Privacy First • Local Only

Privacy Policy

JACX — Job Application Control eXtension • Last Updated: October 11, 2026

Core Commitment: JACX is built on a strict local-first, zero-telemetry philosophy. All your resumes, applications, private vaults, and personal disclosures are stored and processed 100% on your machine. We do not operate remote user servers, track usage analytics, or sell personal data.

1. Core Architecture: Local Storage Sandbox

All data processed by JACX remains exclusively within your local browser sandbox:

No Central Server: We operate no databases, user accounts, or cloud storage.
No Telemetry or Tracking: JACX collects zero usage statistics, analytics, or behavioral cookies.
No Data Monetization: We never sell, transfer, or share your information with advertisers, third parties, or data brokers.
Client-Side Encryption: Your private vault is secured with AES-256-GCM authenticated encryption directly in your browser.

2. What Information JACX Handles

Information handled by JACX is stored exclusively in your browser’s local IndexedDB and chrome.storage.local:

Applicant Profiles: Contact details, education, work experience, skills, and resume documents.
Private Vault: Confidential disclosures (demographics, target compensation, references), protected with client-side encryption.
Job Tracker History: Tracked job URLs, role titles, application stages, and submitted question-answer pairs for revisitable records.
Role Alignment Scores: Scientific fit calculations evaluated on-device to help you prioritize suitable job postings.

3. Chrome Extension Permissions & Technical Justifications

JACX complies with Google’s Minimal Permissions Policy. Each permission serves an essential user-facing function:

Permission	Purpose & Justification
`sidePanel`	Opens a side-by-side workspace within Chrome so you can review and control application autofill without leaving the job page.
`storage`	Persists your profiles, encrypted vaults, and application records on your computer.
`activeTab` & `tabs`	Detects navigation to job application pages and keeps tracker records synchronized.
`offscreen`	Generates PDF cover letters and performs document processing securely within an offscreen browser document.
`<all_urls>` (Host)	Job application portals span thousands of distinct domains (Greenhouse, Lever, Workday, Ashby, and company career portals). Broad host access enables form detection across any career site. The extension only executes on detected job postings.

4. Third-Party Integrations & External AI Models

Default Offline Mode: By default, JACX functions completely offline using heuristic matching, rule-based algorithms, and local semantic parsing.

Optional BYOK (Bring Your Own Key): If you choose to configure external AI model providers (such as OpenAI, Anthropic, or a local Ollama instance):

API calls are sent directly from your browser to the provider.
JACX never proxies, intercepts, or logs your requests or API keys on external servers.
Your API keys are encrypted locally and never transmitted to JACX authors.

5. Data Control, Export & Deletion

You retain absolute control over your career data:

Export: Download an encrypted .appvault archive of your entire workspace at any time, or export standardized candidate profiles adhering to the open Applicant Profile Protocol (APP v1.0.4) standard.
Deletion: Delete individual applications, profiles, or wipe the entire database directly within Settings.
Uninstall: Removing the extension immediately wipes all local databases and caches managed by JACX.

6. Contact & Support

For questions or feedback regarding this privacy policy:

Author: Caglar Orhan
LinkedIn: https://www.linkedin.com/in/caglarorhan
GitHub: https://github.com/caglarorhan
Protocol Standards: https://app-protocol.org/
Support: support@jacx.dev