Privacy Policy

1. Who we are

JobPrefill ("we", "us", "our") is a product of Cybertide Solutions Pvt Ltd (CIN: U47912UP2023PTC192792), a company registered in India. JobPrefill is a Chrome extension, available at jobprefill.com, that auto-fills Workday job application forms from a locally-stored, encrypted profile.

Registered office: WORKSHALA, D-9, Sector-3, Noida, India.
For privacy enquiries, contact us at support@jobprefill.com.

2. What data we receive — and what never leaves your device

None of your personal data is ever collected by us. Your name, resume, work history, contact details — everything you enter into JobPrefill (listed in 2.1) — is stored only on your device and never reaches any server, ours or anyone else's. The only thing our server ever receives is the licensing information needed to verify your pass (see 2.3) — never anything from your profile, and nothing that identifies you personally. Payment is handled separately by Lemon Squeezy (2.4), so we never see your card details.

2.1 Profile data (stored on your device — never collected by us)

You enter the following into the extension popup. It is stored only on your device, encrypted with AES-256-GCM. We never receive it, transmit it, or have access to it:

• Personal information: name, email, phone, address, links, pronouns
• Work experience: job titles, companies, dates, descriptions
• Education: institutions, degrees, fields of study, graduation dates
• Skills
• Declarations: citizenship, work authorisation, sponsorship status
• Voluntary disclosures: gender, ethnicity, veteran status, disability (all optional)
• Resume file (stored as base64 in local storage)
• Preferences: desired salary, relocation preferences

This data never leaves your device. The filling engine that uses this data runs entirely inside your browser and makes zero network calls.

2.2 Usage and licensing data (stored locally, plaintext)

The extension stores a usage record locally to enforce the free-plan limit and cache your licence validation. This record contains:

• Monthly application count and reset date
• Your plan (free or pass)
• Your licence key (if you have one)
• A random installation identifier — a UUID generated locally on your device, not derived from your hardware or identity
• A list of job URLs counted in the current month (for deduplication)
• Cached licence validation result and timestamp

This data contains no profile PII (no name, no resume) and is stored in plaintext for performance reasons. It remains on your device.

2.3 Licence key validation (the only network call we make)

If you have entered a Pro licence key, the extension sends a single request to our backend (api.jobprefill.com/validate-license) at most once every 24 hours. This request contains:

• Your licence key
• The random installation identifier described above — used to enforce the per-pass device limit. It is not linked to your identity.
• A shared extension secret — a fixed value bundled into the extension, not a personal identifier

No profile data is sent. Free users who have not entered a licence key make zero network calls.

2.4 Payment data

Payments are processed by Lemon Squeezy, a Merchant of Record. When you purchase a Pro plan, your payment details (card number, billing address) are collected directly by Lemon Squeezy — we never see or store payment card data. Lemon Squeezy sends us your email address and a licence key. See Lemon Squeezy's Privacy Policy for how they handle payment data.

3. How we use your data

• Profile data: only to fill Workday form fields in your browser. Never transmitted.
• Licence key + installation identifier: to verify your 3-month pass is active and to enforce the per-pass device limit.
• Email: your purchase email is handled by Lemon Squeezy, which delivers your licence key directly. We do not store your email and do not send marketing email.

4. Data we do not collect

• No telemetry or analytics of any kind
• No page content or form data from the websites you visit
• No browsing history
• No device fingerprinting
• No crash reports or usage statistics

5. Data storage and security

Your profile is encrypted with AES-256-GCM using a key generated by the Web Crypto API on first install. The encryption key is stored in chrome.storage.local and never transmitted. Local-only encryption protects against drive-by reads of storage snapshots.

Our backend (api.jobprefill.com) does not store your profile data, and it does not keep any profile or account record about you. It only validates a licence key when asked and applies basic abuse protection (rate limiting). Your purchase and pass details are held by Lemon Squeezy (see §6), not by us.

6. Third-party services

• Lemon Squeezy — our Merchant of Record: payment processing, licence key delivery (including the purchase email), and pass/entitlement records
• Cloudflare — hosting and infrastructure for our API (api.jobprefill.com)

None of these services ever receive your profile data.

7. Data retention

Profile data is stored locally and is retained until you clear Chrome's extension storage or uninstall the extension. Deleting the extension removes all locally stored data.

We do not retain profile data — it lives only on your device. Records relating to your purchase and pass (your email, order, and licence key) are held by Lemon Squeezy as Merchant of Record, in line with their retention policy.

8. Your rights

Depending on where you are located, you may have rights including:

• Access to any personal data we hold about you
• Correction of inaccurate data
• Deletion of your data
• Portability of your data

Because your profile lives exclusively on your device, you have full control of it at all times. For data related to your purchase (your email, order, and licence key — held by Lemon Squeezy), contact support@jobprefill.com and we'll help, or contact Lemon Squeezy directly.

9. Children's privacy

JobPrefill is not directed at children under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the extension update notes or email. The "Last updated" date at the top of this page will always reflect the current version.

11. Contact

Questions or concerns about this policy?
Cybertide Solutions Pvt Ltd (CIN: U47912UP2023PTC192792)
Registered office: WORKSHALA, D-9, Sector-3, Noida, India
Email: support@jobprefill.com
Website: jobprefill.com