Privacy Policy (Rejectless Browser Extension)

Effective date: May 20, 2026

This Privacy Policy describes how the Rejectless browser extension ("Rejectless," "we," "us," "our") collects, uses, stores, and shares information when you use it. By installing and using the extension, you agree to the practices described below. If you have any questions about this Policy, contact us at support@rejectless.app.

1) About Rejectless

Rejectless is a browser extension that lets you capture ("snipe") job postings from supported job boards and save them to your Rejectless workspace so you can track the jobs you have applied to. The extension works together with the Rejectless web application at https://rejectless.app.

This Policy covers only the Rejectless browser extension. Use of the Rejectless website and account is also covered by the main privacy policy published on rejectless.app.

2) Information We Collect

A. Information you provide

Email address. When you sign in through the extension, you provide your email address. We send you a one-time password (OTP) to verify it. The extension does not collect your name, phone number, address, payment information, or any other profile details. Account profile information is only collected through the Rejectless website, never the extension.

B. Information captured when you snipe a job

When you explicitly click the Rejectless toolbar icon or the in-page "Snipe" button on a supported job board (currently LinkedIn, Indeed, Glassdoor, ZipRecruiter, and Monster), the extension reads publicly visible job posting data from that page and sends it to your Rejectless workspace. The data captured is limited to:

  • Job title
  • Company name
  • Location
  • Salary (if listed)
  • Job description
  • Other public job posting metadata visible on the page (for example, posting URL and posted date)

The extension does not capture browsing history, page contents from sites you have not snipped, passwords, form inputs, financial information, health information, personal communications, or any data unrelated to the specific job posting you snipe.

C. Information stored locally on your device

The extension uses chrome.storage.local to store the following on your own device:

  • A bearer token issued by the Rejectless backend after OTP verification, used to authenticate API requests
  • Your Rejectless workspace ID, used to deep-link you back to your workspace
  • The email address pending OTP verification, so the sign-in flow can resume if the popup closes before you complete it
  • An install timestamp

This local data stays on your device. It is cleared when you sign out of the extension or uninstall it.

D. Information collected automatically

When the extension makes requests to the Rejectless backend, our hosting provider may log standard request metadata such as IP address, user agent, and timestamps for security, abuse prevention, and operational reliability. This information is not used to build advertising profiles or to track you across the web.

3) How We Use Information

We use the information above only to:

  • Authenticate you and keep you signed in
  • Save captured job postings to your workspace
  • Operate, maintain, secure, and improve the Rejectless service
  • Respond to support requests you send us

We do NOT:

  • Sell your personal information
  • Share your data with advertisers or data brokers
  • Use your data for advertising or marketing profiling
  • Use your data to train third-party AI or machine learning models
  • Transfer your data to third parties for purposes unrelated to operating Rejectless

4) How We Share Information

We share information only with the following sub-processor, strictly to operate the service:

  • Vercel Inc. hosts the Rejectless backend and database

We may also disclose information when required by law, such as in response to a valid subpoena, court order, or other legal process, or when necessary to protect the rights, safety, or property of Rejectless, our users, or the public.

5) Where Your Data Is Stored

The Rejectless backend is hosted on Vercel, which operates infrastructure in multiple regions including the United States. By using Rejectless, you understand that your data may be processed in countries other than your own.

6) Data Retention and Deletion

  • Captured job postings are retained in your Rejectless workspace until you delete them. You can delete individual snipes, or your entire account and all associated data, at any time from the Rejectless website.
  • Authentication tokens are removed when you sign out of the extension, uninstall the extension, or when the token expires.
  • Account email is retained for as long as your account exists. When you delete your account, your email is removed from our active systems. Routine backups may retain it for a short additional period before being overwritten in the normal backup cycle.

To request manual deletion or to ask questions about your data, email support@rejectless.app.

7) Your Rights

Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, delete, or export your information, and to object to or restrict certain processing. You can exercise most of these rights directly from your Rejectless account. For anything you cannot do yourself, contact support@rejectless.app and we will respond within a reasonable timeframe.

8) Security

We take reasonable measures to protect your information, including:

  • HTTPS for all communication between the extension and our backend
  • Storing authentication tokens locally on your device rather than re-transmitting credentials
  • Limiting data collection to what is necessary to operate the service
  • Restricting access to production systems to authorized personnel

No method of internet transmission or electronic storage is 100% secure, but we work to protect your data using industry-standard practices.

9) Children's Privacy

Rejectless is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us at support@rejectless.app and we will delete it.

10) Permissions Used by the Extension

For transparency, here is why the extension requests each Chrome permission:

  • storage: to store your authentication token, workspace ID, and pending sign-in email locally on your own device.
  • activeTab: to read the job posting from the tab you explicitly snipe. The extension only reads a page when you invoke it by clicking the toolbar icon or the in-page "Snipe" button, and only reads that single tab.
  • host permissions (https://rejectless.app/*, the Vercel preview deployment, and http://localhost:3000/* for development): to make authenticated API requests to the Rejectless backend. The extension does not request host permissions for any job-board domain (LinkedIn, Indeed, Glassdoor, ZipRecruiter, Monster). Those sites are accessed only through the declared content scripts and activeTab when you snipe a posting.

11) Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page. If we make material changes, we will provide notice through the extension, by email to your account email, or on the Rejectless website prior to the change taking effect.

12) Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

Email: support@rejectless.app

Website: https://rejectless.app

Last updated: May 20, 2026 | Version: 1.0