Cygnet Privacy Policy

1) What data Cygnet may handle

Depending on which features you use, Cygnet may handle profile information such as your name, email, phone number, address, birth date, education history, work history, links, notes, resume files, parsed resume text, and extension preferences.

Cygnet also reads page and form metadata such as field labels, placeholders, input names, and surrounding structure on pages where autofill is used so it can match your saved data to the correct fields.

• Profile fields you enter in the extension or dashboard
• Resume files and parsed resume text if you upload resumes
• Extension preferences and panel state
• Saved login entries if you use the login-saving feature

2) Where data is stored

Your profile data and extension settings are stored in local browser extension storage on the browser where you use Cygnet. Cygnet does not rely on Chrome Sync for profile PII.

If you sign in to Cygnet and use sync features, your profile data and resumes are also stored in Cygnet's secured Supabase backend so they can appear on the web dashboard and sync across devices.

Saved login passwords are different: they are stored locally in the extension only, protected with local encryption and your passphrase, and are not uploaded to Cygnet's servers.

• Saved login passwords stay local to your browser extension
• Cygnet does not upload or read saved login passwords
• Profile data stays on your current browser unless you choose Cygnet account sync
• Profile and resume data may be stored in Supabase when you use Cygnet account sync

3) What Cygnet can access

If you only use local extension storage and do not use Cygnet account sync, Cygnet as a company does not receive your extension-only profile data or your saved login passwords.

If you sign in and sync your profile or resumes through Cygnet, that synced data is stored in our backend. Cygnet staff may access synced profile or resume data only when needed for user-requested support, security or abuse investigation, or legal compliance.

Cygnet cannot access your saved login passwords because those passwords are kept locally in the extension and are not sent to our backend.

4) How data is used and shared

We use data to provide autofill, account sync, dashboard editing, resume management, and related support and security functions.

We do not sell personal data and do not share profile data with advertising networks or data brokers.

• Google and Supabase are used for authentication and account-backed sync
• Supabase Storage is used for uploaded resume files
• If you use optional AI resume parsing, resume text may be sent to OpenAI for parsing
• Data is inserted into third-party job application websites only when you choose to autofill

5) Retention and user controls

Local extension data remains until you edit it, delete it, clear browser storage, or uninstall the extension.

Synced profile and resume data remains until you update or delete it from your account, subject to reasonable backup and operational retention.

• You can edit or delete profile data in the extension and dashboard
• You can delete uploaded resumes from the dashboard
• You can uninstall the extension to stop local extension processing
• You can sign out of your Cygnet account to stop backend sync on that browser

6) Chrome Web Store limited use

Cygnet uses synced profile and resume data only to provide the product features you choose, to maintain account sync and support, and to comply with legal obligations or protect against security and abuse issues. We do not use this data for advertising or sell it to data brokers.

Human access to synced data is restricted to user-requested support, security or abuse investigation, and legal compliance. Local-only saved login passwords are not available to Cygnet staff because they remain encrypted inside the extension on your device.

7) Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access controls and backend protections such as Row-Level Security where applicable.

However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. We recommend avoiding unnecessary sensitive data such as government IDs, financial account information, or similar secrets in profile notes.

8) Contact

For privacy questions, contact: