Privacy

Your data lives in this browser

There is no Job Copilot server and no account. Everything you add is stored in this browser's own database on this device. Nobody else can see it, including us.

That includes the AI spend meter in Settings: how many tokens each AI answer used, with the model and the kind of task. It is worked out and kept here, never sent anywhere.

It isn't backed up anywhere unless you use Backup and restore. Clearing this site's data deletes everything.

What is sent to Anthropic

AI features call Anthropic's API directly from your browser, with your own API key. Depending on what you do, that sends:

• Checking a job: the posting's text (or its link, see below). The verdict and match are then worked out by code in your browser from your Profile and preferences.
• Tailoring a resume: the posting, your experience, and the Profile details that go at the top of a resume (name, contact links, education).
• Importing your resume: the file you choose, so it can be turned into your experience.
• Drafting outreach: the job, the contact you entered, your Profile basics and your saved answers.

Work authorization, sponsorship and EEO answers are used only by code in your browser, never guessed by the AI. Anthropic handles API data under its own commercial terms and privacy policy.

What is sent to OpenAI (only if you add an OpenAI key)

OpenAI is optional. If you add an OpenAI key and choose OpenAI to write resumes and messages, then writing and revising a tailored resume, and drafting an outreach message, call OpenAI's API directly from your browser, with your key. That sends the job description, your experience, the current resume draft and any change you ask for. For an outreach draft it sends the job, the contact's name and role, your name, school and a few saved answers. Nothing else goes to OpenAI.

If OpenAI is out of credit, busy or unavailable and an Anthropic key is saved, that same request is sent to Anthropic once instead, and the screen says it was written with Claude.

Checking jobs, reading links and importing your resume always use Anthropic. Every resume OpenAI writes goes through the same checks in your browser, so nothing that isn't in your experience is added without your OK. OpenAI handles API data under its own terms and privacy policy.

Pasting a job link

Links to Greenhouse, Lever, Ashby and SmartRecruiters postings are read straight from your browser, from those companies' public job listing APIs (the request contains only the posting's address and no key). For any other link, Anthropic's servers open the page (their web fetch tool) and read it. This site never fetches it. LinkedIn, Indeed and Workday links are not read at all: you'll be asked to paste the description instead, as you will be for any page that can't be read.

Your API key

Your Anthropic key is stored in this browser, unencrypted, and sent only to Anthropic. Anyone using this browser profile could read it, so set a monthly spend limit and don't save it on a shared computer. "Forget my API keys" in Settings removes it.

An optional OpenAI key is stored the same way, in this browser only, and sent only to OpenAI. "Forget my API keys" removes both.

A backup file leaves the keys out unless you tick the box to include them.

What the host sees

The site is hosted on Vercel, which only serves its files. Like any web host it keeps normal request logs (such as IP address, browser and which page was loaded). None of your data is in those requests.

There are no analytics, no trackers, no ads and no cookies.

Your resume folder (optional)

In Chrome and Edge you can pick a folder for tailored resume files. The app can then read and write files only inside that folder, and you can revoke access in your browser's site settings.

The Chrome extension

If you connect the Chrome extension, your Profile, saved answers, your experience text, a list of your jobs (company, role and link) and the resume file for the job you are applying to are copied into the extension's own storage on this device, so it can fill application forms. They travel only between this site and the extension, never through the page. Your API keys are never sent to it. Free-text answers are drafted here in the app, and sent back to the form only after you approve them. The extension never submits a form for you and never runs on LinkedIn, Indeed or Jobright.

What the app never does

• It never submits a job application for you.
• It never scrapes or automates LinkedIn, Indeed or other job sites.
• It never sends a message for you. Outreach drafts are for you to review and send yourself.
• It never puts a skill, number, employer or date on a tailored resume that isn't in your experience, unless you tick it.