Privacy Policy for ATS Copilot

Effective Date: September 13, 2026

Last Updated: September 13, 2026

ATS Copilot ("we", "our", or "the extension") is committed to protecting your privacy. This Privacy Policy describes how ATS Copilot handles, stores, and protects your information when you use our Chrome browser extension.

1. Core Privacy Principle: Local Storage First

Local-Only Candidate Profiles:

All personal information you enter into the extension (such as your name, email address, phone number, location, LinkedIn URL, GitHub URL, and portfolio link) is stored exclusively within your local browser storage (chrome.storage.local). We do not operate user accounts, databases, or tracking servers to store your profile.
No Tracking or Third-Party Analytics:

ATS Copilot contains zero third-party analytics trackers, telemetry scripts, or advertising SDKs. We do not track, collect, or monitor your web browsing history.

2. Permissions and Data Use Transparency

We strictly follow the Principle of Least Privilege required by the Google Chrome Web Store Developer Program Policies. The permissions we request serve specific, functional purposes:

Permission	Type	Functional Purpose
`storage`	Required	Enables the extension to securely save your candidate profile and usage preferences locally on your machine via `chrome.storage.local`.
`activeTab`	Required	Used when you interact with the extension or click the on-page floating button to inspect form fields on the active tab and perform the requested autofill operation.
`<all_urls>`	Host Permission	Many tech employers embed ATS job applications (like Greenhouse or Lever iframe widgets) inside their custom company career domains (e.g. `careers.airbnb.com`). This permission ensures the extension can identify job application forms across diverse domains and nested frames. The extension executes strictly on pages containing recognized job application forms.
`contextMenus`	Optional Feature	Allows users to toggle the assistant or invoke autofill from the browser right-click context menu.
`alarms`	Background Lifecycle	Schedules non-intrusive periodic background license validation checks adhering to Manifest V3 service worker lifecycle standards.

3. AI-Powered Answering Services

When you explicitly request an AI-generated answer for an open-ended question on a job application:

Only the specific job question prompt and relevant resume context are sent over encrypted HTTPS to our Cloudflare Worker edge proxy.
This request is processed ephemerally solely to generate the requested response.
We do not sell, rent, or use your submitted text to train public AI models.

4. User Data Control and Deletion

Review and Edit: You can review and update your stored information at any time by clicking the ATS Copilot icon in your browser toolbar.