Privacy Policy — Employer Dossier
Chrome extension. Last updated 24 October 2026. Effective 24 October 2026.
Employer Dossier is a Chrome extension that researches one employer at a time, at your request, and shows you what it found with links to its sources. This policy describes exactly what data it handles, where that data goes, and how long it is kept. It is operated by an individual, not a company, for a small invited group of users.
In short
- The extension does nothing until you click it. It does not run in the background on the pages you visit.
- Your home address is used only to calculate commute times, and is never stored in the research that other users can read.
- There is no analytics, no advertising, no tracking, and no sale or sharing of your data with anyone for their own purposes.
- Company research is cached on the server and shared between users of this extension. That is deliberate, and it contains no personal data.
What is collected, and why
| Data | Why | Where it goes |
|---|---|---|
| Your home address, if you choose to enter it in Settings | To work out the travel time from your home to the employer's offices, and to find which of their offices is nearest you | Our server, and from there to Google Maps Platform (Routes and Places) to compute the journey. Not stored on our server after the request. |
| Your target job title and country, if you enter them | To research pay for that role in that country, the interview process for that role, and to rank the employer's open roles against it | Our server, and included in the request to the AI provider. Used as part of the cache key, so research for the same role and country is reused. |
| The name and web address of the employer you choose to research | It is the subject of the research | Our server, and included in the request to the AI provider. The employer's own website and job board are fetched by our server. |
| Your access token and the email address it was issued to | To check you are an invited user and to count your monthly usage against your quota | Stored on our server. The token itself is stored only as an irreversible SHA-256 hash; we cannot recover it, only verify it. |
| Links on the page you are viewing, when you click the extension | To find the employer's careers page | Read inside your browser and not transmitted, except the single careers link you or the extension selects, which is sent as part of the research request. |
If you signed up for the beta
Signing up is separate from using the extension, and most of this policy does not apply to it. If you filled in the form on the home page we store what you typed — your email address, and optionally your name, country and a note — for one purpose: to run the beta, which means deciding who has access and being able to contact you about it. It is not shared with anyone, it is not used for anything else, and there is no mailing list.
While places are available, filling in the form issues your access token immediately and shows it on the page. It is not emailed to you, and it is not stored anywhere we can read: the server keeps only an irreversible hash of it, which is why we cannot show it to you a second time and can only issue a new one. A beta account includes a fixed number of company lookups in total rather than a monthly allowance.
When places are gone, or if automatic signup is switched off, the form records you and nothing else happens until a person looks at the list.
Your entry stays until you ask for it to be removed. Ask at the address at the bottom of this page and it is erased the same day. If a token has been issued to you, the entry is kept alongside the account record described above so the same address is not issued two.
What is not collected
No browsing history. No page content beyond the links described above. No analytics or telemetry of any kind. No advertising identifiers. No contact lists. No keystrokes. We do not log your home address on the server, and the extension never reads a page unless you click it.
Where it is stored
- In your browser. Your settings and a copy of your most recent research are kept in Chrome's extension storage on your own device. Your access token is stored locally and is deliberately not synced to your Google account. Removing the extension removes all of it.
- On our server. Google Cloud Run and Firestore, in the
asia-south1(Mumbai) region. This holds your email address, your access token's hash, your monthly usage count, and the cached company research described below.
Shared research, and why it contains nothing about you
Researching a company costs real money, so the result is cached on the server and reused by other users of this extension who look up the same company. This is how the tool stays affordable, and it is the reason your second look at a company is instant and free.
Research about a company — its funding, leadership, offices, technology, competitors, typical pay for a role in a country, reported interview process — is shared. Anything about you is not. Specifically, your commute times, the address they were calculated from, and which offices were reachable are stripped out before anything is written to the shared cache, by a structural rule in the code rather than by the AI's discretion. The prompts additionally forbid the AI from writing anything that refers to a specific reader.
Who else sees the data
Three processors, each receiving only what is needed:
- The AI provider that performs the research. Currently DeepSeek via OpenRouter; previously Anthropic. This may change, and this policy will be updated when it does. The provider receives the company being researched, your target role and country if set, and the content of web pages fetched for the research. It does not receive your home address, your email address or your access token.
- Google Maps Platform (Routes and Places APIs) receives your home address and the employer's office addresses, in order to compute travel times. Only if you have entered an address.
- Google Cloud hosts the server and the database.
Nothing is sold. Nothing is shared with anyone for advertising, profiling, credit assessment, lending decisions, or any purpose unrelated to showing you the research you asked for.
How long it is kept
| Item | Retention |
|---|---|
| Your home address | Not retained on the server. Held only for the duration of the request, and in your own browser until you change or clear it. |
| Cached company research | 7 days for company facts; 30 days for pay and interview research; then regenerated on next use. |
| A company's own website extract and job-board location | 30 days. |
| A company's job listings | 1 hour. |
| Your account record (email, token hash, quota) | Until your access is withdrawn or you ask for it to be deleted. |
| Your beta signup entry | Until you ask for it to be removed. Kept after a token is issued, so the same address is not issued a second one. |
| Monthly usage and cost totals | Kept per calendar month for operating the service. |
| Server logs | Retained by Google Cloud Logging under its default retention. These record which company was researched, the requesting email address, and the cost — not your home address. |
Your choices and rights
- The address and role are optional. Leave them blank and the extension still works; it simply skips commute times and reports pay generically. Nothing is required except the access token.
- Deleting them is immediate: clear the fields in Settings, or remove the extension, and the local copies are gone.
- Access, export or deletion of what is held on the server: ask, and it will be done. The account record is a single row and can be deleted outright, which also stops the token working.
- Withdrawing from the shared cache is not meaningful, because nothing in it identifies you.
If you are in the UK or EU, the lawful basis is your consent for the optional address and role, and legitimate interest in operating an invited-user service for the account record.
Accuracy
The research is generated by an AI model from public web sources and can be wrong. It makes factual-sounding claims about named companies — funding, headcount, layoffs, pay, review scores — which may be outdated, misattributed to a similarly named company, or simply incorrect. Each section lists the sources it actually read; check them before acting on anything that matters. This is not professional advice.
Children
The extension is not directed at children and is distributed only to specifically invited adults.
Changes
Material changes will be reflected here with a new "last updated" date, and told to invited users directly. The current version is always the one served at this address.
Contact
Questions, or a request to export or delete your data: employeedossier@gmail.com.
This is also the verified contact address on the extension's Chrome Web Store listing, so the two always agree.