Privacy Policy

JobTailor Browser Extension | Last updated: March 2026

1. Introduction

JobTailor is a browser extension developed by Roberto Tome (contact@robtome.com). It helps job seekers generate tailored CVs and cover letters by combining their saved profile with job descriptions extracted from the current web page, then sending that information to a user-configured AI model (Ollama).

This Privacy Policy explains what data the extension collects, how it is used, and the choices you have. By installing and using JobTailor you agree to these practices.

2. Data We Collect

The extension stores the following information locally on your device using the browser's chrome.storage.local API:

Personal details you enter in the extension profile: name, email address, phone number, location
Professional history: work experience, education, skills, languages, certifications
Extension configuration: Ollama API endpoint URL, selected model, Google Drive backup preference
Temporarily, during document generation: the job description extracted from the current page

We do not collect browser history, browsing behaviour, cookies, or any data beyond what you explicitly enter in the extension.

3. How We Use Your Data

Your data is used exclusively for the following purposes:

CV / cover letter generation: when you click "Generate", your profile and the extracted job description are sent to the Ollama API endpoint you configured (which may be a local or remote server you control) to produce the document.
Profile persistence: your profile is stored locally so you do not have to re-enter it each session.
Optional Google Drive backup: if you enable Drive backup, your profile is copied to your Google Drive account's private app folder (see Section 5).

4. Data Sharing

JobTailor does not sell, rent, or share your data with any advertising networks, analytics providers, or unrelated third parties.

The only external services that may receive your data are:

Ollama API — the endpoint URL is set by you in the extension settings. This server may be running locally on your machine or on a remote server you own or trust. Your profile and the job description are sent to this endpoint solely to generate the requested document. We have no control over, and no visibility into, the server you configure.
Google Drive (optional) — if you enable backup, your profile data is uploaded to the private drive.appdata folder of your Google account. This folder is not visible to other users or other apps; only JobTailor can access it.

5. Google OAuth and Drive Access

JobTailor requests the https://www.googleapis.com/auth/drive.appdata OAuth scope. This scope grants access only to a hidden application data folder in your Google Drive; it does not provide access to files you have created or any other part of your Drive.

You will be shown Google's standard consent screen before any Drive access is granted. Authorisation is entirely optional — the extension is fully functional without it.

To revoke access at any time, visit Google Account → Security → Third-party access and remove JobTailor.

6. Job Data Extraction

When you click "Generate CV" on a job listing page, the extension's content script reads text from that page (job title, company name, job description) to use as context for document generation.

This data is held only in memory for the duration of the generation request and is discarded immediately afterwards. It is never stored persistently or sent to any service other than your configured Ollama endpoint.

7. Data Retention and Deletion

Your profile data remains in chrome.storage.local until you explicitly delete it. You can remove all locally stored data by opening the extension and using the "Clear Data" option in the settings.

If you have enabled Google Drive backup, disabling the integration or revoking Google's permission will stop future backups. To delete existing backup data, use the "Delete Drive backup" option in the extension settings, or delete the app data folder manually via Google Drive settings.

Uninstalling the extension removes all data stored in chrome.storage.local.

8. Security

Profile data is stored in the browser's local storage mechanism, which is sandboxed to the extension and not accessible by websites or other extensions. No additional encryption is applied beyond what the browser provides natively.

Communications between the extension and the Ollama API use the protocol of the endpoint URL you provide (HTTP or HTTPS). We strongly recommend using an HTTPS endpoint, especially for remote servers.

Communications between the extension and Google Drive use HTTPS enforced by Google's APIs.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the extension after changes constitutes acceptance of the revised policy.

10. Contact

If you have questions or concerns about this Privacy Policy or the data practices of JobTailor, please contact:

Roberto Tome
contact@robtome.com