Privacy Policy

Data Controller

SGL Tech LLC (USA) is responsible for the processing of the limited data described in this policy, collected through the Executive Job Hunter extension, the ejobhunter.com website, and our payment processor.

No Account System; Your Job-Search Data Stays on Your Device

Executive Job Hunter is local-first. Your job applications, tracked companies, profile and resume data, notes, contacts, and interview records are stored in your browser's local storage on your own device. There is no account system, no cloud sync of this data, and no server-side database of your job-search content. We cannot view, browse, or recover this data. Removing the extension (or clearing your browser profile) permanently deletes it.

The only exceptions to this local-only rule are the specific, user-triggered AI requests and the limited service data described in the sections below.

AI Features: What Is Sent and What We Keep

When you trigger an AI feature (for example, resume tailoring, company research, email drafting, or insights), the content needed for that specific action — such as your resume text, a job description, or a company name — is transmitted over an encrypted connection to our server (api.ejobhunter.com) and relayed to an AI provider to generate the response. Our primary AI provider is Anthropic; Google or OpenAI may be used as a fallback if the primary provider is unavailable.

We do not store or log the content of your AI requests or the AI responses. For each request, we record only usage metadata:

• A hashed device or email identifier (see “Credits and Subscription Data” below)
• The action type (for example, “resume tailor” or “company research”)
• Token counts and the computed cost of the request
• Whether the request succeeded or failed

We use this metadata solely for credit accounting, abuse prevention, and service reliability. AI usage metadata is deleted after 90 days.

AI providers process the transmitted content to generate the response, subject to their respective API terms. Under their current API terms, content submitted through these provider APIs is not used to train their models. We do not control provider policies and encourage you to review them.

AI features run only when you trigger them. Nothing is sent in the background, and job-search data that is not needed for the specific action you triggered stays on your device.

Credits and Subscription Data

To meter AI credits and verify subscriptions, we store hashed identifiers rather than plaintext identity wherever possible:

• Free-tier credit balances are keyed to a salted SHA-256 hash of a random device token generated by the extension.
• Paid-tier credit balances and AI usage records are keyed to a salted SHA-256 hash of your subscription email address — for AI and credit purposes, your email address is stored as a hash, not in plaintext.
• Subscription records needed to verify your purchase (status, plan, billing cycle, renewal date) are maintained from data provided by our payment processor.

Payment Processing

All payments are processed by Lemon Squeezy, our Merchant of Record, under its own privacy policy. SGL Tech LLC never receives:

• Credit card numbers
• Bank information
• CVV codes
• Full billing details

From Lemon Squeezy we receive the subscription metadata needed to verify entitlement, including the email address you used at checkout, transaction metadata, and subscription status.

Extension Service Check-In

The extension contacts our server approximately once per day to retrieve service messages (such as maintenance notices or feature announcements), feature flags, and your current AI credit balance. This check-in sends a hashed device identifier, the extension version, and your plan — plus, if you have saved one in Settings, your subscription email (used to look up your subscription and credit balance). The check-in contains no browsing history, no page content, and no job-search data.

Legacy Advanced Mode (Your Own API Keys)

Before version 4, AI features required users to supply their own AI provider API keys. This remains available as an optional legacy “Advanced” mode. In Advanced mode, your browser calls the AI provider directly and your AI requests do not pass through our servers. Your API keys are encrypted on your device (AES-256-GCM, with a key derived from your master password) and are never transmitted to us.

Chrome Extension Permissions

The extension's content scripts and host permissions are limited to three job sites: LinkedIn, Indeed, and Dice. It cannot read or modify any other website. On those three sites, the content scripts run solely to add the extension's buttons and form-fill assistance; they do not transmit page content or browsing activity to us.

Data We Collect

In summary, the only data we collect is:

• AI usage metadata (hashed identifier, action type, token counts, cost, success/failure) — deleted after 90 days
• Subscription and transaction metadata, including your checkout email address (via Lemon Squeezy)
• Daily check-in data (hashed device identifier, extension version, plan)
• Anonymous feature-usage counts (which extension features are used and how often, tied to the hashed device identifier — for example “jobs saved: 3”). These are names and numbers only: never the content of your job search, never job titles, company names, URLs, resumes, or anything you type
• Plan-change notice records (hashed device identifier, notice name, the date shown, extension version, and a timestamp — plus your hashed subscription email if you have one on file) — showing that important plan notices were displayed and acknowledged. Deleted after 2 years
• IP addresses in server logs (rate limiting, fraud prevention, and compliance)
• Basic technical analytics on the ejobhunter.com website (Google Analytics); the extension itself contains no third-party analytics trackers

How We Use Data

We use this limited data solely to:

• Verify subscription entitlement
• Meter AI credits and prevent abuse of the AI service
• Deliver service messages and feature updates, including offers relevant to how you use the product
• Show important plan-change notices once, and record that fair notice was given before a change to your plan
• Provide support
• Comply with tax and fraud prevention requirements
• Understand which features are used so we can improve the product and size our infrastructure
• Improve basic platform stability

Legal Bases (Global)

We process data under:

• Contract performance
• Legitimate business interest
• Legal compliance
• User consent where required

Data Sharing

Data may be shared with:

• AI providers (Anthropic; Google or OpenAI as fallback) — receive the content of your AI requests, only when you trigger an AI feature, in order to generate the response, subject to their API terms
• Lemon Squeezy, our payment processor (transaction processing)
• Hosting and analytics providers
• Legal authorities when required

We do not sell or trade personal data.

International Transfers

Data may be transmitted or processed in the United States or other jurisdictions with appropriate safeguards (standard contractual clauses, encryption).

Retention

AI usage metadata and anonymous feature-usage counts are deleted after 90 days. Plan-change notice records are deleted after 2 years; they exist to show that fair warning was given before a change to your plan, and consist only of names, dates, versions, and hashed identifiers. These deletions run automatically on a schedule, and we keep a dated log of each purge so we can demonstrate the policy is being upheld. Subscription and transaction metadata is retained only as long as necessary for compliance, fraud prevention, and subscription verification. Your job-search content is stored only on your device, so there is nothing for us to retain or delete on our servers; you control it directly.

User Rights (GDPR, CCPA, Global)

Depending on your region, you may have rights to:

• Access your data
• Correct or delete metadata
• Restrict processing
• Request portability
• Object to processing
• Opt out of marketing

Because your job-search data lives in your own browser, you can access, export, or delete it yourself at any time from the extension. For server-side metadata (AI usage, subscription records), contact us at the address below.

Children under 13 are not permitted to use the Platform.

Security

We use reasonable administrative and technical safeguards. No system is 100% secure.

Changes

We may update this Policy. Continued use constitutes acceptance.

Contact

support@ejobhunter.com