Effective 25 October 2026 · Applies to the OffLadder CV Chrome extension, version 1.4.0 and later, by OffLadder.
Your CV is stored on your device. Tailoring uses AI on our server, and only when you click Tailor. We don't sell or share your data or use it for advertising. There are no analytics or trackers.
Your uploaded CV, the parsed profile, your settings and your tailored versions are kept only in Chrome's local extension storage. To delete them, use Settings → Delete my CV from this device, or remove the extension.
When you upload a CV, its text is sent to our server (a Cloudflare Worker), which forwards it to Google's Gemini API to sort it into roles, dates and bullets. The result comes back to your device. You review it before it is saved.
If your PDF is a scan with no text, up to 4 pages are turned into images on your device and sent the same way so the AI can read them. The images are processed in memory and not stored.
If you allow OffLadder CV to read job pages, it reads the active tab only while the side panel is open, to show the job title and company. It does not read other tabs or pages in the background. Nothing from the page leaves your device until you click Tailor. If you don't allow this, you can paste a job instead.
When you click Tailor, the extension sends your CV content (for long CVs, only the most relevant roles) and the job text to our server, which forwards them to the Gemini API and returns the rewrites. The same applies when you ask for a cover letter or a message to the hiring manager. Every AI rewrite is checked on your device against your original CV, and anything it can't support is reverted.
We don't store your CV or the job text. They are processed in memory and discarded. Google processes requests under the Gemini API terms.
You sign in with your offladder.com account through OffLadder's sign-in page (Supabase Auth). The extension keeps the sign-in session in Chrome's local extension storage. With each AI request it sends your OffLadder access token to our server, which checks it with offladder.com to see whether you are a member and how many free tailorings you have left this week, and tells offladder.com when a tailoring worked so it can be counted. Only the token is sent to offladder.com, never your CV or the job text. offladder.com keeps your account email, membership and the dates of your tailorings, under the OffLadder privacy terms. Signing out removes the session from this browser.
To enforce daily limits, the server keeps a random install ID (or a one-way hash of your OffLadder user ID, if you are signed in) and a one-way hash of your IP address, each with a counter, for up to 25 hours. These counters are not linked to your name or email.
With your permission, the extension looks up public information about the hiring company: its public job board (Greenhouse, Lever, Ashby) and Wikipedia/Wikidata. Only the company name is used. No CV data is sent to them.
Paid plans are handled by Stripe. We never see your card details. After you pay, the server stores a one-way hash of your licence key with your plan and Stripe customer and subscription IDs, so it can check that your licence is active. Stripe's privacy policy applies to your payment.
The use of information received from your browser complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to tailor your CV to a job. It is never sold, never used for creditworthiness or advertising, and never transferred to third parties except Google (to process AI requests), Stripe (for payments) and OffLadder (offladder.com, for your account and allowance).
If you sign in, the jobs you download a tailored CV for (title, company and link) and whether you heard back are saved to your OffLadder account. Your CV and the job text stay on your device. See offladder.com/privacy for how that history is stored and counted.
Not directed at children under 16.