLM mapping process described in Section 5 (e.g., mapping a profile field to a form field).

The sources of this information are: (a) you directly, through your JobHire account; and (b) the public DOM of job application pages you visit while using the Extension.

4. How We Use the Information; Legal Bases under GDPR

We use the data collected through the Extension solely for the following purposes:

We do not “sell” or “share” your personal information as those terms are defined under the CCPA/CPRA. We do not engage in cross-context behavioral advertising. We do not use your personal information for advertising of any kind.

5. Third-Party Service Providers and AI Processing

5.1 LLM mapping

To intelligently map your profile data to form fields, our backend may forward the form structure (labels and types) together with the relevant profile data to a third-party large-language-model (“LLM”) API for a single, ephemeral request. The providers we may use are:

• OpenAI — https://openai.com/policies/privacy-policy
• Anthropic — https://www.anthropic.com/legal/privacy

The LLM call is made server-side from JobHire’s own infrastructure using our API credentials. The Extension never contains or transmits API keys to these providers. Under the API terms of both providers, inputs and outputs submitted through their API are not used to train their generally available models. These providers act as our processors / service providers and process your personal data only on our documented instructions.

5.2 AI/ML model improvement by JobHire

As disclosed in the Main Policy, where permitted by applicable law, we may use inputs and outputs processed through the Extension to train and improve our own AI/ML models and systems. When feasible and appropriate, we use de-identified or aggregated data for these purposes. You may be able to limit certain uses by adjusting in-product settings or by contacting us at support@jobhire.ai.

5.3 Automated processing

The LLM mapping described above is a form of automated processing of personal data, but it does not produce legal or similarly significant effects concerning you within the meaning of Article 22 GDPR. The output is limited to suggesting which JobHire profile value corresponds to which form field on the current page. You remain in full control of whether to submit the application. If you disagree with an automated decision that produces legal or similarly significant effects concerning you, you may contact support@jobhire.ai to request review and to contest the decision, where such rights apply.

6. International Data Transfers

Personal information processed through the Extension may be transferred to and processed in the United States, Cyprus, and other jurisdictions in which we or our service providers (including the LLM providers identified in Section 5) operate. Where personal data of EEA, UK, or Swiss users is transferred to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards within the meaning of Article 46 GDPR, in particular the European Commission’s Standard Contractual Clauses (and, for UK transfers, the UK International Data Transfer Addendum), together with supplementary technical and organizational measures where required.

A copy of the applicable safeguards is available on request from support@jobhire.ai.

7. Data Retention and Security

7.1 Retention

We retain personal information processed through the Extension only for as long as necessary to provide the Services, meet legal obligations, resolve disputes, enforce our agreements, and protect our legitimate interests. Retention periods may vary based on the type of data and legal requirements:

• Local storage on your device: retained in chrome.storage until you sign out, uninstall the Extension, or manually clear Chrome’s extension data.
• JobHire backend profile data: governed by the Main Policy.
• Application records and log files generated by the Extension (as described in Section 3.2): retained to provide application history, troubleshooting, security, and analytics, then deleted or anonymized, in accordance with the retention principles set out in the Main Policy.

After the applicable retention period, data is securely deleted or anonymized.

7.2 Security

• All communication between the Extension and our servers uses industry-standard TLS (HTTPS) encryption.
• Your authentication token is stored within Chrome’s per-extension sandboxed storage.
• LLM-provider API keys are never included in the Extension and reside exclusively on our secure servers.
• Access to application records and logs is restricted to authorized personnel under confidentiality obligations and on a need-to-know basis.
• We implement reasonable administrative, technical, and physical safeguards to protect the data we process.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 In-Extension controls

• Uninstall the Extension at any time via chrome://extensions/. Local data is automatically cleared.
• Sign out — immediately clears your authentication token and cached profile from the Extension.
• Disable on specific pages — the Extension only performs network requests when you actively click its icon and trigger the fill panel.

8.2 Rights under GDPR / UK GDPR

If you are in the EEA, United Kingdom, or Switzerland, you have the right to:

• access your personal data (Art. 15);
• rectify inaccurate or incomplete data (Art. 16);
• erase your data (“right to be forgotten”) (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing carried out under our legitimate interests (Art. 21);
• withdraw consent at any time, where processing is based on consent (Art. 7(3)), without affecting the lawfulness of processing carried out prior to withdrawal; and
• lodge a complaint with your local data protection supervisory authority (Art. 77). The lead supervisory authority for JOBHIRE AI LIMITED is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (https://www.dataprotection.gov.cy). A list of all EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. In the UK, you may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk.

8.3 Rights under U.S. state privacy laws

If you are a resident of California, Virginia, Colorado, Utah, Connecticut, or another U.S. state with a comprehensive privacy law, you may have rights to:

• know/access what personal information we collect, the sources, the purposes, and the categories of third parties with which we share it;
• request correction of inaccurate personal information;
• request deletion of personal information we have collected from you, subject to legal exceptions;
• data portability;
• opt out of the sale or sharing of personal information, targeted advertising, and certain profiling (we do not sell or share personal information as those terms are defined under the CCPA/CPRA, so no opt-out is necessary); and
• be free from unlawful discrimination for exercising any of these rights.

You may also designate an authorized agent to make a request on your behalf, subject to our verification of the agent’s authority.

8.4 How to exercise your rights

To exercise any of the rights described above, contact us at support@jobhire.ai. We will respond within the time limits required by applicable law (typically one month under GDPR; 45 days under CCPA, extendable as permitted by law). We may need to verify your identity before processing your request.

9. Children’s Privacy

The Extension and the JobHire Services are intended for individuals aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact support@jobhire.ai and we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where required by law or by Google’s policies, by providing additional notice (e.g., in the Extension interface or by email). Your continued use of the Extension after the effective date of the revised Policy constitutes acceptance of the revised Policy.

11. Contact Us

For any questions, concerns, or requests regarding this Policy or your personal data, please contact us at:

• U.S. users: EL AI Solutions LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States — support@jobhire.ai
• All other users: JOBHIRE AI LIMITED, K. Skokou 1, Capital Chambers, 2nd Floor, Flat/Office 201, 1061 Nicosia, Cyprus — support@jobhire.ai