What we store, where, and who else sees it.
A plain-language draft. It describes how the service is designed to work.
Draft. This page has not been reviewed by a lawyer and the legal entity behind the service is not named yet. Last updated 1 October 2026.
This website
When you sign up or sign in, we store your email address, the time you joined, and a session so you stay signed in. The session is one cookie, set only after you open a sign-in link. There are no analytics, advertising or tracking scripts on this site.
The sign-in email is sent through an email delivery service (Resend), which therefore receives your address and the message. Payments are handled by Stripe, which receives your card details; we do not see or store them.
Your account
Stored on the server, in your account:
- your resumes and your searches;
- the postings kept for you, and what you did with each: shortlisted, removed, opened, applied;
- the details you want typed into application forms: name, contact details, address, links, work authorization, and the demographic answers you choose to give or decline;
- answers Prefill has learned from forms you completed, which you can view and delete;
- a record of each Prefill run, your plan, and your place in the scan queue.
What is shared between users
Job postings are public pages. A posting the service has read for one person can be shown to another whose searches it matches. Nothing else is shared: not your resume, your details, your searches, or what you did with a posting.
Other services that receive your data
- Google's Gemini API receives the text of your resume and of postings, to suggest searches, score fit and draft answers. How Google handles it is set by the Gemini API's terms. [to confirm: confirm the API tier in use and what its terms allow Google to do with submitted content]
- The database and hosting providers hold the data listed above on our behalf.
- Employers receive what you submit to them on their own forms, and nothing from us.
We do not sell your data. [to confirm: owner to confirm this statement]
On your own computer
If you install Prefill, its folder holds the helper, a token that identifies your account, the cookies of the application sites you signed in to in Prefill's browser window, and a log of each run. The cookies and the log stay on your computer. What Prefill sends to the server is a summary of each run (which posting, what was filled) and the answers you gave on the form, which are kept for the next form unless you choose “Don't save”.
Keeping and deleting
You can delete resumes, searches, learned answers and the job list from Settings. To have the account and everything in it deleted, write to [to confirm: contact email]. [to confirm: retention period after deletion, if any]
Who is responsible
[to confirm: legal entity name and postal address]