1. Who we are

Offerly ("we", "us", "our") is a job application tracking service. We provide:

• Offerly App — a mobile application (iOS and Android) for tracking job applications, CVs, email activity, and interview preparation.

• Offerly Chrome Extension — a browser extension that automatically detects when you submit a job application on a supported job board and saves it to your Offerly account.

By using either the Offerly App or the Offerly Chrome Extension, you agree to the collection and use of information as described in this Privacy Policy.

If you have questions, contact us at: privacy@offerly.app

2. What data we collect and why

2.1 Account data

When you create an Offerly account we collect:

Data

Why

Email address

To create your account, authenticate you, and send transactional emails (e.g. password reset)

Password (hashed)

To secure your account — we never store your password in plain text

Display name / username (optional)

To personalise your in-app experience

We use Supabase Auth to manage authentication. Passwords are hashed using bcrypt and never stored in recoverable form.

2.2 Job application data

When you add or auto-detect a job application, we store:

• Job title, company name, location, salary, and contract type

• The date you applied and any closing, sift, or interview dates

• The platform you applied on (e.g. LinkedIn, Indeed)

• The URL of the original job listing (if available)

• Application status and your personal notes

• Which CV you submitted

• A flag indicating whether a listing snapshot was saved

Why: To power your applications dashboard, timeline, reminders, AI features, and CV matching.

2.3 CV data

When you upload a CV:

• The file (PDF or Word document) is stored in a private storage bucket accessible only by you

• We store metadata: file name, file size, version label, upload date, and storage path

• We never analyse your CV content without your explicit action (e.g. tapping "Match CV to role")

2.4 Email activity data

When you share a job-related email to Offerly via the Share Sheet:

• We extract and store: email type (e.g. Confirmation, Interview Invite, Rejection), subject line, sender domain, date, and an AI-generated snippet summary

• We do not store the full email body

• We never access your email inbox directly — you choose which emails to share with Offerly, one at a time

2.5 Chrome Extension data

The Offerly Chrome Extension collects the following only on supported job board pages:

Data

Why

Job title, company name, location, salary, closing date

To pre-fill your application record

URL of the job listing

So you can return to the original listing from your dashboard

Page content from supported job board pages

To detect whether an application was submitted and extract job details

Authentication session tokens

Stored locally in your browser so you stay logged in across sessions

Extension preferences (e.g. auto-detect on/off)

Stored locally in your browser

Duplicate detection cache (job title, company, URL, date)

To prevent the same application being saved twice

The extension never:

• Reads or monitors pages that are not on our declared list of supported job boards

• Accesses your full browsing history

• Reads tabs you have not actively visited during a detection event

• Collects data in the background when you are not on a supported job board page

• Sends data to any third party other than the Offerly backend

User confirmation: When the extension detects a likely job application submission with high or medium confidence, it shows an in-page prompt: "Looks like you applied for this role. Add it to Offerly?" Your application is only saved if you confirm.

2.6 AI-generated content

When you use AI features (Interview Prep, CV Match, Email Classification, Job Detection):

• We send the minimum required data to the AI service (e.g. job title, company, contract type, email snippet) to generate a response

• We do not send your full CV text, your full email body, or any personally identifying data beyond what is strictly necessary

• AI-generated content (interview prep guides, CV match scores) is returned to you and not stored on our servers unless you explicitly save it

AI features are powered by the Offerly AI service.

2.7 Notification data

If you enable notifications, we schedule local device reminders for:

• Application closing dates

• Follow-up nudges (if no response after 2 weeks)

• Interview countdowns

Notification scheduling is handled entirely on-device. We do not send push notifications through a third-party push notification service that retains your data.

2.8 Usage and diagnostic data

We do not currently collect anonymous analytics, crash reports, or usage telemetry beyond what is captured in standard authentication logs (login events, password resets). We do not use third-party analytics SDKs (e.g. Firebase Analytics, Mixpanel, Amplitude).

3. How we use your data

We use the data we collect only to:

• Operate and improve the Offerly App and Chrome Extension

• Authenticate you and protect your account

• Automatically detect and save job applications on your behalf (with your confirmation)

• Power AI features you explicitly trigger

• Send transactional emails (password reset, account verification)

• Schedule and deliver local reminders on your device

• Maintain your application history, CV library, and email activity log

We do not:

• Sell your data to any third party

• Share your data with employers or recruitment agencies

• Use your data to build advertising profiles

• Share your data with data brokers

• Use your data for any purpose other than operating Offerly

4. Data storage and security

• All data is stored in a PostgreSQL database with industry-standard security controls

• Row Level Security (RLS) policies ensure each user can only access their own data

• CV files are stored in a private storage bucket, accessible only to the authenticated owner

• Data in transit is encrypted using TLS 1.2 or higher

• Authentication tokens are stored securely in your browser's local storage (extension) and the device's secure storage (app)

• We do not store passwords in plain text

5. Data retention

Data type

Retention

Account data

Until you delete your account

Application records

Until you delete them or delete your account

CV files

Until you delete them or delete your account

Email activity records

Until you delete them or delete your account

Application timeline events

Until the parent application is deleted

Chrome Extension local storage

Until you sign out of the extension or clear browser data

When you delete your account, all your personal data is permanently deleted from our database and storage. This cannot be undone.

6. Your rights

You have the right to:

• Access the data we hold about you — available via the Offerly App (Settings → Your Data)

• Export your data — contact us at privacy@offerly.app to request a full data export

• Delete your data — use Settings → Delete my account, or contact us

• Correct inaccurate data — edit your profile and application records directly in the app

• Withdraw consent — pause or disable browser detection, email scanning, and notifications at any time in Settings

• Lodge a complaint — with your national data protection authority if you believe your rights have been violated

For users in the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO): ico.org.uk

For users in the European Economic Area, the relevant authority is your country's data protection supervisory authority.

7. Cookies and local storage

Offerly App: The mobile app does not use cookies. Session tokens are stored in the device's secure storage managed by the authentication SDK.

Offerly Chrome Extension: The extension uses browser local storage (not cookies) to store:

• Your authentication session tokens

• Extension preferences

• A duplicate detection cache

This data never leaves your browser except as part of authenticated API requests to the Offerly backend.

8. Third-party services

Offerly uses the following sub-processors to deliver the service:

Provider

Purpose

Data shared

Supabase

Database, authentication, file storage, edge functions

Account data, application data, CV files

Offerly AI

AI features (interview prep, CV match, email classification, job detection)

Job title, company, contract type, email snippet — minimum required for the task

Stripe

Payment processing for Offerly Pro subscriptions

Billing data only — we never see or store your card details

We have data processing agreements in place with all sub-processors. We do not use sub-processors based outside the UK/EEA for processing EU/UK personal data without appropriate safeguards.

9. Children

Offerly is intended for users aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact us at privacy@offerly.app and we will delete the account promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page

• Display an in-app notice for significant changes

Your continued use of Offerly after changes take effect constitutes your acceptance of the updated policy.

11. Contact

If you have any questions, requests, or complaints about this Privacy Policy or the way we handle your data:

Email: privacy@offerly.app

Service: Offerly — Job Application Tracker