This page describes exactly what the HiredByMorning — AI Resume Assistant Chrome extension reads, sends, and stores. It supplements our main Privacy Policy, which also applies to all data the extension sends to your HiredByMorning account.
1. What the Extension Reads
- Job posting content — when you are on a job listing page (LinkedIn, Naukri, Indeed, Glassdoor, Greenhouse, Lever, Workday, company career sites, and similar), the extension reads the job title, company name, description text, and page URL so it can score the match against your resume and generate a tailored version.
- Application form fields — when you use autofill or Smart Fill on a job application page, the extension reads the form's field labels and types (e.g. "Phone number", "Highest education") so it can map them to your saved profile.
Job detection logic runs locally on the page. The extension does not read pages that are not job postings or job application forms.
2. What the Extension Sends to Our Servers
All communication goes exclusively to hiredbymorning.com over HTTPS:
- Job description text, job title, company, and the job page URL — to generate match scores, tailored resumes, and to record the application in your tracker.
- Form field descriptors (labels/types, not the page itself) — so our API can return the matching values from your saved profile for Smart Fill.
- Your authentication token — to identify your account on each request.
Nothing is ever sent to any third-party server by the extension.
3. What the Extension Stores Locally
The extension stores your authentication token and preferences in Chrome's extension storage (chrome.storage.local) on your device. Signing out clears the token; uninstalling the extension removes all locally stored data.
4. What the Extension Does NOT Do
- It does not collect or transmit your browsing history.
- It does not log keystrokes.
- It does not read pages unrelated to job postings or job application forms.
- It does not contain ads, analytics trackers, or third-party scripts.
- It does not sell or share your data with anyone.
5. Permissions Explained
- storage — keep you signed in between browser sessions.
- tabs / activeTab — detect when you open a job posting so the assistant can offer to help.
- downloads — save your tailored resume PDF to your computer.
- Broad site access — job applications happen on thousands of employer career sites and applicant-tracking domains that cannot be listed in advance, so the extension requests access to all sites in order to detect job postings and fill application forms wherever you apply. Its content logic activates only on pages it identifies as job postings or application forms; other pages are ignored.
6. Sign-In
The extension signs you in through your HiredByMorning account (including Google sign-in) on hiredbymorning.com. Authentication happens on our website — the extension never sees your password or Google credentials, only the resulting session token.
7. Data Deletion
Everything the extension sends is stored in your HiredByMorning account and is deleted when you delete your account from your profile settings (see the Privacy Policy, section 8–9). Local extension data is removed by signing out or uninstalling.