Summary: Your profiles, resumes, and job tracker are saved in your own browser, and autofill never needs our servers. Some things do leave your device, and this page lists every one: AI features you choose to use, purchases, abuse prevention, feedback you send, Chrome Sync, and fonts. We never sell your data, show ads, or track your browsing.

1. Who we are

Autocater is run by SENTINALTECH (PTY) LTD (Enterprise Number 2025/776875/07), a private company registered in the Republic of South Africa. We are the "controller" (GDPR) and "responsible party" (POPIA) for the personal information described here. Contact: [email protected].

2. What stays on your device

These are saved in your browser and are not sent to us:

  • Your profiles: name, contact details, links, work history, education, screening answers, and custom fields.
  • Text read from resumes you import.
  • Your job tracker and saved copies of job descriptions.
  • Your settings, theme, and a short log of the last 5 job sites you filled (used only if you choose "Copy Diagnostic Info").
  • A random install ID and, if you buy Pro, your license key.

Your resume's contact details (name, email, phone, links) are read on your device, and autofill itself works offline.

3. What leaves your device, and when

3.1 AI features (only when you click)

AI features never run in the background. They run only when you click a button such as "Fill jobs & education with AI" or ask for a drafted answer.

  • Resume reading: before anything is sent, Autocater explains what will happen and asks you. If you agree, the text of your resume is sent.
  • Answer drafting: the question, the job description on the page, and the parts of your profile needed to answer it are sent.
  • The route: the text travels over an encrypted connection to our server, then to an AI provider.
  • No storage, no training: our server handles the text in memory and does not save it. We only use AI providers that do not train on your data or keep it beyond handling your request; some may hold it briefly for security and abuse checks.
  • What also goes along: a random install ID, your license key if you have one, and your IP address (sent automatically with any internet request). These are used for abuse prevention (section 3.3).

3.2 Purchases (Pro)

  • Payments are handled by Dodo Payments, our Merchant of Record. Dodo collects your card and billing details under its own privacy policy. We never see your card number.
  • Dodo sends us your email address, name, and payment or subscription ID. We keep your email address and payment and subscription IDs with your license key so we can send you the key, restore it if you lose it, handle renewals, cancellations, and refunds, and keep accounting records. We don't store your name.
  • We send your license email through an email delivery provider.
  • When you activate Pro, your license key and install ID are checked with our server, and we keep track of which devices use each license (up to 5). Deactivating a device removes it; a device unused for 30 days is removed automatically.

3.3 Abuse prevention

So everyone gets free AI drafts and nobody can abuse them, our server keeps usage counts linked to your device and network for up to 90 days. They hold numbers only, never resume or profile content.

3.4 Feedback you send

If you send feedback (for example, when uninstalling), we store the reason you pick, anything you type, the name of the website you mention (not the full page address), and your app version for up to 180 days to fix problems. Your IP address is briefly used to stop spam. Please don't type personal details into the feedback box.

3.5 Chrome Sync

Only if you turn on Google Account Sync in Settings, your profiles and job tracker list are saved to Chrome Sync so they follow you to other computers signed in to Chrome. It is off by default. Saved job descriptions and AI drafts are never synced. Google stores the synced copy in your Google Account under Google's privacy policy; we cannot see it. Turning the setting off deletes the synced copy, and your data stays on this computer.

3.6 Website hosting

Our website and the extension use fonts stored on our own site and inside the extension, so loading a page never contacts a font provider. Our website is hosted by a cloud provider, which processes visit requests to deliver the site and protect it from attacks.

3.7 Server logs

Our server may keep short technical logs (such as errors and timings) for troubleshooting, for no more than 7 days. They may include IP addresses and, for purchases, an email address. They never include resume text, drafted answers, or job descriptions.

4. Who we share data with

We share data only with the service providers below, and only to run Autocater. We do not sell or rent personal information, and we do not use it for advertising, credit, or lending decisions.

  • Cloud hosting provider: runs our server, database, and website.
  • AI providers: process AI requests you start, under no-training terms, without keeping it beyond the request.
  • Dodo Payments: handles payments as Merchant of Record.
  • Email delivery provider: sends license emails.
  • Google: Chrome Sync, only if you turn it on.

We may also disclose information when the law requires it.

5. How long we keep it

  • Data on your device: until you delete it or uninstall Autocater.
  • AI request text: not stored by Autocater. It is discarded once your answer is returned.
  • Purchase and license records (email, license, payment IDs): while your license is active, then as long as tax and accounting law requires.
  • Abuse-prevention counts: up to 90 days.
  • Feedback: up to 180 days.
  • Server logs: up to 7 days.

6. Why we are allowed to use it

  • Your request (contract): running AI features you click, and issuing and checking your license.
  • Your consent: sending your resume to AI. You can say no and type your details yourself.
  • Legitimate interests: abuse prevention, troubleshooting, and fixing reported problems.
  • Legal obligation: keeping purchase records for tax.

7. International transfers

Our service providers may process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses.

8. Your rights and choices

  • See, edit, export, or delete your profile anytime inside the extension. Uninstalling removes everything stored on your device.
  • Skip AI: every AI feature is optional, and autofill works without it.
  • Ask us for a copy of what we hold about you (for example, purchase records), to correct it, or to delete it: email [email protected]. We may need to keep some purchase records for tax law.
  • Complain to a regulator: in South Africa, the Information Regulator (inforegulator.org.za); in the EU or UK, your local data protection authority.
  • California residents: we do not sell personal information or share it for cross-context advertising.

9. Chrome permissions

  • storage: saves your profiles, tracker, and settings in your browser.
  • scripting: find form fields and fill them when you use autofill on a job page.
  • contextMenus: adds right-click shortcuts such as "Autofill This Page".
  • Host permissions (<all_urls>): job applications live on thousands of different company sites and hiring platforms (e.g. Greenhouse, Lever, Workday, Ashby, SmartRecruiters), and broad access lets autofill work on all of them. Page content is read on your device and is only sent anywhere when you click an AI feature, as described in section 3.1.

10. Chrome Web Store Limited Use

Autocater has one purpose: helping you fill in job applications. Our use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not use or transfer your data for advertising, credit, or lending, we do not sell it, and people do not read it except with your permission, for security, or where the law requires.

11. Cookies and tracking

The extension and website set no tracking or advertising cookies and run no analytics. The website saves only small display preferences (such as menu position) in your browser.

12. Children

Autocater is for job seekers and is not directed at children under 16.

13. Security

All connections are encrypted (HTTPS). Payment secrets and service keys are kept only on our server, never in the extension. If a breach affects your personal information, we will notify you and the relevant regulator as the law requires.

14. Changes to this policy

If we change how we handle data, we will update this page and the date at the top. For important changes, we will also tell you inside the extension before the change takes effect.

15. Contact