Browser extension
JobHacki Assistant: privacy
The JobHacki Assistant is the browser extension our trained assistants use to fill job applications for done-for-you clients, and that clients use to send a job to their assistant. This page explains what it reads, what it sends and who can see it. Our full Privacy Policy covers everything else.
Effective date: October 17, 2026
What the extension reads
- Where it runs: only on job application pages hosted by Greenhouse, Lever, Ashby, SmartRecruiters and Workday, and on jobhacki.com to connect your account.
- On those pages: the form's field labels, so it knows what each field asks, and the job title and company.
- Scam warning signs: it checks the visible job text and the form's labels for common job-scam signs, for example a request to pay a fee or to share bank details before an offer. When it finds one, it shows the warning and the exact text to the assistant, who must tick "I've read this" before filling (the choice is logged). It also sends that short excerpt to JobHacki, so a team lead can review the posting and block it for the client.
- Save this job: when a client clicks "Send this job to my assistant", it reads that one tab's address and title. On LinkedIn, Indeed, ZipRecruiter and Glassdoor it saves only the address.
- What it does not read: your browsing history, other tabs, cookies or passwords.
What it sends, and to whom
- Recipient: JobHacki only (jobhacki.com). No advertising networks, no data brokers and no analytics tools inside the extension.
- For each application an assistant works on for a client: the job address, company, role and application system; the times the page was opened, filled, submitted and confirmed; counts of filled and skipped fields; the result of the client's avoid-list check; and a screenshot of the employer's confirmation page, cropped to the confirmation.
- What it never sends back: the contents of the application form.
- What it leaves on the employer's page: only the coloured outlines on fields it filled or left for a person. It writes no JobHacki marker into the page.
- The client's profile: only the approved values the current form needs (for example a first name, an email address, a work-eligibility answer for that country, or one approved answer) are fetched, after JobHacki's server has checked the job and the assistant's assignment. They stay in the extension's memory for the work session, reach the page only when the assistant presses Fill, and are cleared when the browser closes or the assistant signs out. Pay, sensitive identifiers and self-identification answers are never sent to the extension. The one self-identification fact it receives is whether the client chose, in writing, to decline to answer those questions; only then does it pick the form's "decline to answer" option.
- The resume: one approved Word document (the resume, then the cover letter when one is approved for that job) is downloaded when the assistant presses Fill and attached only to the form's resume upload.
- Questions sent for drafting: the text of an open application question (no client data) may be sent to JobHacki to draft an answer from the client's approved resume. A draft is used only after a person approves it.
- Never automatic: the extension never presses an employer's submit button. A person reviews and submits every application.
Who can see it
- People: the client, the assistant assigned to the client, and the team lead who checks quality.
- Consent: the client gives this consent in writing in the done-for-you authorization, before any assistant works on their applications.
Limited Use
JobHacki's use of information received through the JobHacki Assistant browser extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to fill, check and record job applications that you have authorized, and we never sell it or use it for advertising.
Sign-in
- No passwords: the extension never asks for, stores or sees a password. You sign in on jobhacki.com.
- Tokens: the extension gets a short-lived token (15 minutes), renewed during a work session and never written to disk.
Storage, copies and deletion
- Confirmation screenshots: stored privately in the client's folder, never at a public address.
- Your rights: you can ask for a copy of this data, a correction or its deletion at any time by emailing support@jobhacki.com, as described in our Privacy Policy.
Contact
Questions about the extension or your data: support@jobhacki.com.