Privacy Policy

Last updated: September 5, 2026

Placeholder — replace with your real policy

This is a plain-English starting point, not legal advice. The Chrome Web Store requires a published privacy policy before it will list an extension that handles user data. Have a qualified lawyer review the final wording, then delete this banner.

The short version

ProfilePro reads your freelance profile and job pages only when you click, uses that content to produce your analysis and proposals, and stores it against your account so you can see your history. We do not sell your data, we do not share it with other users, and we do not use it to train AI models.

What the browser extension accesses

  • The extension activates only on an explicit click (Scan, or Read this job). It does not run in the background, on page load, or on a timer.
  • It reads the page you are already viewing while signed in to your own account. It never asks for, receives, or stores your marketplace password.
  • It is strictly read-only. It never fills in a form, clicks a button, or submits anything on your behalf. Generated proposals are copied to your clipboard for you to paste.
  • Your session token is kept in chrome.storage.local, never in localStorage, and is cleared when you sign out.

What we store

  • Account details: your email address, name, and a securely hashed password.
  • Profile scans: the profile content you scanned and the analysis produced from it.
  • Proposals: the generated text, the job details it was written against, and any Connects figure you record.
  • Settings: your tone, length and focus preferences, and your chosen AI model.
  • Usage counters, so monthly plan limits can be enforced.

Third parties who process your data

  • AI providers — the model you select (Google, OpenAI or Anthropic, accessed via OpenRouter) receives your profile or job text in order to generate your result. It is not retained for model training.
  • Hosting and database — our infrastructure providers store your account data securely at rest.
  • Email — a transactional email provider sends verification and password reset messages. Marketing email is opt-in only.

Your rights

You can export everything associated with your account, or delete your account entirely, from the dashboard settings page. Deletion is permanent and cascades to every scan, proposal and setting. Depending on where you live you may also have rights under the GDPR or CCPA, including access, correction and portability — contact us to exercise them.

Contact

Questions about this policy: support@profilepro.app.