RapidFill privacy policy

Last updated: 31 October 2026

RapidFill is a Chrome extension that finds jobs that fit you and fills in job applications from your own browser, with a small server that scores jobs, drafts answers and tailors resumes. This page explains what we collect, why, who else sees it, and how long we keep it.

What runs where

• In your browser. The extension reads job pages on LinkedIn and Naukri, the application forms on the company career sites it supports, and your own LinkedIn "applied jobs" list if you turn on recruiter visibility. Everything it does there happens in your own Chrome, with your own sign-ins.
• On our server. Scoring, form answers, resume tailoring, your licence and your application history.

What we never do

• We never read your messages, inbox or email.
• We never read, fill or store passwords, and we never sign in for you.
• We don't read your cookies.
• We don't run analytics or advertising trackers, and we don't sell your data.

What we store on our server

• Account: your email, your plan and its expiry, and referral codes. Your licence key is stored only as a one-way hash. Free installs get a placeholder address until you give us an email.
• Profile you enter: name, email, phone, LinkedIn URL, city, years of experience, current and expected salary, notice period, education, skills, target roles, companies to avoid, and your answers on work authorisation and sponsorship.
• Resume: the text we parse from it, as structured data. We don't keep the PDF file on our server. Tailored versions are kept as structured data and turned into a PDF when you ask for one.
• Jobs and applications: the jobs we found or you saved (title, company, location, salary if listed, the job description), your fit scores, and what happened with each application.
• Optional backups, off unless you turn them on: application receipts (the job description, a fingerprint of the resume used, and the questions and answers filled in) and daily recruiter-visibility counts (numbers only).
• Payments: your email, the plan and the amount, from our payment provider.
• Security records: one-time codes and rate-limit records, stored as keyed hashes. Usage records for AI features hold token counts and cost, not content.

Preventing duplicate free accounts

The Free plan needs no sign-up. To stop one person from getting a fresh Free allowance by reinstalling, RapidFill links a reinstall to the account its owner already had. The link covers the Free plan's daily limits only. To do this it uses:

• the numeric ID of the Naukri account you are signed in to, read from the Naukri page you have open;
• the member ID of the LinkedIn account you are signed in to, read from the LinkedIn page you have open (or, if that ID is not on the page, your public profile address);
• a random install ID that RapidFill creates when it is installed. It is kept in your Chrome profile's extension storage, which Chrome syncs if you have Chrome sync turned on;
• a one-way digest of coarse device settings (operating system, number of processors, memory class, time zone and language). The digest is computed on your device, and the settings themselves are not sent.

Each ID is sent at most once a day over an encrypted connection. The install ID and the device digest are first sent when you start the Free plan. Our server turns each one into a keyed hash (HMAC-SHA256, with a secret only the server holds) and stores only that hash and when it was first and last seen. The original IDs are never stored. We do not collect your email address, name, MAC address or any hardware serial number for this. Your IP address is used only to limit how often these requests can be made: it is kept as a keyed hash in our rate-limit records, never alongside these identifiers. We do not read your messages, notifications or any other account data, and we make no request to LinkedIn or Naukri for this.

A reinstall is linked only when it carries the same install ID as the earlier account and no different Naukri or LinkedIn account is involved. An account ID or the device digest alone never links anything. A link shares only the Free plan's daily limits. Each install keeps its own sign-in, profile and history, and nothing is blocked. The link is recorded on your account and removed if the earlier account is deleted. The account IDs are kept so that two different people who share one Chrome profile stay two accounts.

The hashes are used only for this purpose. They are deleted 12 months after they were last seen, and when your RapidFill account is deleted. To have them deleted sooner, write to us at the address in the Contact section below; we act on the request under the Digital Personal Data Protection Act, 2023.

What stays on your computer

The extension keeps your resume PDF, tailored PDFs (removed after 7 days), your licence key, your profile, your saved answers to application questions, and up to 300 recent application receipts in Chrome's local storage. Removing the extension deletes them.

Who else processes your data

• Anthropic (Claude): your resume text, your profile, job descriptions and application questions, to parse your resume, tailor it, and draft answers.
• TypeSafe (Jev): your profile, job descriptions and application form fields, to score jobs and pick form answers.
• Supabase: hosts our database. Our database is in Supabase's Seoul (South Korea) region.
• Google Cloud: runs our server in Mumbai (asia-south1) and keeps its logs.
• Resend: sends our emails (your licence key, recovery codes and the daily job digest; notification emails once they are live).
• Instamojo: takes payments and tells us your email, the payment ID and the amount. We never see your card or bank details.

Our server also reads public job listings from Greenhouse, Lever, Ashby and SmartRecruiters for companies you follow. Those requests carry none of your data.

How long we keep it

• Job descriptions on your board: 14 days after the job closes or was last seen (jobs you applied to keep theirs).
• Shared job descriptions and tailored resumes: 14 days.
• Notification history: 90 days.
• Your account, profile, parsed resume and application history: until you ask us to delete them, or until the account has been inactive for 24 months, after which we delete it.

Your choices

• Turn receipt backup or recruiter-visibility backup off at any time; turning visibility backup off deletes its stored counts.
• Notification emails carry a one-click unsubscribe for each kind of email.
• To get a copy of your data or have it deleted, email us at admin@rapidfill.in. There is no self-service export or delete button yet.

Contact

RapidFill is run by Rajdeep Nag, an individual developer in India. Contact: admin@rapidfill.in