1. Who operates OfferPilots
OfferPilots is an independent product built and operated by its founder, based in Malaysia. It is not currently operated through a registered company. Privacy questions and data requests can be sent to [email protected].
2. Information you provide
- Account information: email address, password hash, sign-in provider identifiers, session and extension authentication tokens.
- Career profile: contact details, summary, experience, evidence bullets, education, skills, projects, certifications, links, and optional application answers.
- Job context: posting text, source URL and site, company, role, location, requirements, keywords, and sponsorship language.
- Application work: generated résumés, cover letters, edits, templates, source evidence, and interview preparation.
- Support communications: information you include when asking for help, export, correction, or deletion.
Optional application answers can include sensitive information. They are separated from career evidence and are not required for profile completeness.
3. How information is used
- Authenticate your account and connect the extension to it.
- Import, store, display, export, restore, and edit the profile you control.
- Parse jobs, calculate current-profile match information, and identify posting-based sponsorship context.
- Generate and edit application documents and interview guidance you request.
- Run provenance checks designed to block unsupported claims before output is saved as ready.
- Protect the service, enforce usage limits, diagnose errors, and answer support requests.
OfferPilots does not use your application data to make employment decisions on behalf of an employer.
4. Service providers and information shared
Information is shared only as needed for the selected operation:
- AI processing. Google's Gemini API (United States) provides the AI models behind imports, parsing, generation, preparation, and grounded edits. It receives the minimum relevant profile, job, or document context for the operation you request. Google's paid Gemini API terms state that customer data is not used to train Google's models. If we change or add an AI provider, this list will be updated before that provider handles user data.
- Google sign-in. If you choose Google authentication, Google supplies the identity data needed to sign you in. OfferPilots does not receive your Google password.
- Hosting and database infrastructure. The service runs on Amazon Web Services in the Singapore region, which stores and processes account and product records, including résumé and profile data.
- Email delivery. Account emails (such as password reset) are sent through a transactional email provider acting as our processor. The deployed provider will be named here when email sending is enabled; it receives your email address and the message content, nothing more.
- Payments (when paid plans go live). If you purchase a paid plan, payment is processed by Stripe. OfferPilots never sees or stores your full card number; Stripe handles all card data under its own terms.
OfferPilots does not sell personal information, rent résumé data, or share application content with advertisers or employers. We use no advertising or behavioral-analytics trackers (no Google Analytics, no pixels).
5. Browser extension permissions and behavior
The browser extension is designed around explicit user actions:
- It automatically loads only on supported job sites and the OfferPilots web origin; other pages require the browser's active-tab gesture.
- It reads and sends posting text only when you choose to capture that page.
- It imports LinkedIn information only when you request an import while viewing your own profile.
- It does not collect general browsing history or crawl pages in the background.
- Its storage permission holds authentication and local extension state; authentication tokens are not exposed to websites you visit.
6. Storage and retention
Account, profile, captured job, document, preparation, entitlement, and tour records are stored in the service database. Records are retained while your account remains active and as reasonably needed to operate, secure, and comply with legal obligations.
Clearing a profile removes the stored master profile but is not the same as deleting the complete account or its other records. Deletion from database backups follows the normal backup rotation cycle after the primary records are removed.
Operational logs record request metadata such as IP address, browser user agent, requested URLs, timestamps, and error details. Application logs are designed not to contain résumé or document content. Logs are retained for up to 90 days and then discarded.
7. Access, correction, export, and deletion
- Edit individual profile sections and application work in the product.
- Export the master profile as a backup file.
- Clear the master profile from the Profile workspace.
- Ask for access, correction, or a complete account export through support.
To delete your full account and associated service records, email [email protected] from the account address. Verified deletion requests are completed within 14 days. Self-service full-account deletion is not currently available.
8. Security
OfferPilots uses password hashing, authenticated sessions, user-scoped database access, CSRF protection for web forms, narrow extension permissions, environment-managed secrets, and provenance validation. No internet service can promise absolute security. If we ever discover a breach affecting your personal data, we will notify affected users by email without undue delay, consistent with the notification requirements of applicable law. Report a suspected account or data issue to [email protected].
9. Minimum age
OfferPilots is intended for people aged 18 or older. Do not create an account if you are under 18. If we learn that an ineligible person supplied personal information, we will take reasonable steps to remove it.
10. International processing
OfferPilots serves job seekers globally. Your data is stored on AWS in Singapore and AI processing is performed by Google in the United States, which for most users means processing outside your home country; by using the service you consent to these transfers. If you are in Malaysia, you have the rights provided by the Personal Data Protection Act 2010; in the EU/UK, the rights provided by GDPR; in California, the rights provided by the CCPA. To exercise any of these rights, use the tools described in section 7 or email us.
11. Changes to this policy
Material changes will be posted here with a revised effective date. Where required, OfferPilots will provide additional notice before a change takes effect.
12. Contact
Contact [email protected] with privacy or data-rights questions, requests, or complaints. We read and answer every message ourselves.