Authentication cookies: The extension reads a session cookie from candary.app to connect to your account. This cookie is only read locally and never sent to third parties.
Job listing content: When you visit a supported job board, the extension reads the page to extract job details (title, company, location, contract type, description). This data is only sent to your Candary account on candary.app via Supabase.
Form field values: If you use the auto-fill feature, your saved profile data (name, email, phone) is read from your Candary account and inserted into form fields locally.
What data is stored?

Job data and preferences are stored locally in your browser (browser storage) and synced to your Candary account hosted on Supabase.
No data is stored on any other server.
What data is shared with third parties?

None. The extension does not share, sell, or transmit any data to third parties. All communication is between your browser and candary.app (hosted on Supabase infrastructure).

AI prompt generation

The extension generates cover letter prompts locally. When you paste a prompt into ChatGPT, Gemini, or Claude, that interaction is between you and the AI provider. The extension does not send data to these platforms automatically.