Tailr Extension — Privacy Policy
Last updated: 10 October 2026
Tailr (“we”, “us”) builds the Tailr Chrome extension (“the extension”), which carries your Tailr-tailored résumé into an employer's online job application and fills the form for you. You always review the form; the extension never clicks Submit. This policy explains exactly what data the extension handles, where it goes, and what never leaves your browser.
This policy covers the extension. Data you provide on the Tailr website (tailr.uk) — your account, résumés, and profile — is governed by the Tailr website privacy policy.
1. What the extension handles
Data processed to fill an application
- Job-application form structure. When you run Autofill, the extension reads the current page's form: question labels, field types, and the options of any dropdowns. Descriptions of the questions that need a résumé-derived answer are sent to Tailr's server (see §2) so it can compute the right answers.
- Your Tailr résumé. The tailored résumé PDF you generated on tailr.uk is fetched from Tailr's server and attached to the application's résumé upload.
- Your Tailr autofill profile. Identity extras (e.g. preferred name, LinkedIn/website URLs, address, phone type), work-eligibility answers, and the standard EEO/demographic answers you set once in the extension's options page.
Data processed when you save a job
- The job posting you save. Only when you click Save this job (popup) or Save job to your tracker (page helper), the extension reads that page — its address, title, visible text, and any employer name the page publishes as structured job data — and sends it to Tailr's server, which works out the company, role and location and adds the job to your Tailr job tracker. It never reads a page for this unless you click Save.
Data stored on your device
- Autofill profile and remembered answers (a local cache of
previously answered questions so repeats fill instantly) — stored in your browser via
chrome.storage.local. - Sign-up credentials — an optional email and password you may enter for ATS sites that require creating an account to apply (e.g. Workday). See §3.
- Sign-in key — the extension's own Tailr sign-in key, issued when you sign in
at tailr.uk and kept in
chrome.storage.local, so it survives browser restarts and extension updates. It works only for what the extension does (your account status, your résumés, autofill, job saves and usage metrics), and it ends when you sign out of Tailr, after 90 days unused, or when you remove the extension. Tailr's servers store only a one-way hash of it. While you're on tailr.uk, the site's short-lived session token is also held in memory (chrome.storage.session) to issue that key. - UI preference — where you dragged the floating Autofill widget.
Usage analytics
- Privacy-safe run telemetry. After each Autofill run the extension sends
Tailr a single event containing only: the ATS host (e.g.
boards.greenhouse.io), counts (questions scanned/filled and which answer tier resolved them), the run outcome, its duration, and the extension version. It never includes question text, your answers, résumé content, or the full page URL.
2. What is sent to Tailr's servers, and why
The extension communicates only with Tailr at
https://www.tailr.uk. Over that connection (HTTPS), authenticated with the
extension's sign-in key, it sends:
| Data | Endpoint | Purpose |
|---|---|---|
| Session token | all API calls | Authenticate you to your Tailr account |
| Account status | /api/me | Confirm you are signed in |
| Résumé list & the selected résumé PDF | /api/me/generations… | Attach your tailored résumé to the application |
| Question descriptors (labels, types, options) + your profile + the detected ATS name | /api/autofill/map | Compute the answers to résumé-derived questions |
| The ID of the Tailr résumé you autofilled with (once per tab) | /api/applications/mark-applied | Mark that job "applied" in your Tailr application tracker |
| The page's address, title, visible text and published employer name — only when you click Save | /api/applications/save | Add the job to your Tailr job tracker |
| Run telemetry (see §1) | /api/telemetry | Product usage metrics |
Server-side processing of this data (including any AI used to map answers) is performed by Tailr and governed by the Tailr website privacy policy.
3. What NEVER leaves your browser
- Sign-up passwords / credentials. If you save ATS account credentials, they are stored locally and typed directly into the ATS's own account form. They are never sent to Tailr's servers or to any answer-mapping service.
- Your remembered-answers cache — kept on your device only.
- The pages you browse. The extension only ever acts on a page you explicitly Autofill or Save; it does not track, collect, or transmit your browsing history. Only the ATS host (not the full URL) is included in telemetry.
- Demographic/EEO answers are never AI-generated — they come only from what you set, and default to “decline to self-identify.”
4. We do not sell your data
We do not sell your personal information, and we do not share or transfer it to third parties for any purpose unrelated to the extension's single purpose (carrying your Tailr résumé and answers into a job application, and saving the jobs you choose to your Tailr tracker). We do not use it for advertising, creditworthiness, or lending.
5. Permissions and why we need them
storage— save your profile, remembered answers, sign-up credentials, and the extension's sign-in key on your device.activeTab+scripting— let the toolbar popup's “Autofill this page” run the fill on the tab you're actively viewing, when you ask it to.tabGroups— when you choose Auto-apply with extension in Tailr, open those jobs together as one named tab group, so they stay organised and easy to close. It reads nothing from your tabs.- Host access to
https://tailr.uk/https://www.tailr.uk— the only sites the extension makes network requests to (your account, résumés, answer mapping, telemetry). - Runs on web pages you visit — the Autofill helper is available on job application pages so its button can reach any ATS. It reads a page's form only when you click Autofill, and it makes no cross-site network requests.
6. Retention and your controls
- On your device: clear the profile, credentials, and remembered answers any time from the extension's options page, or by removing the extension (which deletes all of its local storage, including its sign-in key). Signing out of Tailr ends the sign-in key on our servers and removes it from your device.
- On Tailr's servers: your account, résumés, and profile are retained under the Tailr website privacy policy; delete them via your Tailr account.
7. Security
Network traffic uses HTTPS. The sign-in key is never logged, is accepted only for the extension's own requests, and is stored on Tailr's servers only as a one-way hash; the site's session token lives only in memory-backed session storage. Sign-up passwords are never transmitted to our servers.
8. Children
The extension is not directed to children under 13 and we do not knowingly collect data from them.
9. Changes
We may update this policy; the “Last updated” date above will change. Material changes will be reflected in the extension's Chrome Web Store listing.
10. Contact
Questions or requests: [email protected].
How to install, use and remove the extension: the Tailr Chrome extension guide.