1. Overview
This Privacy Policy explains how the GiraffyReach Auto-Apply Chrome extension (the "Extension") handles your information. The Extension is a tool that runs inside your own browser and helps you fill out job-application forms on applicant tracking systems (ATS) such as Greenhouse, Workday, Lever, iCIMS, and similar sites, using the information already in your GiraffyReach profile. We wrote this policy in plain language on purpose. The short version: the Extension exists only to help you apply to jobs faster. It does not sell your data, it does not read your mail, and it never submits an application without you clicking submit yourself. This policy covers the Extension specifically. Your use of the GiraffyReach web platform is also governed by the main GiraffyReach Privacy Policy.
2. What the Extension Accesses
2.1 Your GiraffyReach Profile
When you are signed in, the Extension reads your GiraffyReach profile — your name, contact details, work history, education, skills, and preferences — so it can populate the corresponding fields on a job application. This data is retrieved from your GiraffyReach account over a secure connection.
2.2 Your Tailored Resume
The Extension can read the resume you generated or tailored inside GiraffyReach so it can attach or transcribe it into an application. It only accesses the resume associated with your own account.
2.3 The Current ATS Page You Are On
When you are on a supported job-application page and you activate the Extension, it reads the form fields on that page (the labels, inputs, and file-upload controls) so it knows what to fill in and where. The Extension only inspects the page you are actively applying on. It does not run in the background on unrelated websites, and it does not read pages you have not asked it to help with.
2.4 Email — One-Time Verification Codes Only
Some ATS platforms require you to create or verify an account before you can apply, and they send a one-time verification code or confirmation link to your email. If — and only if — you connect your email so the Extension can complete this step for you, the Extension (through our authorized email connection provider, Composio) reads ONLY the specific message containing that one-time code or verification link, and uses it solely to finish the ATS account verification so your application can proceed. The Extension does not read, index, store, scan, summarize, or export any of your other email. It does not build a profile from your inbox, it does not read messages unrelated to an active ATS verification, and it does not use your email for advertising, analytics, or any purpose other than completing the verification step you initiated. See the Limited Use statement in Section 5.
3. How the Information Is Used
The Extension uses the information above for one purpose: to help you complete your own job applications. Specifically, it: • Fills the fields of the ATS application form you are on with your GiraffyReach profile and resume data. • Attaches or transcribes your tailored resume into the application. • Reads a single one-time verification code or link from your connected email (if you enabled this) to complete ATS account verification so you can submit your application. That is the entire scope. The Extension does not use your information to advertise to you, to train models, or for any purpose unrelated to helping you apply to the job in front of you.
4. The Extension Never Submits for You
The Extension fills out application forms — it does not send them. You always review every field the Extension populated, make any changes you want, and click the submit button yourself. Nothing is ever submitted to an employer automatically or on a schedule. You are always the person who decides to apply.
5. Limited Use Statement (Email Access)
The GiraffyReach Auto-Apply Extension's use of information received from your connected email account adheres to a strict limited-use commitment: • Email access is used solely to read one-time verification codes and verification links needed to complete account creation or verification on the ATS site you are applying to. • We do not read, collect, retain, or transmit any other email content. • We do not use email data for advertising, marketing, profiling, or model training. • We do not sell or transfer email data to any third party, and we do not allow humans to read your email except where required to comply with applicable law, for security investigations you have asked us to perform, or where the data has been aggregated and anonymized. • Email data is used transiently to complete the verification step and is not stored beyond what is necessary to perform that step. This limited-use commitment applies regardless of any broader permissions the email provider's authorization screen may present.
6. We Do Not Sell or Share Your Data
We do not sell your personal information, and we do not share it with third parties for their own purposes. The only parties your data reaches are: • The ATS / employer site you are actively applying to — because that is where your application goes, by your choice. • GiraffyReach's own systems, which supply your profile and resume to the Extension over a secure connection. • Composio, our authorized email-connection provider, strictly to retrieve the one-time verification code described above, acting under contract on our behalf. Beyond these, your data is not disclosed, rented, traded, or made available to advertisers, data brokers, or any other third party.
7. Storage and Retention
The Extension is designed to keep on-device storage to a minimum. It stores only what is needed to function — such as your sign-in session and basic preferences — using your browser's local extension storage. Your profile and resume are fetched from your GiraffyReach account when needed rather than being permanently duplicated by the Extension. Verification codes and email content accessed for verification are used transiently to complete the step and are not retained afterward. Any operational data associated with your GiraffyReach account is retained per the main GiraffyReach Privacy Policy, and is deleted when you delete your GiraffyReach account.
8. Your Control and Deletion
You are in control of the Extension at all times: • You can sign out of the Extension to stop it from accessing your GiraffyReach profile and resume. • You can disconnect your email at any time to immediately revoke the Extension's ability to read verification codes. • You can uninstall the Extension from Chrome at any time, which removes its local storage from your browser. • You can delete your GiraffyReach account to remove the underlying profile and resume data, subject to the retention terms in the main GiraffyReach Privacy Policy. To request deletion of any data or to ask a question about your information, email support@giraffyreach.com.
9. Security
Data moves between the Extension, GiraffyReach, and our email-connection provider over encrypted connections (HTTPS/TLS). Access to systems that hold your data is restricted and access-controlled. No method of transmission or storage is perfectly secure, but we take reasonable technical and organizational measures to protect your information, and we limit the Extension's footprint to only what it needs to help you apply.
10. No Remote Code
The Extension runs only the code that is reviewed and shipped in its published Chrome Web Store package. It does not download or execute remote scripts to drive its behavior. It communicates with GiraffyReach's servers and our authorized email-connection provider to fetch your profile, resume, and verification codes as described above — it does not fetch and run new executable logic at runtime.
11. Children's Privacy
The Extension is not directed to children under 16 and is intended for job seekers of working age. We do not knowingly collect information from children under 16. If you believe a child has used the Extension, contact support@giraffyreach.com and we will address it.
12. Changes to This Policy
We may update this Privacy Policy as the Extension evolves or as legal requirements change. When we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you. Your continued use of the Extension after an update takes effect constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or how the Extension handles your data, contact us: Email: support@giraffyreach.com GiraffyReach Minneapolis, Minnesota, United States
If anything about how the Auto-Apply extension handles your data is unclear, reach out — we will give you a straight answer.
support@giraffyreach.com