Privacy Policy

We collect only what the product needs to work.

We do not ask for and do not want government ID numbers, bank or card numbers, or passwords for other websites. Please do not put them in your profile or CV.

The Hyrpilot browser extension is optional. Without it you can still use your profile, CV builder, cover letters, and application tracking. Here is exactly what it does when you install it.

• Reads job pages you are on. On supported job sites it reads the job listing details (title, company, description, location) so they can be saved to your Hyrpilot account. It does this on job board pages only, not on every site you visit.
• Fills in application forms. When you ask it to, it reads your Hyrpilot profile and puts your details into an application form. It shows you the filled form and waits for your explicit approval before anything is submitted.
• Attaches your CV. To attach a CV file to a form, the extension uses a Chrome capability that requires the "debugger" permission. Chrome shows a notice while this is active. It is used only to place your CV file into the file upload box on the application form. It is not used to read other pages or your browsing history.
• Uses your existing sign-in. The extension talks to Hyrpilot using the same session as the website. It does not store a separate password.

The extension does not collect your browsing history, does not read pages on sites outside the job boards and application forms listed in its permissions, and does not sell or share data with advertisers.

Generating a cover letter, tailoring a CV, or scoring a job match sends the relevant parts of your profile and the job description to an AI model provider so the text can be produced.

We do not send your uploaded CV files, your password, your session cookies, or screenshots to AI providers. AI output is generated for you and shown to you for review; you decide whether to use it.

We do not sell your personal data. We share it only with the service providers that make Hyrpilot work: cloud hosting and databases, file storage for your CVs, AI model providers as described above, and email delivery. Each is used only to provide the service.

We may disclose data if the law requires it, or to investigate abuse or a security incident.

Our servers and databases run in Indonesia. Some providers we rely on, including AI model providers, process data outside Indonesia. If you use Hyrpilot, your data may be handled in those countries under the same commitments described here.

Hyrpilot's use of information received from Google APIs, and from the browser extension, follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

In plain terms, we do not:

• sell your data, or share it with anyone for advertising
• use it for anything other than the features you asked for, such as finding jobs, saving them, and filling in application forms
• use it to decide whether you qualify for credit, a loan, or insurance
• let a person read it, except with your permission, or where the law requires it, or to investigate abuse or a security incident

We keep personal data only while it is needed. Short-lived working data such as extracted CV text, form snapshots, and AI prompts is kept briefly for troubleshooting and then removed. Cost, billing, and security records are kept longer, with personal content stripped out.

You can view and correct your profile at any time in your account settings. You can delete individual CV files, and you can delete your whole account, which removes your profile and uploaded files.

Depending on where you live, you may also have the right to request a copy of your data, to object to certain processing, or to ask us to restrict it. To make any of these requests, email us at support@hyrpilot.com.

You can remove the browser extension at any time from your browser settings. Removing it stops all of the access described above.

Passwords are stored only as bcrypt hashes, never in readable form. Sessions are stored as hashes, so the token exists only in your browser. Access to your rows in our database is enforced by the database itself, not only by application code. Data is encrypted in transit.

No service can promise perfect security. If you believe your account has been accessed by someone else, contact us at support@hyrpilot.com.

Hyrpilot is meant for people looking for work and is not directed at children under 13. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.

If we make a significant change we will update the date at the top of this page and, where the change is material, tell you in the app or by email.

Questions about this policy or about your data can go to support@hyrpilot.com.

Looking for the privacy controls in your account? They are in Settings, Privacy and Account.