Career Orchestrator Chrome Extension — Privacy Policy

Who we are

The Career Orchestrator browser extension is operated by Growthify Ltd (trading as GrowthXtra) ("we", "us"). This policy explains what data the extension processes and your rights under the UK GDPR and Data Protection Act 2018. For questions or to exercise your rights, contact privacy@careerorch.com.

What the extension does

On supported job boards (LinkedIn, Indeed, Glassdoor, ZipRecruiter) the extension reads the job posting you are viewing — title, company, location, description, salary, and the page URL — to request a Ghost Job Detector score and, optionally, to save the job to your Career Orchestrator pipeline.

Assisted Apply is separate, and it only ever runs when you ask for it. When you open the extension on an application form and press the button, it reads that form's questions, fills in answers from the details you have saved in your account, and then watches that one page to record whether the application was actually submitted. It does this on the job boards above, on the applicant-tracking systems listed under Permissions, and — for the single page you invoked it on — on any other secure (https) site. It never runs on a page by itself, and it does not run on Career Orchestrator's own site.

Data we process

• Job posting content (title, company, location, description, salary, URL) of the page you are viewing.
• Your authentication token, to associate scores and saved jobs with your account.
• Basic interaction events (job viewed, score requested, saved) to operate and improve the service.
• When you use Assisted Apply: the application form's questions (their wording, type and answer options), the answers you give them, a record of which fields we filled and which you completed yourself, the page's address and job title, and whether the submission was confirmed. Your saved profile details are sent to the page in order to fill it in.
• Outreach messages you choose to send to the extension from your dashboard, stored in your browser so they can be pasted into LinkedIn.

The extension does not track your general browsing and has no access to your browsing history. On the supported job boards it reads only active job postings. Anywhere else, it reads a page only at the moment you invoke Assisted Apply on it, only that page, and only that form.

Sensitive answers are not collected. Where an application asks a question that would reveal special category data under Article 9 — health or disability, ethnicity, religion, sexual orientation, trade union membership — or asks for identifiers such as a national insurance or social security number, your answer is not sent from your browser and is not stored. We refuse it a second time on arrival, so the two checks are independent.

Lawful basis

We process this data to perform the service you request (Article 6(1)(b), performance of a contract) and for our legitimate interest in operating and improving ghost-job detection (Article 6(1)(f)).

Sharing & retention

Job content is sent to our backend and to our AI provider (Google Gemini) solely to produce a score; it is not sold or used for advertising. We retain account-linked scores and saved jobs for as long as your account is active. You can delete saved jobs at any time from your dashboard.

Assisted Apply data is not sent to any AI provider. Form questions, your answers and the record of each attempt go to our backend only. Your answers are kept so that the next application asking the same question can be filled in for you — they are held against your account until you delete them, and they are removed with your account. Records of submission attempts are retained as the evidence that an application was made in your name. Both are covered by the access, export and erasure rights below.

Outreach text sent to the extension stays in your browser's local storage, is never sent anywhere by the extension, and is cleared when you log out or when a different account signs in.

Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Email privacy@careerorch.com and we will respond within one month. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

Permissions

At install the extension is granted access to the supported job boards (LinkedIn, Indeed, Glassdoor and ZipRecruiter job pages) and to Career Orchestrator's own site and API, plus local storage for your session. It does not request access to all websites.

For Assisted Apply it can additionally ask — at the moment you use it, and only with your approval — for access to the applicant-tracking systems it supports: Greenhouse, Lever, Ashby, Workable, SmartRecruiters, Workday, iCIMS and ApplyToJob. You can decline, and you can withdraw these at any time in Chrome's extension settings.

On any other secure site, pressing the Assisted Apply button uses Chrome's activeTab permission, which grants access to that one tab, for that one action. Chrome keeps that access while the tab stays on the same origin (the same domain, protocol and port), including as you move between its pages, and withdraws it as soon as the tab reaches a different origin or you close it. It is never granted in the background, and it leaves the extension no way to return to that site later.