Privacy Policy

Overview

BoltApply is a Chrome extension and web application that helps you autofill job application forms. We are committed to protecting your privacy. This policy explains what data we collect, how it is stored, and how it is used.

Data We Collect

BoltApply collects only the data you explicitly provide:

• Profile data — your name, email, phone, address, work experience, education, and skills that you enter on the Profile page.
• Resume text — extracted from PDFs you upload, used locally for autofill and AI answer generation.
• Cover letters — templates you write and store for reuse.
• Job applications — jobs you save or track in the Job Tracker.
• API keys — optional OpenAI or Claude API keys you provide for AI features. Stored locally only.

Where Your Data Is Stored

Your data stays on your device. All profile information, resume text, and job tracking data is stored in Chrome's local storage (chrome.storage.local) on your machine. We do not upload your personal data to any BoltApply server.

If you choose to sign in with Google and enable Google Sheets sync, your job application rows are written to your own Google Sheet using your own Google account credentials. BoltApply does not store or access your Google Sheet data on our servers.

Third-Party Services

• OpenAI / Anthropic (Claude) — if you enable AI answer generation and provide your own API key, your resume text and job questions are sent directly from your browser to OpenAI or Anthropic's API. This is governed by their respective privacy policies. BoltApply does not proxy or store these requests.
• Google OAuth & Sheets — if you sign in with Google, we receive your Google account email and an access token to write rows to your chosen Google Sheet. We do not store your Google access token on our servers beyond your browser session.
• Supabase — used for authentication only (storing your login session). We do not store profile or resume data in Supabase.

Permissions Used by the Extension

• storage — to save your profile, resume, and settings locally on your device.
• activeTab — to read form fields on the job application page you are currently viewing, so they can be filled in.
• scripting — to inject the autofill widget into job application pages.
• host_permissions (<all_urls>) — job applications exist across thousands of different company domains. This permission allows BoltApply to operate on any job site without requiring you to manually allowlist each one.

Data We Do NOT Collect

• We do not track your browsing history.
• We do not sell your data to any third party.
• We do not display ads.
• We do not send your profile data to BoltApply servers.
• We do not access pages you visit unless you have opened a job application form.

Google API User Data Policy

BoltApply's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of BoltApply after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this privacy policy, please contact us at rutvik.pansare@gmail.com.