Privacy policy

• The extension reads a job page only when you ask it to (toolbar icon, the launcher on a page you enabled, or the right-click menu).
• What it reads is sent to pypr only when you press Save.
• It does not read your browsing history, cookies, passwords, or what you type into forms.
• We do not sell your data, show ads, or use it for anything unrelated to running pypr.

Website content, from pages you capture. When you press "Add this job", the extension reads the job title, company, location, work arrangement, employment type, salary text, description, application link, and the page address. You can edit all of it before saving. It is sent to your pypr account only after you confirm.

Authentication information. After you approve the connection on pypr.work, the extension keeps a session token so it can save jobs to your account. You can disconnect in its settings, which removes the token.

Settings stored in your browser. Your field mappings (which element on a site holds which detail), the sites you enabled, and unsaved drafts are kept in chrome.storage on your device, separately for each account. They are not uploaded.

The extension asks Chrome for access to a site only when you click "Enable on this site", and only for that site. It requests no access to cookies, browsing history, or network traffic, and it loads no remote code.

• Account: name, email address, and a hashed password.
• Content you add: resumes, tracked jobs and notes, interview-practice answers, and design boards.
• Sessions: a session cookie or extension token to keep you signed in.

We use a few providers to run the service. Each receives only what its job needs.

• Database hosting (PostgreSQL on Supabase) stores your account and content.
• Email delivery (Resend) receives your email address to send verification and password-reset messages.
• AI features (via OpenRouter): when you use a feature such as resume parsing, job matching, or answer review, the text needed for that request, for example resume or job text, is sent to a language model. Nothing is sent unless you use such a feature.

We do not sell or rent personal data, and we do not share it for advertising.

Account content stays until you delete it or ask us to delete your account. You can delete resumes, jobs, and boards inside the app. Removing the extension deletes everything it stored in your browser. To have your account and data erased, contact us using the link below.

Traffic uses HTTPS. Passwords are stored hashed. The extension talks only to the pypr API, validates every message between its parts, and keeps its token in storage that web pages cannot read.

pypr is not directed at children under 16.

If this policy changes, we will update the date above. Questions or deletion requests: message the author through the LinkedIn link in the footer.