Privacy Policy
This policy covers all EvaSoft products and websites. Today that is the Chrome extension Job Application Tracker (“the extension”). EvaSoft is run by an individual developer based in Andorra (“we”, “us”). Questions: hello@evasoft.pro.
The short version: your data lives in your browser. If you turn on sync, it is end-to-end encrypted and we cannot read it. We do not sell data, show ads or use your content to train models.
1. Data stored in your browser
Everything you add to the extension — saved jobs, job descriptions, statuses, notes, contacts, reminders, resumes and settings — is stored locally in your browser’s extension storage. It stays on your device unless you turn on sync or use an AI feature (below). Uninstalling the extension deletes the local data; export it to CSV first if you want to keep it.
2. Account and sign-in
An account is needed only for sync and paid features. It is identified by your e-mail address. To sign in on a new device we send a one-time code to that address; the e-mails are delivered by Resend. The code only proves you own the address — it does not unlock your data.
3. Cloud sync — end-to-end encrypted
- Your data is encrypted on your device before upload. Our server stores only ciphertext. We cannot read it, and neither can anyone who gains access to our server.
- The key stays with you: a recovery key (a link you save yourself — it never passes through us), an optional password, and an optional copy of the key in Chrome sync. If you choose the Chrome sync option, anyone with access to your Chrome account can also open your synced data.
- If you lose both your password and your recovery key, nobody — including us — can recover the cloud copy. Your local data and CSV exports are not affected.
- Besides ciphertext, the server keeps what it needs to run the service: your e-mail, license status, AI action counters and technical timestamps.
- The cloud copy is kept until you delete it. The “Delete cloud copy” button in the extension settings removes it from our server immediately.
4. AI features and resume parsing
When you use an AI action or upload a resume for parsing, the relevant text (for example a job description and your resume) is sent through our server to OpenAI to produce the result. We do not store or log this text; the result is returned to your browser. Under OpenAI’s API terms, requests may be retained for up to 30 days for abuse monitoring and are not used to train their models. These features run only when you start them.
5. Usage analytics
The extension sends anonymous usage statistics to our own self-hosted PostHog instance — events such as “job saved”, “view opened” or “limit reached”, plus the extension version and interface language. They never include job descriptions, company names, job titles, page URLs, notes, contacts, resumes, e-mail addresses or keys. IP addresses are discarded. No session recordings, no third-party trackers. You can turn this off at any time in the extension settings (“Share anonymous usage statistics”).
6. Payments
Our order process is conducted by our online reseller Paddle.com Market Ltd (“Paddle”), which is the Merchant of Record for all orders. Paddle collects and processes your payment details; we never see your card. We receive your e-mail address, name and country as provided at checkout, the order details and your license key, and use them to activate and support your purchase. Paddle acts as an independent controller of the data it collects under its own privacy policy.
7. Service providers
- Cloudflare — hosting for our websites and sync server.
- OpenAI — AI features and resume parsing (section 4).
- Resend — sign-in code e-mails (section 2).
- Paddle — payments (Merchant of Record) (section 6).
- Google Fonts — web fonts on evasoft.pro. Our websites set no cookies and use no trackers.
We do not sell or rent personal data, and we share it only with these providers to run the service, or when the law requires it.
8. Your rights
You can access, correct, export or delete your data. Most of it is under your control already: local data in the extension, CSV export, and the “Delete cloud copy” button. To delete your account and everything we hold about you, or for any other request, e-mail hello@evasoft.pro — we reply within 30 days. Purchase records are kept by Paddle as required for tax and accounting. If you are in the EU or UK you may also complain to your local data protection authority.
9. Children
Our products are not directed to children under 16, and we do not knowingly collect their data.
10. Changes
If this policy changes, we will update it here and change the effective date. Significant changes will be announced in the extension.