Privacy Policy

Kiwiply is currently in beta. The service is provided "as is" and "as available", without warranties of any kind. Features may change, and the service may be unavailable or interrupted from time to time while we improve it. We aim to keep your data safe, but during beta you should keep your own copy of anything important — you can export or delete your data at any time. To the extent permitted by law, Kiwiply is not liable for any loss arising from use of the beta service.

• Account: a username and email address so you can sign in.
• Profile: the details you enter for autofill — name, contact information, address, links, work-authorization answers, and any voluntary self-identification answers you choose to provide.
• Resumes: the resume files you choose to save and the text fields parsed from them.
• Application activity: jobs you save or apply to through Kiwiply, when you use those features.
• Profile suggestions:after you autofill an application with the extension, the answers you give there to questions your profile could hold (for example desired salary or notice period), so we can suggest them for your profile. Nothing changes in your profile unless you keep a suggestion. We never take self-identification (EEO) answers this way, and we never store the address of the page — only a salted code that tells two applications apart. You can turn this off in the extension's settings.
• Billing (Pro subscribers only): a reference to your customer record at our payment processor, the plan you chose, and your subscription status and renewal date. We never receive or store your card number.
• Technical: authentication tokens (stored in secure, http-only cookies on the web) and basic server logs needed to operate the service.

When you add a resume, the file is opened and its text read in your browser. To fill your profile accurately, that text is then sent to our AI provider (currently Google Gemini; see AI features below), which turns it into structured fields such as experience, education and skills. This happens once per resume, on every plan, and it is on by default: untick "Parse with AI for best accuracy" before you add a resume to keep it in your browser, with a simpler reading. The resume and its fields are stored in your account only when you save it.

Your data is used solely to provide Kiwiply: to store your profile and resumes, to autofill applications you initiate, and to manage your account. We never auto-submit an application on your behalf, and we don't use your data for advertising.

Our AI provider is currently Google Gemini. Because we currently use Gemini's free tier, Google may use what we send it to improve its services, and human reviewers may see it. Below is exactly what each feature sends. Apart from resume reading (above), every AI feature is off until you use it or switch it on, and every other part of Kiwiply works without AI. You can also bring your own AI key in the extension, in which case its requests go directly from your browser to that provider under your own account, not through us.

Kiwiply AI in the extension (Pro).Off until you turn it on in the extension's options. Once on, while you fill an application it can: draft an answer to an open-ended question (it sends the question and a short summary of your profile and resume background); choose one option for a multiple-choice screening question (the question, its options and that summary); match unusual form-field labels to your profile fields (the labels only); and complete the details of a job you save (that posting's text). You review every answer before anything is submitted, and we never submit for you.

Resume fit (Pro).When you ask which of your resumes fits a job — on the board, or automatically in the extension once you've turned Kiwiply AI on — that job's description and a short summary of each of your saved resumes (summary, skills, recent roles, education) are sent to the same provider to score them. We keep only the scores and a one-line reason, never the job text or your resumes, so asking again about the same job is instant. They're deleted with your account.

Job fit (Pro).When you ask what one resume is missing for a job, that job's description, a fuller summary of that resume, and a few of your profile answers that can make a job a non-starter — work authorization, sponsorship, city/state/country, relocation, work preference, start date and notice period — are sent to the same provider. Never your name, contact details or self-identification answers. We keep only the report (score, a one-line summary, short lists of skills), deleted with your account.

Resume tailoring (Pro).When you ask Kiwiply to tailor a resume for a job, that job's description and that resume are sent to the same provider, which suggests rewordings of what the resume already says. We keep the suggested rewordings (your own content, reworded) so you can review them and save the ones you keep as a new resume. Your original is never changed. All of it is deleted with your account.

ATS score (Pro).A resume's score is worked out on our servers from the resume you already stored, with no AI and nothing sent anywhere. Against a job, its keyword coverage comes from that job's job-fit report above, so nothing more is sent. We don't store the score; it's recalculated each time you look.

Job matches (Pro).To find fresh jobs we read public job boards on Greenhouse, Lever and Ashby. When you track an application on one of those boards, that company's public board may be added to the list we read — only the company and its board, never who applied. Matching is off until you switch it on. While it's on, each night a summary of your default resume, your location, work preference, relocation and sponsorship answers, and up to 50 new postings are sent to Google Gemini to score how well each fits you. We keep each score and its one-line reason (not your resume text) for as long as the posting is listed with us, at most 7 days, and delete them with your account. Switch matching off at any time.

Inbox (Pro).If you connect a Gmail, we store its address and the app password you create for Kiwiply — encrypted, never as you typed it, and never shown back. We use them only to sign in and read that mailbox's inbox and sent mail, every 15 minutes. From each message we keep the sender, recipients, subject and date; we keep the text only of mail about your job search (from a hiring system, or about an application you track), and never attachments. We read that job mail to update your board — confirmations, interviews, rejections, offers — by fixed rules first; only an email the rules can't settle is sent to Google Gemini (sender, subject and the start of its text). When an email moves an application to an interview or an offer, we email your Kiwiply account's address to say so (you can turn that off); every update also shows under Notifications. We never send, move or delete mail in the connected inbox. Mail we've read is kept for 12 months after it was sent, then deleted; your data export includes it. Disconnecting deletes the app password and everything we read; deleting the app password in your Google account cuts us off as well. We ask you to connect a Gmail made just for job hunting, so your personal mail stays out of it.

Your data is stored in our database; resume files are kept in object storage. Data is transmitted over encrypted connections (HTTPS). We don't sell your personal information or share it with third parties for their own purposes. We rely on infrastructure providers (such as database and file-storage hosting), an email delivery provider, and — for Pro subscriptions only — a payment processor to run the service; they process data only on our behalf, or, in the payment processor's case, as an independent processor of the payment itself (see Payments below).

The companies that process personal data for us, what each does, which data it can reach and where, are listed on our subprocessors page.

If you subscribe to Pro, payments are processed by Stripe. You enter your card details on Stripe's own checkout page, not ours: we never see or store your full card number. Stripe receives the information it needs to take the payment — typically your email address, card details and billing country — and handles it as a payment processor under its own privacy policy.

What we keep on our side is only what we need to know whether your subscription is active: a customer reference, the plan, the status, and the renewal date. We keep those records while your account exists and for as long as tax and accounting rules require us to retain proof of a transaction — which can outlast an account deletion, because deleting an account does not undo a payment that happened. Nothing about your payments is used for advertising, and we never sell it.

Our administrators may access accounts and data to operate, support, and secure the service — for example to investigate an issue or respond to a request. By default they see only metadata (labels, counts, status). Viewing the actual contents of a resume or profile requires a logged reason and is recorded in an immutable audit trail. Administrative access is limited to running the service and is not used for any other purpose.

If you opt in — separately from creating an account — we'll send occasional product updates. This is a distinct consent: signing up for Kiwiply does not subscribe you. We use double opt-in (you confirm via email), record when and where you consented, and include a one-click unsubscribe link in every message. Service emails (e.g. account activation, password reset) are sent regardless, as they're necessary to operate your account.

When you submit a bug report (from the website or the extension), we collect your message and, only if you leave the consent box ticked, the page address and basic browser information to help us debug. Reports may contain personal information, so they are access-controlled, used only to fix and improve the service, and retained no longer than needed.

We keep your data while your account is active. You can permanently delete your account and all associated data — profile, resumes (including stored files), and application activity — at any time from your account settings. Deletion is immediate and cannot be undone. The one exception is billing: if you have ever paid for Pro, we are required to keep basic records of the transaction (amount, date, plan) for tax and accounting purposes, and our payment processor keeps its own records under its own policy. Those records contain no profile, resume or application data — see Payments above.

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data. You can view and edit your profile and resumes directly in the app, download a copy of your data from your account settings, and delete everything there too. For any other request, contact us.

The Kiwiply browser extension fills application forms on the page you're viewing using your saved profile and the resume you pick. It reads the current page only to match and fill fields, stores a local copy of your data for offline use, and syncs with your account. It does not read pages you aren't filling and does not submit applications for you.

We use Google Analytics to understand how Kiwiply is used — which features people reach and where the experience breaks — so we can improve it. We send only anonymous, aggregate events(for example "a resume was saved" or "the board was viewed"), never your name, email, profile, resumes, or the specific jobs you apply to. In the browser extension this is opt-out in Settings; on the website it is opt-in — it loads only after you accept the cookie banner, and never if you decline.

Separately, when you're signed in, the extension reports fill-quality countsto our own server after each autofill: which job-application system the page uses (a fixed name like "Workday", or "other"), and how many fields were found, filled, left empty, or changed by you afterwards. It never sends a field's value or label, or the address of the page, and we store these counts without any link to your account. The same extension setting turns it off.

We use first-party http-only cookies strictly to keep you signed in — these are essential and always on. Our analytics (above) also sets first-party cookies to count visits and distinguish sessions; on the website these load only after you accept them in the cookie banner, and you can decline. We do notuse advertising cookies and we don't sell your data.

The Kiwiply browser extension's use of data received through it adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension collects only what is needed for its single purpose — filling in job applications from your saved profile and the resume you choose — and transfers it only to your own Kiwiply account, never to advertising networks, data brokers, or credit-assessment services, and never for training any general-purpose model.

Kiwiply is operated by AutomoraLab LLC. Questions about this policy or your data? Email support@kiwiply.com.