PrismCV Chrome Extension Privacy Policy

What the extension does

The PrismCV Chrome extension helps job seekers autofill job applications, score resumes against specific job postings, and automatically log applications they submit. It runs only on the job board and applicant tracking system (ATS) domains listed in the manifest.json file shipped with the extension.

What data is collected

The extension sends the following data to the PrismCV backend (api.prismcv.com):

• Authentication token: Stored locally in your browser via chrome.storage.local. Created by you in the PrismCV web app and pasted into the extension's options page. Never synced to PrismCV servers from the extension.
• Scraped job data:Title, company name, job description, location, and salary range from the job detail pages you view on LinkedIn, Indeed, Glassdoor, or hiring.cafe. Sent to PrismCV only when you explicitly click "Save Job" or "Check ATS Score" in the extension overlay.
• Resume content: When you upload a resume for profile bank seeding, the file is sent to PrismCV, parsed, then the extracted entries are stored in your profile bank. The original file is not retained after parsing.
• Profile bank data: Retrieved from PrismCV to power autofill. Cached locally in your browser for 24 hours to reduce round trips.
• Application metadata: When the extension detects that you submitted an application (via URL pattern or page text), it logs the job title, company name, and URL to your PrismCV application tracker. No form field values are sent.
• Telemetry: Aggregate counts (fields detected, fields filled, ATS system, duration) for autofill and auto-log events. Used to monitor feature health. Contains no form field values, no resume text, and no personally identifying information beyond your PrismCV user ID.

What data is NOT collected

• Browsing history outside of the domains listed in manifest host permissions.
• Form field values from applications you submit. Autofill reads from your profile bank to form fields; no form values are sent back to PrismCV.
• Passwords, authentication cookies, or session tokens from other sites.
• Keystrokes, mouse movements, or screen recordings.
• Contact data from your device (phone contacts, browser-saved addresses).
• EEO (equal employment opportunity) fields such as race, gender, veteran status, or disability status, unless you have explicitly entered them in the PrismCV web app.

Third parties

• Anthropic:Resume content and job descriptions are sent to Anthropic's API for AI-powered resume tailoring and semantic matching. Anthropic is contractually prohibited from retaining or training on PrismCV user data.
• No advertising networks, no analytics trackers, no social pixels. The extension does not load third-party scripts into job board pages.

Data retention and deletion

Resume uploads are retained only long enough to parse them into your profile bank, then discarded. Profile bank entries, saved jobs, and application tracker entries are retained until you delete them in the PrismCV web app or close your account. Deleting your PrismCV account removes all extension-collected data within 7 days.

Your choices

• Disable any extension feature at any time by revoking the relevant feature flag via your PrismCV account settings.
• Uninstall the extension at any time via Chrome's extensions page.
• Export or delete your profile bank, saved jobs, and applications via the PrismCV web app at any time.

Contact

Questions or requests: privacy@prismcv.com.