Privacy

What we store, and why

Last updated October 10, 2026

LandOffer finds jobs that fit you and helps you apply. Everything we keep exists to do that. This page covers what we collect, which companies process it for us, how long we keep it and how to delete it. We do not sell your data or use it for advertising. An employer receives your details only when you apply: with the extension, which fills a form you submit yourself, or through AI Agent Apply if you turn it on.

LandOffer used to be called Job Agent, and its Chrome extension Job Agent Autofill. It is the same service: agreements you gave under the old name still apply, and email forwarded from an application mailbox you turned on under that name comes from “LandOffer (formerly Job Agent)”. An installed copy of the extension keeps the old name until Chrome updates it to a version published as LandOffer Autofill.

What we collect

• Your account. Your email address. If you sign in with Google, also the name, profile picture link and account ID Google shares. If you subscribe, Stripe takes the payment: we keep your Stripe customer and subscription IDs and never see your card.
• Your resume and profile. The resume files you upload, their text and the profile we build from them (name, contact details, title, skills, experience, education and summary), with your edits. Also your job preferences (roles, places, level, work mode, salary, sponsorship), your alerts and watched companies, your resume versions, resume editor documents and cover letters.
• Your application details. What you add so applications can be filled: address, links, work authorization and sponsorship, other application answers and, only if you choose to give them, self-identification answers such as gender, race or ethnicity, veteran and disability status. Also the answers you ask us to remember, AI-written drafts with your edits to them and any rewrite instruction you gave, and AI picks with the option you chose when you changed a pick.
• Your activity. Jobs you save, dismiss or mark applied, feedback on matches, autofills (which job, when), your questions to the job assistant and its answers, and the emails we send you with their opens and clicks (see below).
• Requests. If you join a waitlist or ask us to track a company, the email address you give with it.

Your resume and profile

Your resume is read once, with OpenAI's models, to build a profile you can edit: title, skills, experience, education, and the preferences you set. The file itself is kept in private storage so the extension and AI Agent Apply can attach it to applications. Reset profile data or Delete account on your profile page removes the file and the profile; the Delete my data link in our emails removes the file but keeps the profile (see Deleting your data below).

You can upload a resume before you have an account. It is read the same way, and the profile it builds shows your first matches. The file is kept in private storage so it can join your account when you sign up. If no sign-up claims it, it is deleted after about two days, or later only while an unfinished sign-up that uses it can still be resumed. Your unfinished sign-up (the parsed resume and your choices) is saved so signing in can pick up where you left off. It can be resumed for 7 days and is then deleted. When you finish signing up, the resume moves to your account and is removed from the saved sign-up.

AI providers

OpenAI processes: your resume text when you upload one, including before you sign in; your profile and job preferences, to match and rank jobs and write the short “why it fits” notes in alert emails; your profile, resume text and the application's questions for essay drafts and answer picks, which a fill asks for on the questions your profile does not answer, with any rewrite instruction you type for a draft; the labels of application forms in another language, to translate them (the labels only); AI Agent Apply (below); and resume editor suggestions (including tailoring a resume to a job), cover letters you generate and resume import, unless we set those to use NVIDIA. Our requests to OpenAI are made with response storage turned off. OpenAI's API data terms apply to what it receives.

NVIDIA's hosted AI service processes: the questions you ask the job assistant, together with the job, your profile and excerpts of your resumes; the messages and answers you confirm in an AI Agent Apply conversation; for accounts enrolled in testing a new answer service, the application's questions with your application details, including self-identification answers if you gave them; and resume editor suggestions (including tailoring a resume to a job), cover letters you generate and resume import when we set those to use NVIDIA.

Other service providers

• Railway hosts our servers, background workers and databases.
• Netlify hosts this website.
• Cloudflare R2 stores files: resumes, cover letters, files and screenshots from AI Agent Apply, and application email, which is encrypted.
• Google handles Sign in with Google.
• Stripe handles payments.
• Our email provider, Resend, delivers sign-in links, alerts and other email to you.
• Resend receives email sent to an AI Agent Apply mailbox, only if you turn one on.
• A proxy network provider relays AI Agent Apply's connections to employers' sites. The connections are encrypted; the provider can see which sites they go to.

AI Agent Apply

AI Agent Apply runs only after you turn it on and agree to its terms. Our servers then open the employer's application in a cloud browser, fill it with your saved application details, attach your original resume, write answers and cover letters with OpenAI and submit the application without asking again. OpenAI receives your details and the page's text and, when needed, screenshots of the page. If you also turn on applying from your matches, eligible Ashby and Greenhouse roles that meet your minimum fit score are queued for you, up to your daily limit. You can turn it off, or cancel a run before it is submitted.

For each application we keep the details it used and its outcome, so you can see what was sent. A screenshot of the final page and the files used are deleted after 30 days. Sessions the cloud browser keeps with employers' sites are stored encrypted until they expire.

You can also turn on a dedicated email address for your applications. Email sent to it is received by Resend, kept by us for 30 days and, unless you turn forwarding off, forwarded to your verified email address. We use the verification codes it contains to finish applications and sort application updates, and we reply only when you send a reply.

Alert emails

Links in our emails open the role in LandOffer and sign you in for that browser. They expire after 14 days. To measure how fast our alerts reach you, our emails carry a tracking image and their links pass through our server: we record when an email is opened or a link is clicked, with the IP address and browser user agent of that request. These records stay with the email until you reset your profile or delete your account. Every alert email carries a one-click unsubscribe that pauses that alert.

Product analytics

We record how the site is used. Your browser reports which pages are viewed, when a search shows results, which job cards appear on screen or are opened, and when Apply is clicked. Our servers also record when you sign up or sign in, and when you save, dismiss or mark a job as applied. These usage events go to our own analytics database, kept apart from the one that runs your account, and no outside analytics service receives them.

They never include your email, name, resume, application answers or what you type into search: a search is recorded only as whether it had text and how many filters were set. Your browser gets a random ID, and a signed-in account's events, including the sign-ins and job actions above, are linked to a pseudonymous ID rather than your account details. To count visits from the same network, the events your browser sends also carry a pseudonymous network ID: a keyed hash of your IP address, or of its /64 block for IPv6. Your IP address itself is not stored in the analytics database. Raw events, network IDs included, are deleted after 90 days, including those of an account that has been deleted.

If your browser sends Global Privacy Control, we don't collect them. You can also turn them off for this browser. That stops both the events your browser sends and the ones our servers record for requests from this browser; another browser or device keeps its own setting.

To stop abuse, we count requests per network address, email address or account. The counters hold a keyed hash rather than the address itself and are deleted after their time window ends.

Service reliability

To keep LandOffer working, we collect response times, status codes, broad error categories, and page loading measurements. Browser reports use a random ID that lasts for the current page and do not include your account, error messages, page URLs, or anything you type. This operational monitoring continues when product analytics is turned off. Raw reliability reports are retained for 14 days.

The LandOffer Autofill Chrome extension

• It runs on Greenhouse, Lever and Ashby application pages, including Greenhouse forms on CareerPuck job boards; on Workday job sites (myworkdayjobs.com, myworkdaysite.com), Meta careers (www.metacareers.com), Eightfold-hosted boards (eightfold.ai, Microsoft's careers.microsoft.com, Netflix's explore.jobs.netflix.net, Qualcomm's careers.qualcomm.com, Micron's careers.micron.com and Northrop Grumman's jobs.northropgrumman.com), Google Careers (www.google.com/about/careers/applications), Phenom careers sites (careers.circle.com, careers.cisco.com) and SmartRecruiters boards (jobs.smartrecruiters.com), and there only after you allow those sites in Chrome, which you can undo at any time, or on a single page of one of them when you click the extension's toolbar icon or press its shortcut there; on LinkedIn job pages; and on landoffer.ai and job-agent-app.netlify.app to connect to your account. Older versions, including every version published as Job Agent Autofill, also connect on localhost:3009, an address on your own computer that we use for development, and treat a page there like landoffer.ai; with nothing running at that address they do nothing there. Chrome lists localhost among the extension's sites when your version does.
• When you open an application page while signed in, it reads the form's structure (field labels, types, options, help text, and the headings and introductory text of the form's sections), the job title, company, page address and language, and your local date, and sends them to LandOffer to decide what to fill. When a fill runs, on your click or on its own if you turned on automatic fill, the questions your profile does not answer are sent for AI picks and drafts, which are written on our servers (see AI providers). It checks the rest of the page's text in your browser only to notice the employer's confirmation message, and never sends it. It never reads password fields or takes screenshots.
• Answers you type or pick, in the panel or in the employer's form, stay in the panel until you save them for one company or for every company. Only then are they sent to LandOffer. If you turn on ticking "Remember for" by default, an answer you fill from the panel, or a change you make to an AI pick, is saved for that company right away. The option you choose in place of an AI pick is sent when you choose it, so later forms use your answer; it can be a self-identification answer. When you edit an AI draft in the panel and use it, your edited text is sent to LandOffer and kept with the draft, and a rewrite instruction you type there is sent and kept the same way. Saved answers can be reviewed and removed in the panel's settings.
• On LinkedIn job pages, and on Greenhouse and Ashby postings, it can show a link to apply with your LandOffer AI agent. On LinkedIn it reads only the open job's apply link, title and company, and sends the title and company to LandOffer only when the link is not a Greenhouse or Ashby posting. On the outer page of a CareerPuck job board it only shows the panel next to the Greenhouse form; it reads no form and fills nothing there.
• It fills fields from your profile, including voluntary self-identification, work-authorization and salary answers you saved, and attaches your resume file, which it downloads from LandOffer. It never submits an application.
• While its panel is open, it hides other autofill extensions' floating panels on the page and puts its own fills back if another extension overwrites them. You can turn both off in the panel's settings. It sends nothing about those extensions.
• Autofill has no daily limit. It records that a fill happened (which job, when) for your Applied tab, and marks a job applied only when you confirm it in the panel.
• It keeps a sign-in token, your name and email, and your panel settings in the extension's own storage. Settings, including questions you chose to leave blank, are also saved to your account so they follow you to other browsers. Revoke the token from your profile at any time. It also keeps the ID and email of the account it was last connected to, even after that account is signed out, so that connecting it to a different account always asks you first on a page of the extension's own; "Sign out on this browser" in the panel forgets them.
• AI drafts, AI picks and form labels in other languages are handled by OpenAI's models, and answers for accounts testing a new answer service by NVIDIA-hosted models. They receive the question, the job and the profile details needed (see AI providers).

How long we keep it

• Your account, resumes, profile, application details, saved answers, activity and email records: until you reset your profile or delete your account.
• A resume uploaded before sign-in that no account claims: about two days, as described above.
• An unfinished sign-up: 7 days.
• AI Agent Apply screenshots and the files used for an application: 30 days. Application mailbox email: 30 days.
• Product analytics events: 90 days.

Deleting your data

In your profile, under Account & data:

• Reset profile data deletes your resumes and their files, your parsed profile, your application details including self-identification answers, saved answers, AI drafts and picks, preferences, alerts, matches, activity, job assistant conversations, email records and extension connections, plus unfinished sign-ups that carry your email or a resume you uploaded. It turns off AI Agent Apply and empties its mailbox. It also signs you out on your other browsers and ends the links in alert emails we already sent. It keeps your login, your subscription, account records such as audit logs, and minimal records of applications AI Agent Apply already sent so they are never sent twice.
• Delete account does all of that and also deletes your account, its sign-in identities, those account and application records, and any waitlist or company requests made with your email address. It cancels your subscription.

Files are deleted from storage in the background, with retries if storage is unavailable. Application mailbox addresses stay reserved and disabled so nobody else receives your mail. Stripe keeps its own payment records, analytics events expire on their 90-day schedule, and applications already sent to employers stay with them.

The Delete my data link at the bottom of our emails is narrower. It opens a page that lists what will be deleted, and nothing is deleted until you confirm there. It then stops alert and digest emails and deletes your stored resume files (every version) and their history, the answers you asked us to remember, your AI Agent Apply settings, conversations and mailbox contents, and the copies kept with your AI Agent Apply applications, cancelling any not yet submitted. It does not delete your account, your parsed profile, your application details, AI drafts with your edits and rewrite instructions, AI picks with the options you chose in their place (which can be self-identification answers), job assistant conversations, email records with the IP address and user agent of their opens and clicks, your preferences, alerts and matches, your resume editor documents or your cover letters: use Delete account for those.

Contact

For questions, a copy of your data, or a deletion request, email support@landoffer.ai. There is no self-service export yet. See also your profile.