Last updated: April 28, 2026 · Version 2.3.0
Jobily ("we", "our", "us") is developed and operated by Squareone International. This Privacy Policy explains exactly what data we collect, how each piece of data is used, where it is stored, who it is shared with, and your rights regarding your data. This policy applies to the Jobily browser extension (the "Extension") and the Jobily Web Portal at jobily.squareoneinternational.com.
We collect only data that you provide directly. We do not collect any data automatically, silently, or in the background. We do not collect web browsing history, website content, or any data from pages you visit. The Extension does not run background scripts that monitor your activity.
| Data Field | Where You Enter It | Purpose |
|---|---|---|
| Full name | Quick Setup screen / Profile | Auto-fill job application forms |
| First name, Last name | Derived from full name | Auto-fill forms with separate first/last fields |
| Email address | Quick Setup screen / Profile | Auto-fill job application forms; account creation |
| Phone number | Quick Setup screen / Profile | Auto-fill job application forms |
| Address (line 1, line 2, city, state, postcode, country) | Web Portal profile editor | Auto-fill job application forms |
| Date of birth | Web Portal profile editor | Auto-fill job application forms that request it |
| Gender | Web Portal profile editor | Auto-fill job application forms that request it |
| Nationality | Web Portal profile editor | Auto-fill job application forms that request it |
| Work authorization status | Web Portal profile editor | Auto-fill job application forms that request it |
| LinkedIn URL | Profile tab | Auto-fill job application forms |
| GitHub URL | Web Portal profile editor | Auto-fill job application forms |
| Portfolio website URL | Profile tab | Auto-fill job application forms |
| Data Field | Where You Enter It | Purpose |
|---|---|---|
| Resume file (PDF, DOCX, or TXT) | Profile / Resume upload | Parsed by AI to extract structured profile data |
| Professional summary | Profile tab / extracted from resume | Auto-fill; used by AI to generate cover letters |
| Work experience (company, title, dates, description) | Onboarding / Profile tab / extracted from resume | Used by AI to generate tailored cover letters and Q&A answers |
| Education history (institution, degree, field, year) | Onboarding / Profile tab / extracted from resume | Used by AI to generate tailored cover letters and Q&A answers |
| Skills (free-form tags) | Onboarding / Profile tab / extracted from resume | Used by AI to generate tailored cover letters and Q&A answers |
| Years of experience | Web Portal profile editor | Auto-fill job application forms |
| Seniority level | Web Portal profile editor | Auto-fill job application forms |
| Time zone | Web Portal profile editor | Auto-fill job application forms |
| Salary expectations | Common questions / Profile | Auto-fill salary fields on job applications |
| Notice period | Common questions / Profile | Auto-fill notice period fields on job applications |
| Data Field | Where You Enter It | Purpose |
|---|---|---|
| Job title | Application tracker (manual entry or extracted from URL) | Track your job applications |
| Company name | Application tracker (manual entry or extracted from URL) | Track your job applications |
| Application date | Automatically set when you add a job | Track your job applications |
| Application status (applied, interviewing, offered, rejected) | Application tracker | Track progress of your applications |
| Job URL | Application tracker | Link back to the original job listing |
| Expected salary (CTC) | Application tracker | Track and compare compensation across applications |
| Data Field | How It's Handled | Purpose |
|---|---|---|
| Email address (for sign-up/sign-in) | Sent to and managed by Supabase Auth | Create and authenticate your account |
| Password | Sent to and managed by Supabase Auth; we never see, store, or have access to your password | Authenticate your account |
| Session tokens | Stored in browser localStorage; transmitted to Supabase for authentication | Keep you signed in across sessions |
| Data | How It's Handled | Purpose |
|---|---|---|
| Job description text | You paste it into the Extension. It is sent to our AI provider (Anthropic) along with your profile data to generate a cover letter or Q&A answers. It is NOT stored in our database. It exists only in your browser session and is discarded when you close the tab or paste a new one. | Generate tailored cover letters and Q&A answers for each job |
We want to be explicit about what we do not collect:
When you click the "Auto Fill" button, the Extension reads your profile data from browser localStorage and injects it into the form fields on the current page. This data does not leave your browser during auto-fill — it travels from localStorage to the page's form fields, entirely on your device. No data is transmitted to our servers or any third party during this process.
When you click "Generate Cover Letter," the following data is sent to Anthropic (our AI provider) via our Supabase edge function:
This data is sent to Anthropic solely to generate the cover letter. Anthropic does not store this data or use it for model training. The generated cover letter is returned to your browser and displayed in the Extension. We do not store the generated cover letter in our database — it exists only in your browser session.
When you use the Q&A feature, the same profile data listed above plus your specific question and the job description are sent to Anthropic to generate an answer. The same handling applies — Anthropic does not store or train on this data, and the answer exists only in your browser session.
When you upload a resume, the file is:
Anthropic does not store the resume file or the extracted data.
When you add a job to the application tracker by URL, the Extension sends the URL to our Supabase edge function, which attempts to fetch the page content to extract the company name and job title. If a Firecrawl API key is configured, Firecrawl is used; otherwise, a basic HTTP fetch is attempted. The page content is sent to Anthropic to extract the company name and job title. No page content is stored — only the extracted company name and job title are returned to your browser and saved to your application tracker.
When you are signed in, your profile data, application tracker data, and settings are synced to a Supabase PostgreSQL database so that your data persists across devices and browser sessions. This data is:
When you subscribe, you are redirected to a Stripe-hosted checkout page. We send Stripe your email address to create or find your customer record. All payment information (credit card numbers, billing address, etc.) is entered directly on Stripe's page and is handled entirely by Stripe. We never see, receive, process, or store any payment information.
Before you create an account, all your profile data is stored in your browser's localStorage. This data never leaves your device unless you sign up and enable cloud sync. You can clear this data at any time by uninstalling the Extension or clearing your browser data.
We share data only with the following third parties, and only as described below:
| Third Party | What Data They Receive | Why | Their Privacy Policy |
|---|---|---|---|
| Anthropic (AI provider) | Profile summary, experience, education, skills, name, contact info, job description text, and questions — only when you actively trigger cover letter generation, Q&A, resume parsing, job extraction, ATS scoring, or Job Journey insights | To generate AI-powered content for you | anthropic.com/privacy |
| Supabase (cloud database & auth) | Your profile data, applications, settings, email, and hashed password — only when you create an account | To store and sync your data across devices; to authenticate your account | supabase.com/privacy |
| Stripe (payment processor) | Your email address — sent to find or create your Stripe customer record. All payment details are entered directly on Stripe's page. | To process subscription payments | stripe.com/privacy |
| Firecrawl (web scraping, optional) | A job listing URL — only when you add a job to the tracker by URL and Firecrawl is configured | To fetch job page content for company/title extraction | firecrawl.dev/privacy |
We do NOT share data with any other parties. We do NOT sell, rent, trade, or transfer your data to advertisers, data brokers, analytics companies, or any other third parties not listed above.
All data transmitted between the Extension, the Web Portal, and our servers uses HTTPS (TLS 1.2 or higher). No data is ever transmitted over unencrypted connections.
Data stored in Supabase is encrypted at rest using AES-256 encryption, provided by Supabase's underlying infrastructure (AWS).
Our database uses PostgreSQL Row Level Security (RLS). This means every database query is scoped to the authenticated user's ID. No user can read, write, or access another user's data. Our team does not have routine access to individual user data.
Uploaded resume files are stored in a Supabase Storage bucket with RLS policies. Only the user who uploaded the file can access it. Resume files are stored in a folder named with the user's unique ID, preventing cross-user access.
Data stored in browser localStorage is accessible only within the Extension's origin. It is not accessible by other extensions or websites. It is cleared when the Extension is uninstalled or when the user clears browser data.
Authentication session tokens are stored in browser localStorage and are scoped to the Extension's origin. When the Web Portal is opened from the Extension, the session token is passed via a URL parameter, used once to establish a session, and immediately cleared from the URL. Tokens are short-lived and automatically refreshed by Supabase Auth.
You can view all your stored data at any time within the Extension's Profile tab and the Web Portal.
You can edit any profile field, application entry, or setting at any time within the Extension or Web Portal. Changes sync to the cloud immediately.
You can request complete deletion of your account and all associated data (profile, applications, resume files, settings) by contacting us at the email below. Upon receiving your request, we will permanently delete all your data from our database and storage within 30 days. Local data is deleted immediately when you uninstall the Extension.
You can view all your data in the Extension and Web Portal. We are working on a dedicated data export feature for a future release.
You can use the Extension without creating an account. In this case, all data stays in browser localStorage and is never transmitted to our servers.
You can cancel your subscription at any time via the Settings tab, which opens the Stripe billing portal. Cancellation takes effect at the end of your current billing period. Your data is retained after cancellation unless you request deletion.
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
| Permission | Why We Need It |
|---|---|
| activeTab | To inject auto-fill data into the current tab's form fields when you click "Auto Fill." We only access the active tab, and only when you explicitly trigger the action. |
| scripting | To run the content script that fills form fields on job application pages. The script only writes data TO the page — it does not read or collect data FROM the page. |
| sidePanel | To display the Jobily sidebar interface within Chrome. |
| storage | To store your profile data in Chrome's local storage so it persists between browser sessions. |
The Extension is not intended for individuals under the age of 16. We do not knowingly collect information from children under 16. If we become aware that we have collected data from a child under 16, we will delete it immediately.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when changes were made. If we make material changes, we will notify users through the Extension or Web Portal. Your continued use of the Extension after any changes constitutes acceptance of the revised policy.
If you have questions, concerns, or requests regarding your data or this privacy policy, please contact us at:
Email: support@squareoneinternational.com
Entity: Squareone International