Privacy

Stored on your device

Your job board, saved vacancy details, snapshots, notes and reminders are stored in this browser. Settings are kept in Chrome extension storage. In the web app the same data is kept in your browser's storage for offeryay.com. Export a CSV backup from Settings before clearing browser data or removing the extension. Local tracking needs no account.

Permissions and job sites

Storage keeps your data. Alarms and notifications deliver reminders. Active tab and scripting read the vacancy you choose to save, or open the form-filling panel when you click “Fill this form”; if a page cannot be read, use the manual form.

Automatic duplicate badges run on supported job sites: LinkedIn, Indeed, Greenhouse, Lever, Workday, Ashby, SmartRecruiters, Glassdoor, Workable and ZipRecruiter. On application forms of these sites the form-filling panel appears on its own. On other sites nothing runs until you click. The extension does not need your browsing history.

Application forms

The form-filling panel reads the fields of the application form in the open tab. Your answer memory and your main resume fill the questions they know right on your device, without sending anything. The extension never submits a form and never clicks Next, Review or Submit: you check the answers and send the application yourself.

Ask AI is optional, needs an active pass and runs only when you press it. Then the questions the panel could not fill (their labels and choices), your main resume and your answer memory pass through our server to OpenAI, which suggests answers for that page. Answers you marked as sensitive, such as voluntary diversity questions, are sent only on the step that asks them. We do not store or log these texts; we keep only a count of AI pages per day. OpenAI may keep requests for up to 30 days to check for abuse and does not use them to train its models. Answers from AI are highlighted for you to review. Answers you confirm are added to your answer memory, which stays on your device and is included in your cloud copy when you sign in for sync.

Job search and matching

When you search for jobs, your search words, location and filters are sent to our server to return results; we do not log them.

Matching jobs to your resume is optional. When you use it, the text of the resume you choose is sent to our server. The server keeps a parsed profile of that resume: the skills, job titles and experience it found, a condensed summary and numeric vectors, so that matches load quickly and the same resume is not processed twice. The full resume text is not stored. To compute the vectors, the condensed summary is processed by DeepInfra, or by our own server if DeepInfra is unavailable. Deleting a resume in OfferYay also deletes its parsed profile. To delete every profile created in your browser, use “Delete matching profiles” in Settings → Privacy. Profiles are not deleted automatically otherwise; for profiles created on another device, use that device or email hello@offeryay.com.

Usage statistics

Website visits are measured with Rybbit, without cookies. The extension and the web app send separate anonymous usage statistics to our own PostHog server (analytics.offeryay.com): only events and numbers, never job titles, companies, notes, vacancy texts or links, or e-mail addresses. IP addresses are discarded. Turn this off with “Share anonymous usage statistics” in Settings; it is on by default.

Optional online features

Everything below applies only if you use the optional online features. Sync, licensing and resume parsing are described in the parts that follow.

Sync and the cloud copy

Registration and automatic sync are free. Enter your email and the six-digit one-time code we send you; a new account is created only after email verification. New and existing accounts sign in the same way, without a password or recovery key. After sign-in, your records and files sync automatically. They are not end-to-end encrypted: our server stores their contents and technically has access to your board, notes, resumes, answer memory, vacancy details and attachments. Transfers use HTTPS; access requires a verified session and is isolated by account. Your cloud copy is kept until you press “Delete cloud copy” in Settings, which also stops sync. Signing out keeps local data on your device. Local tracking without an account remains available.

Purchases

Purchases are handled by Stripe Managed Payments; Link (by Stripe) is the Merchant of Record for all orders, and the charge appears on your statement as LINK.COM* followed by our name. Payment details stay with Stripe; it tells us your e-mail, the item bought and the order number, together with two values our checkout page attaches to the order: your installation ID and a one-time code that lets the extension turn the pass on by itself. Stripe's secure checkout page opens from the checkout page of this website, never inside the extension; receipts are e-mailed by Link. Purchases are attached to your account; a verified email sign-in restores access without a user-facing license key. Purchase confirmations and sign-in codes are e-mailed through Resend. Refunds are described in the Terms.

Resume parsing

Uploading a resume (PDF or Word) is optional. When you press the parse button, the file and its text pass through our server to OpenAI, which reads out your name, skills and experience. We do not store or log the file or its text. OpenAI may keep requests for up to 30 days to check for abuse; OpenAI does not use it to train its models. Each installation can run up to 30 resume scans a day; we keep only a counter for this, never the texts. Please do not upload anything you do not want processed this way. Resumes and attached files included in sync are stored on our server without client-side encryption and are technically accessible to us, as described above. Importing a CSV file works the same way: to recognize the columns, the column headers and up to 20 sample rows pass through our server to OpenAI; we do not store or log them. Other AI features, if added, will work the same way and be described here.

Hosting

The website, our API and the cloud copy run on Cloudflare. Job search and matching run on our own servers. Our API logs contain only counters, status codes and timings, not your content.

Questions

Questions about your data or this policy? Email hello@offeryay.com.