Jobbital
Back to Home

Privacy Policy

Last updated: 21 July 2026

Jobbital is operated by Kausora Technologies Limited. This policy describes the information Jobbital processes through the web app, Chrome extension, connected-agent/MCP integrations, and supporting APIs.

Information You Provide

Depending on the features you use, Jobbital processes:

  • account details, authentication information, preferences, and settings;
  • CVs, resumes, profile information, and generated or tailored CV drafts;
  • job searches, saved jobs, application records, notes, reminders, calendar events, and documents you attach to applications;
  • Career Profile and memory items you choose to store in the web app;
  • chat messages, tailoring discussions, interview-preparation content, and saved Interview Coach transcripts; and
  • support or contact messages you send to us.

Chrome Extension Data

The extension accesses an active tab only when you invoke a feature that needs page context. Depending on that action, it may process the page URL and title, visible text, structured job metadata, and visible screenshots.

  • A generic current-page read is text-only.
  • Structured job extraction may capture a screenshot as a fallback when page text is insufficient. The screenshot is sent for job-field extraction; it is not used by generic page-reading actions.
  • When the user starts Application Assist, the extension uses Chrome's debugger interface to capture full, unmasked screenshots of the visible application tab and to perform visual mouse, keyboard, typing, scrolling, and navigation actions proposed through GPT-5.4 Responses computer use. It does not extract an application-form schema or use DOM field setters for this workflow.
  • Before an activating action is returned to Chrome, a separate stateless AI visual risk check evaluates the screenshot and proposed action batch. It authorizes only clearly non-final ordinary form work; a final, authentication, account, upload, payment, sensitive/legal, destructive, or unclear decision blocks the whole activating batch.
  • Application Assist supplies a bounded context from the selected or default CV, profile, relevant read-only Career Profile/memory, and current job. It pauses rather than inventing a missing or ambiguous candidate fact.
  • The screenshots are not masked or redacted and can contain answers, personal information, and other content visible in the tab. They are sent through Jobbital's API to the configured AI provider. Do not start Application Assist on a page containing information you do not want processed in this way. Oversized lossless captures may be recaptured as a bounded JPEG of the same visible viewport before transfer.
  • Application Assist may click an initial Apply control and advance non-final Next or Continue steps. If that opens an applicant-tracking system on another origin in a new tab, the extension pauses for the user to review the new site before sharing and continuing from that page.
  • File upload/chooser steps, CAPTCHAs, login or account creation, passwords, one-time codes, payment details, government identifiers, and other authentication or secret-bearing steps remain manual boundaries.
  • Provider safety checks pause the run and continue only after the pending protected interaction is shown in the extension and confirmed for its bound run, sequence, action, and check set. Page content, model output, speech, and general chat confirmation cannot approve a safety check.
  • Application Assist stops before final Apply, Submit, Send, or an equivalent representation action. The user reviews the page and performs the final submission personally.
  • The extension may read relevant CV, application, job-search, and Career Profile/memory data from the user's Jobbital account. Extension memory access is read-only for this release; durable memory is managed in the web app.
  • Voice mode uses the microphone only after the user starts it. Ordinary speech uses a direct Azure OpenAI Realtime WebRTC session for native speech-to-speech conversation. Input transcription is an auxiliary chat record and does not gate spoken responses. Only Jobbital account, CV, application, page, search, generation, or mutation work is delegated to the shared Jobbital agent.

The extension stores authentication, chat/run state, CV preview payloads, temporary background Application Assist state (which can include a pending full screenshot and bounded candidate context), and voice transcripts in Chrome session storage when supported, so they are cleared when that browser session ends. It may retain limited local metadata such as the selected default CV, current saved-application context, saved tailored-CV identifiers, and theme. Preferences such as voice speed may use Chrome sync storage. Signing out clears account session and active workflow state. Legacy durable chat/auth/voice state is removed when migrated.

Connected Agents and MCP

If you create a connected-agent token, Jobbital stores a hash of the token, client name, granted scopes, expiry/revocation state, and last-use information. The secret is shown only when created. MCP tools can access only data permitted by those scopes, and tool calls create a bounded audit record. Audit records are designed not to duplicate full CV/contact data, memory content, application notes, interview transcripts, tailored CV payloads, signed URLs, or the client's confirmation text.

Connected-agent confirmation fields are supplied by the client. Jobbital records the attestation but cannot independently verify what an external client showed the user. Revoke a lost or untrusted token in Settings immediately.

How We Use Information

We use this information to authenticate users; provide search, ranking, tailoring, application tracking, calendar, interview, voice, and agent features; maintain security and rate limits; diagnose failures; provide support; and improve reliability and usability.

Jobbital does not sell personal information, use it for targeted advertising, or share it with recruiters or employers unless the user chooses to do so. Jobbital does not automatically submit employer applications.

AI Processing and Service Providers

When you invoke an AI feature, the content needed for that request may be sent to Jobbital's configured AI provider. This can include selected page/job text, CV content, full unmasked visible-tab screenshots and browser-action results during Application Assist, chat instructions, or voice audio, depending on the feature. Jobbital also relies on hosting, database/storage, authentication, payment, email, analytics, job-data, and calendar providers to operate the service. Those providers process data on Jobbital's behalf or under their own terms where the user connects them.

Do not place credentials, payment details, government identifiers, or other unnecessary sensitive information into chat messages, CV instructions, notes, or application fields sent to AI features.

Storage, Security, and Retention

Jobbital uses access controls and encryption in transit and uses the security features of its cloud providers for stored data. No online service can promise absolute security.

Account data is retained while needed to provide the service and meet legal, security, fraud-prevention, backup, and accounting obligations. Different data categories and service-provider backups can have different deletion periods. Session-scoped extension data follows the browser-session behavior described above. Revoked connected-agent tokens stop authorizing new requests; their bounded audit records may be retained for security and accountability.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information. Jobbital also provides in-product controls for preferences, memories, saved data, and connected-agent revocation. Contact us to make a privacy or account-deletion request. We may need to verify the request and may retain information where legally required.

Contact

Questions and privacy requests can be sent to contact@jobbital.com.

We may update this policy as the product or legal requirements change. Material changes will be communicated through an appropriate in-product or email notice.