# Privacy Policy for Autolin: LinkedIn/Indeed Auto Applier
**Last Updated: December 22, 2025**
---
## Introduction
Autolin ("we," "our," or "the extension") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our Chrome extension for automating job applications on LinkedIn and Indeed.
**By installing and using Autolin, you agree to the terms outlined in this Privacy Policy.**
---
## 1. Information We Collect
### 1.1 Personal Information You Provide
When you use Autolin, you may voluntarily provide the following information through the extension interface:
- **Resume/CV**: PDF, DOC, or DOCX files
- **Contact Information**: Phone number and location
- **Work Preferences**:
- Work authorization status
- Visa sponsorship requirements
- Remote work preferences
- Relocation willingness
- **API Keys**: Google Gemini API key (optional)
### 1.2 Usage Information
The extension stores the following usage data locally:
- **Application History**: Records of job applications submitted (job titles, companies, dates, platforms)
- **Session Statistics**: Number of applications submitted, skipped, success rates
- **Timestamps**: When applications were submitted
### 1.3 Information We DO NOT Collect
- We do **NOT** collect any analytics or tracking data
- We do **NOT** track your browsing history
- We do **NOT** collect information about websites you visit (except when actively using the extension on LinkedIn/Indeed)
- We do **NOT** transmit your personal data to our servers (we have no servers)
- We do **NOT** sell, rent, or share your information with third parties
---
## 2. How We Store Your Information
### 2.1 Local Storage Only
**All your data is stored locally on your device** using Chrome's built-in storage API (`chrome.storage.local`). This means:
- Your resume, contact information, and preferences stay on your computer
- Data is only accessible by the Autolin extension
- We (the developers) have **NO access** to your data
- Your information is **NOT uploaded** to any external servers or databases
### 2.2 Data Security
- Data is stored in Chrome's secure extension storage
- Only the Autolin extension can access this data
- Data is isolated from other extensions and websites
- Chrome's security mechanisms protect your stored information
### 2.3 Data Retention
- Your data remains stored until you:
- Manually delete it through Chrome's extension settings
- Uninstall the extension (which removes all local data)
- Clear Chrome's extension data
---
## 3. How We Use Your Information
### 3.1 Primary Use
Your information is used **exclusively** for:
- Auto-filling job application forms on LinkedIn and Indeed
- Answering screening questions during applications
- Tracking your application history for your own reference
- Providing session summaries and statistics
### 3.2 No Secondary Use
We do **NOT** use your information for:
- Advertising or marketing
- Profiling or behavioral analysis
- Selling to third parties
- Training machine learning models
- Any purpose other than facilitating your job applications
---
## 4. Third-Party Services
### 4.1 Google Gemini API (Optional)
If you choose to provide a Google Gemini API key, the extension will:
- Send application form questions to Google's Gemini AI service
- Receive AI-generated responses to help answer screening questions
- This data is processed by Google according to [Google's Privacy Policy](https://policies.google.com/privacy)
**What is sent to Gemini:**
- Application form questions
- Your resume content (to provide context for answers)
- Job description information
**What is NOT sent to Gemini:**
- Your personal contact information
- Your browsing history
- Application history or statistics
**Your Control:**
- Using Gemini API is entirely **optional**
- You can use the extension without providing an API key (basic form filling still works)
- You can remove your API key at any time
- The extension includes a default API key for convenience, but you can replace it with your own
### 4.2 LinkedIn and Indeed
The extension interacts with LinkedIn and Indeed websites to:
- Read job posting information
- Fill out application forms
- Submit applications on your behalf
**Important:**
- We do NOT store your LinkedIn or Indeed credentials
- We do NOT access your account without your explicit action
- The extension only works when you are already logged into these platforms
- Your use of LinkedIn and Indeed is subject to their respective privacy policies:
- [LinkedIn Privacy Policy](https://www.linkedin.com/legal/privacy-policy)
- [Indeed Privacy Policy](https://www.indeed.com/legal/privacy)
---
## 5. Permissions Explained
The extension requires the following Chrome permissions:
### 5.1 `storage`
**Purpose:** To save your profile data (resume, contact info, preferences) and application history locally in your browser.
**Data Access:** Only data you explicitly provide through the extension interface.
### 5.2 `activeTab`
**Purpose:** To read and interact with the current job listing page you're viewing on LinkedIn or Indeed.
**Data Access:** Only the active tab when you click the extension button.
### 5.3 `scripting`
**Purpose:** To inject automation scripts that fill out application forms on your behalf.
**Data Access:** Ability to modify content on LinkedIn and Indeed pages (only used for form filling).
### 5.4 `host_permissions: <all_urls>`
**Purpose:** To work across different LinkedIn and Indeed subdomains and regional sites (e.g., linkedin.com, uk.linkedin.com, indeed.com, ca.indeed.com).
**Data Access:** Limited to LinkedIn and Indeed domains during active use.
**Note:** While we request `<all_urls>`, the extension **only functions** on LinkedIn and Indeed job pages. We do not access or interact with any other websites.
---
## 6. Data Sharing and Disclosure
### 6.1 No Data Sharing
We do **NOT** share your personal information with:
- Advertisers
- Marketing companies
- Data brokers
- Analytics services
- Other third parties
### 6.2 Legal Requirements
We may be required to disclose information if:
- Required by law, regulation, or legal process
- Necessary to protect our rights or property
- Necessary to protect users' safety
**However:** Since we do not collect or store your data on our servers, we have no data to disclose.
---
## 7. Your Rights and Choices
### 7.1 Access and Control
You have full control over your data:
- **View:** All your data is visible in the extension popup
- **Edit:** You can modify your profile information at any time
- **Delete:** You can clear your data through Chrome settings or by uninstalling the extension
### 7.2 Data Deletion
To delete your data:
1. **Option 1:** Right-click the extension icon → "Remove from Chrome"
2. **Option 2:** Chrome Settings → Extensions → Remove Autolin
3. **Option 3:** Chrome Settings → Privacy and Security → Clear browsing data → Cookies and site data → Select extension data
### 7.3 Opt-Out
- **Gemini AI:** Don't provide an API key, or remove your existing key
- **Application Tracking:** You can manually delete history entries
- **Data Collection:** The extension doesn't collect analytics, so there's nothing to opt out of
---
## 8. Children's Privacy
Autolin is **NOT intended for use by children under 18**. We do not knowingly collect information from children. If you are under 18, please do not use this extension.
---
## 9. International Users
Autolin is available worldwide. However:
- All data is stored locally on your device (location doesn't matter)
- If you use Gemini API, data may be processed by Google's servers (subject to Google's privacy policy)
- You are responsible for complying with local laws regarding automated job applications
---
## 10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be:
- Posted in this document with an updated "Last Updated" date
- Significant changes will be communicated through the extension update notes
- Continued use of the extension after changes constitutes acceptance
**How to stay informed:**
- Check this policy periodically
- Review release notes when updating the extension
---
## 11. Security Measures
We take security seriously:
- **Local Storage:** All data stored using Chrome's secure storage API
- **No Transmission:** Your personal data never leaves your device (except optional Gemini API)
- **No Servers:** We don't operate servers that could be breached
- **Code Review:** Extension code can be reviewed (open-source)
**Your Responsibility:**
- Keep your browser updated
- Use strong passwords for LinkedIn and Indeed accounts
- Protect your Gemini API key (if used)
- Don't share your device with untrusted users
---
## 12. Open Source
Autolin is open-source software. You can:
- Review the source code to verify our privacy claims
- Audit what data is collected and how it's used
- Report security issues or privacy concerns
**Source Code:** [Add GitHub repository URL here]
---
## 13. Disclaimers
### 13.1 Not Affiliated
Autolin is **NOT** affiliated with, endorsed by, or sponsored by:
- LinkedIn Corporation
- Indeed, Inc.
- Google LLC (Gemini API provider)
- Any job posting platforms
### 13.2 User Responsibility
You are responsible for:
- Complying with LinkedIn and Indeed Terms of Service
- Ensuring accuracy of information submitted in applications
- Using the extension in accordance with applicable laws
- Understanding that automated applications may violate platform policies
### 13.3 No Guarantees
We do NOT guarantee:
- Job application success
- That your account won't be suspended for using automation
- Compatibility with all job listings or form types
- Continuous availability of the extension
---
## 14. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your data:
**Email:** [Your support email address]
**Response Time:** We aim to respond within 7 business days.
**Issues/Bugs:** [GitHub Issues URL or support portal]
---
## 15. Compliance
### 15.1 GDPR (European Users)
If you are in the European Economic Area (EEA), you have rights under GDPR:
- **Right to Access:** View all data stored by the extension (visible in extension popup)
- **Right to Erasure:** Delete your data at any time (uninstall extension)
- **Right to Rectification:** Modify your data (edit profile in extension)
- **Right to Data Portability:** Export your data (currently manual, may be automated in future updates)
- **Right to Object:** Stop processing by uninstalling the extension
**Legal Basis for Processing:**
- **Consent:** You provide information voluntarily
- **Legitimate Interest:** Providing the job application automation service
**Data Controller:** [Your name or company name]
### 15.2 CCPA (California Users)
If you are a California resident, you have rights under CCPA:
- **Right to Know:** What data is collected (outlined in Section 1)
- **Right to Delete:** Request deletion (uninstall extension)
- **Right to Opt-Out:** We don't sell your data, so opt-out is not applicable
- **Right to Non-Discrimination:** We don't discriminate based on privacy rights
**Note:** Since we don't collect your data on our servers, we cannot fulfill data requests server-side. All data is on your device.
---
## 16. Cookies and Tracking
### 16.1 No Cookies
Autolin does **NOT** use cookies for tracking or analytics.
### 16.2 No Analytics
We do **NOT** use:
- Google Analytics
- Facebook Pixel
- Tracking pixels
- Fingerprinting techniques
- Any analytics or tracking tools
---
## 17. Data Breach Notification
In the unlikely event of a data breach:
- We will notify affected users within 72 hours
- We will describe the nature of the breach
- We will provide guidance on protective measures
**Important:** Since data is stored locally on your device, a breach would require:
- Your device being compromised (outside our control)
- Chrome browser vulnerability (Google's responsibility)
We cannot breach data we don't have access to.
---
## 18. Third-Party Links
The extension may display links to third-party websites (LinkedIn, Indeed, job listings). We are NOT responsible for:
- Privacy practices of these websites
- Content on these websites
- Your interactions with these websites
Please review their privacy policies separately.
---
## 19. Automated Decision Making
The extension uses AI (Google Gemini) to:
- Generate responses to application questions
- Suggest answers based on your resume
**Your Control:**
- You can review AI-generated responses before submission (in future versions)
- You can disable AI features by not providing an API key
- You can always edit your profile to influence AI responses
---
## 20. Consent
By installing and using Autolin, you consent to:
- This Privacy Policy
- Local storage of your profile data
- Optional use of Google Gemini API (if you provide a key)
- Automation of job applications on your behalf
**Withdrawal of Consent:**
- Uninstall the extension at any time
- Remove your data through Chrome settings
- Stop using the extension
---
## Summary
**In plain English:**
✅ **Your data stays on your device** - We don't collect it
✅ **No tracking or analytics** - We don't watch what you do
✅ **Optional AI features** - You choose whether to use Gemini
✅ **Full control** - You can delete everything anytime
✅ **No selling** - We never sell your information
✅ **Open source** - You can verify our claims
❌ **No servers** - We don't store your data
❌ **No third-party sharing** - Your data doesn't leave your device
❌ **No hidden features** - What you see is what you get
---
## Questions?
If anything is unclear or you have privacy concerns, please contact us at [your email].
We're committed to transparency and protecting your privacy.
---
**Effective Date:** December 22, 2025
**Version:** 1.0.0
---
*This privacy policy is provided for informational purposes and should be reviewed by a legal professional before publication.*