Privacy policy

1Job is a Chrome extension that keeps a private record of the jobs you apply for. Using it requires a 1Job account (sign-in with Google or with a link sent to your email): the extension records only while you are signed in, and what it records is kept encrypted on your computer and synced to your 1Job account on the 1Job server.

What 1Job records

When you apply on a supported job site (or press “Record this page”), 1Job saves:

the job posting: title, company, location, link and the posting text;
the answers you typed into the application form;
the PDF resume you uploaded (the exact file), and which resume you chose;
dates and the status you set (applied, interview, offer, and so on).

What 1Job never records

Passwords, card numbers, social security or national ID numbers, passport numbers, one-time codes and CAPTCHA tokens are skipped, as are any other fields that look sensitive. Resume files are kept only if they are real PDFs. 1Job never fills in or submits forms for you, and it does not read pages in the background or browse for you.

Your account

To record applications you sign in with Google or with a sign-in link sent to your email. From Google we receive only your account id, email address and name, to identify your account; 1Job does not get access to your Gmail, Drive or anything else. If you choose “Email me a sign-in link”, we email a single-use link (valid 15 minutes) to the address you typed; clicking it signs you in. For each such request we keep the address, when it was made, a shortened IP address (the last part removed) and the browser type, for up to a day after it expires, to stop abuse. If you use both methods with the same verified email address, they open the same account. Until you sign in, and after you sign out, the extension records nothing. We also keep when the account was created, when you last signed in or synced, your plan (Free or Pro) and, if you pressed “Notify me” on the Plans page, that you did and when. This is stored on your account and used only to tell you when Pro launches; you can undo it any time with “Undo” on the same page, and deleting your account removes it.

Emails we send

Account emails. The sign-in link you ask for and, once, a welcome email when your account is created. These are part of the service and have no unsubscribe link. We keep a log of each email we send (address, which email, when, and whether it was delivered to our email provider) to answer support questions; the log is deleted after 6 months.
Product news (optional). Only if you tick “Send me occasional product news” when you sign in by email, or turn it on in Settings → Account. We record your choice with the time and where you made it. You can stop at any time with the unsubscribe link in every newsletter or the switch in Settings → Account. If you unsubscribe through the link, the switch in 1Job may still show your earlier choice, but you will not get product news.
Our email provider. Emails are sent by Resend (Resend, Inc.), which processes your email address and the email's content on our behalf only to deliver it. If you opted in to product news, your email address (and first name, if we have it) is kept in our mailing list at Resend, which also handles unsubscribes and bounces. Deleting your account removes you from that list.

Where data lives

On your device, encrypted. Records are stored in the extension's local browser storage, encrypted with a key that opens only with your signed-in 1Job account: the 1Job server keeps a random unlock key for your account (itself encrypted with keys managed in Google Cloud KMS) and gives it only to the 1Job extension while you are signed in. There is no separate passphrase. 1Job locks when you sign out, when the browser closes, or when your session ends (for example after you sign that device out); while locked it keeps recording but cannot show your data. The extension's own private key never leaves your device. If you forget a passphrase set in an earlier version, 1Job can reset this device and restore what was synced to your account.
Where you're signed in. For each device where you sign in, the server keeps a session record: which 1Job app (extension or web dashboard), a label from your browser such as “Chrome on macOS”, and when it was created and last used. No IP address or location is stored. You can see these sessions and sign any of them out in the web dashboard's Settings. A session you do not use for 90 days ends by itself.
Synced to your 1Job account, automatically. While you are signed in, every application you save or change (the posting, your answers, status, notes, tags, the names your resumes were sent under) and every resume PDF you store is sent over HTTPS to the 1Job server; deletions are sent too. Your device also fetches changes made elsewhere (another computer, a connected AI app). Your application records are stored in the server's MongoDB database, which the database provider encrypts at rest. Your resumes are stored in a private Google Cloud Storage bucket, encrypted with keys managed in Google Cloud KMS, and can be fetched only through the server by your signed-in account. Nothing is public. 1Job (the operator of the server) can decrypt your records and resumes to provide the service and the features you use; every access to a resume is logged. We will ask for your consent before using them for anything new. If several people store an identical file, it is stored once, but each person keeps their own access and file names, and nobody can read a file they did not upload themselves. While the vault on your computer is locked, sync waits; the local vault's private key is never sent.
Plans and limits. The Free plan holds up to 100 applications and 5 resumes per account. The server counts what your account stores to apply these limits. Over a limit, new items stay on your computer (or as an unsaved draft) and are not sent; nothing is deleted. Pro (unlimited) is not on sale yet: nothing can be bought, and we hold no card or bank details.
No tracking. The 1Job extension has no analytics, advertising or tracking, and sends your data to no one but the 1Job server (and, for the emails above, our email provider). (The 1job.app website has optional analytics; see “Website analytics” below.) We do not sell or share your data, and use it for nothing but providing the service and the features you use.

Connected AI apps (optional). If you connect an AI app such as Claude, ChatGPT or Cursor to your 1Job account (Settings → Connected apps, or “Add custom connector” in the app), that app can read the applications synced to your account: postings, your answers, resume file names, statuses, notes and reminders, and, if you allow it, change statuses and add notes or reminders. It never receives your resume files or anything that is only on your device. Data returned to a connected app is sent to that app and is then handled under that app's own privacy policy, not this one. You approve each app on a consent page that shows what it can do; you can disconnect apps and revoke access tokens at any time in Settings → Connected apps. We store only hashes of access tokens, plus the app's name and when it was last used.

Support and administration. A small number of 1Job staff can see account details in an internal admin tool to provide support and keep the service safe: your email address, name, plan, when the account was created and last active, how many applications and resumes it holds, how you sign in and your newsletter choice. They can change your plan, disable an account that breaks the rules, resend the welcome email or delete an account at your request. The admin tool does not show your application contents or resume files. Every change made there is logged with who made it and when.

Website analytics

The 1job.app website (not the extension) can use Google Analytics 4, but only if you click “Accept analytics” on the banner. Until then, nothing from Google is loaded and no analytics cookies are set. If you accept, Google Analytics sets cookies and measures the pages you visit, your approximate location (from your IP address, which is not stored in full) and your device and browser type. We use this only to see which pages help people. Advertising features, Google signals and ad personalization are turned off, and we do not sell or share this data. Analytics data is kept for 2 months. You can change your mind at any time with the “Cookie settings” link in the footer of any page; declining removes the analytics cookies. The extension itself contains no Google Analytics.

Deleting your data

Deleting an application in the extension also deletes it from the server at the next sync. Removing the extension erases local storage (your account and synced data stay until you delete the account).
Settings → Account → “Delete account” removes everything stored on the server, including your resume files (a stored file is deleted once no account uses it), and every connected app, access token and reminder, and removes you from the product news list at our email provider. The log of emails sent to you is deleted after 6 months and records of sign-in requests a day after they expire. Data on your computer is not touched. You can also ask by email at the address above.

Where your data is hosted

The 1Job server, your stored resume files and the keys that encrypt them run in Google Cloud's Belgium region (europe-west1), in the European Union.

Services we use

We use these providers to run 1Job. Each one handles only what it needs for its task:

Google Cloud: runs the 1Job server, stores encrypted resume files and their encryption keys. Google also handles “Sign in with Google”.
MongoDB Atlas (MongoDB, Inc.): the database that holds your account and application records.
Resend (Resend, Inc., United States): sends sign-in links and emails.
Cloudflare (Cloudflare, Inc.): delivers the 1job.app websites.
Google Analytics (Google): website visit statistics, only if you accept analytics on 1job.app.

Some of these companies are based in the United States. Where your data leaves the European Economic Area, it is protected by the safeguards these providers offer, such as the European Commission's Standard Contractual Clauses.

Why we use your data

To provide the service you asked for: your account, recording, syncing and storing your applications and resumes, and sign-in emails.
To keep 1Job safe: limiting sign-in requests, logging access to resumes, preventing abuse.
With your consent: product news emails and website analytics. You can withdraw consent at any time, as described above; this does not affect anything done before.

Your rights

If you live in the European Union, the European Economic Area or the United Kingdom, you have the right to:

see the data we hold about you and get a copy of it;
correct data that is wrong;
have your data deleted;
restrict or object to how we use it;
take your data with you in a common format;
complain to your local data protection authority.

Most of this you can do yourself: the extension shows and exports everything it holds, and Settings → Account → “Delete account” removes everything from our server. For anything else, email [email protected]. We reply within one month. Users elsewhere can make the same requests.

Permissions

The extension asks for the minimum permissions it needs; each one is explained in the store listing. Broad site access is optional and requested only when you turn a feature on.

Children

1Job is not directed at children under 16.

Changes

If this policy changes, the new date appears above and the extension's release notes say so. Material changes to how data is used will be announced in the extension before they apply.