Privacy Policy

The following disclosure describes Propel Chrome extension version 2.1.1, which is not yet available in the Chrome Web Store. The sections below continue to describe the currently published Mac app and Propel Bridge.

The Propel Chrome extension reads visible application form labels, choices, and limited field state on a page you choose to inspect. It stores your sign-in session and local task/answer records in Chrome and fetches your account's saved answers from Propel's Supabase service. When you request AI planning, the page origin, visible field labels, surrounding question text, choices, and whether fields are answered travel through Propel's authenticated Supabase model service to Jev. Where answer matching is possible, OpenAI also receives relevant field context and saved-answer IDs, question names, aliases, and types. Field labels and question names may contain personal information. Saved-answer values and selected résumé files are not sent in these model-planning requests. A résumé file you select is attached to the employer's form. You review actions and submit the final application yourself. Your browser keeps the sign-in session and local task records; signing out removes the local session, and the side panel can remove individual locally saved answers. Account data and AI prompts may also be retained by the service providers under their applicable policies. For questions about your data, contact zachcilwa@gmail.com.

Propel uses storage for the signed-in session and local task records; tabs to identify the application tab and reviewed page changes; sidePanel to display the application controls; and scripting plus HTTPS site access to inspect and fill the application page, including employer domains and embedded frames. Access to Propel's Supabase service supports sign-in, saved answers, allowance checks, and requested AI planning. Actions follow user review. The extension does not require a desktop app, native messaging, or Chrome debugger access.

• Résumé files, saved screenshots and any job-site logins Propel creates are stored only on your Mac.
• Your profile, saved answers and application history are stored in your Propel account, so every application can use them.
• To fill an application, Propel sends the application page and the parts of your profile it needs to OpenAI’s API. We ask OpenAI not to store these requests.
• We don’t sell your data, show you ads, or use your data to train AI models.
• Propel never asks for your LinkedIn or Indeed password.

The Propel app keeps its files in a private folder on your Mac. That includes:

• the résumé files you add;
• your application history, including the answers Propel filled in and up to eight screenshots of each application;
• logs of each run, and your settings;
• your Propel sign-in session.

Job-site logins. Some employer sites need an account before you can apply. If you turn on automatic sign-in or account creation (both are off by default), Propel creates a login using your email and a generated password. These logins are encrypted with a key protected by your Mac’s Keychain and are never uploaded.

The Chrome extension. Propel Bridge connects Chrome to the Propel app on your computer and makes no network requests of its own. It can see the titles and addresses of your open tabs, and it reads and controls the tabs Propel works in. It stores only its connection state in Chrome.

When you sign in, Propel stores the following on our servers, which run on Supabase:

• Account: your email address, plus your name and photo if you sign in with Google.
• Profile: contact details (name, email, phone, address), work authorization, sponsorship, availability, salary expectations, links, and the roles and locations you want.
• Résumé details: the work history, education and skills Propel extracts from your résumé. The résumé file itself and its full text are not stored.
• Saved answers to screening questions, and a search index of your profile, résumé details and answers, so Propel can find what each application needs.
• Applications: each job’s address, company, title and location, the posting’s details, the application’s status and outcome, and any questions waiting for you.
• Run logs: which steps Propel took, timing, usage, page field labels and the job details. The values you entered, page text, email addresses and phone numbers are removed before these logs are uploaded, and screenshots are not uploaded.
• Plan and usage: your plan and how many applications you’ve used.
• Bug reports you choose to send.

Propel uses OpenAI’s API to read application pages and decide what to fill. These requests go through our servers using our OpenAI account. They can include:

• the content of the application page, including values already in the form (passwords and one-time codes are masked);
• screenshots of the page;
• the parts of your profile, résumé details and saved answers relevant to the application;
• your résumé’s text when you import a résumé, so Propel can extract its details.

Requests are sent with OpenAI’s response storage turned off, along with an anonymous account identifier. We don’t keep the contents of these requests on our servers. OpenAI’s handling of API data is described in its API data usage policies.

We don’t use your data to train AI models.

You can connect Gmail so Propel can match employer replies to your applications and read verification codes sent while you apply. Propel asks for read-only access. It reads the sender, subject and a short preview of hiring-related emails from the last 30 days onward, and it opens a message only to read a verification code. Its access tokens are stored encrypted. Stored email details are deleted after 180 days, and disconnecting Gmail revokes Propel’s access and deletes them.

Payments are handled by Stripe on Stripe’s own checkout page. Propel never sees or stores your card number. We keep the customer and subscription records Stripe sends us, which can include your name, email, billing address, and your card’s brand and last four digits.

If you sign in on propeljobagent.com, a cookie keeps you signed in. We use Vercel Web Analytics to count page views; it doesn’t use cookies. The site is hosted by Vercel, which keeps standard server logs.

If you join the upcoming extension waitlist, we store the email address you enter in Propel’s Supabase database. We also store a keyed digest of your network address and a daily request count to limit abusive signups. Joining does not create an account, grant access, or subscribe you to marketing emails. We do not send an email when you join.

We don’t sell your data or share it for advertising. We use these service providers to run Propel:

• Supabase for your account, sign-in and stored data;
• OpenAI for the AI models, as described above;
• Stripe for payments;
• Google if you sign in with Google or connect Gmail;
• Vercel to host this website and count page views;
• GitHub, where the Mac app checks for updates (GitHub sees your IP address and app version).

We keep your account data for as long as you have an account. Files on your Mac stay until you delete them or uninstall Propel. Email details from Gmail are deleted after 180 days. We keep payment records as long as we need them for accounting and tax purposes.

• Delete saved answers in the Propel app.
• Leave automatic sign-in and account creation off, or turn them off at any time.
• Disconnect Gmail at any time.
• Remove Propel Bridge from chrome://extensions to stop its access immediately, and uninstall the Propel app to remove it from your Mac.
• Delete your Propel account from your account page. That cancels your subscription immediately and deletes the data stored in your account. Files on your Mac stay until you uninstall Propel.
• To get a copy of the data in your Propel account, email us from your account’s address.

Data travels over encrypted connections, Gmail tokens are stored encrypted, and job-site logins never leave your Mac. No system is perfectly secure, so please tell us if you find a problem.

If this policy changes, we’ll update this page and the date at the top. Questions or requests: zachcilwa@gmail.com.