JobOrbit AutoFill privacy

JobOrbit AutoFill has one purpose: help an authenticated recruiter fill an employer application using a selected, assigned client’s existing JobOrbit information, and track that application.

Information used

When you connect and select a client, AutoFill requests their current application profile, authorized saved answers, and selected private documents. When you choose Auto-Fill, those answers are entered into the employer’s form. Employer pages may upload a file immediately after attachment. Review the employer and selected client before authorizing autofill.

Application events contain recruiter and client IDs, employer and job identity, sanitized application URL, selected resume ID, timestamps, status, and field counts. They do not contain a copy of the application form’s field values, passwords, verification codes, CAPTCHA answers or browsing history.

Access and control

The extension connects using a short-lived, one-use authorization code and PKCE. Its separate access token expires within eight hours and is kept in trusted, session-only Chrome extension storage. Recruiter assignment and account status are checked on each backend request. Disconnect in the extension or revoke access under JobOrbit → AutoFill & Saved Answers.

Site access is limited to the application tab you activate, unless you explicitly grant access to a particular site for the floating action. AutoFill does not collect job listings or monitor general browsing. The older JobOrbit job collector is a separate extension.

Saved answers and retention

Answers are saved only after you confirm that the client explicitly provided and authorized them. Voluntary sensitive disclosures require an additional sensitive-answer designation. Employer-specific answers are scoped to that employer. You can remove saved answers in JobOrbit. Profiles, resumes and application history follow JobOrbit’s existing storage and retention rules.

The existing JobOrbit scheduled maintenance deletes operational AutoFill events after 90 days, expired connection codes and file tickets after one day, and expired extension sessions after 30 days. Confirmed application records and their application status history are retained separately.

Limited use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. AutoFill does not sell client data, use it for advertising, or send it to AI services. Data is transferred to JobOrbit and to the employer application you authorize; authorized JobOrbit administrators can review scoped application activity.

For account or privacy requests, contact your organization’s JobOrbit administrator or the contact listed on the JobOrbit website.

JobOrbit privacy policy