Privacy Policy
Last updated 12 August 2026
hirly finds job postings that fit you, writes a resume and cover letter for each one, and fills the employer’s application form in your own browser. Doing that means handling your resume and your contact details. This page says exactly what is collected, where it goes, and how to get rid of it.
What we collect
| Account details | Your email address, and your name if you give one. Used to sign you in and to head your tailored resume. |
| Your profile | Your resume text and file, phone number, location, LinkedIn URL, target roles, salary expectations, work preferences, and your answers to work-authorisation and sponsorship questions. You enter these during onboarding. |
| Job postings | The title, company, location, description and URL of postings we find for you, or that you open with the extension. |
| Application records | Which jobs you applied to, which form fields were filled (never the values), and whether a fill succeeded. If hirly submitted a job for you, a screenshot of the filled form taken the moment before submit is kept as evidence. Used to show your applications and to avoid filling the same job twice. |
| Screening answers | Answers you have given to employer questions, saved so you do not retype them. Legal attestations are never invented — an unanswered question stays unanswered. |
| Consent to submit | Whether you have granted hirly permission to submit an application on your behalf, and when, plus the browser and network address the grant was made from, so it can be evidenced later. Recorded only when you grant it; deleted if you revoke it. |
What the browser extension does
The extension runs only on job boards and application forms: the supported applicant tracking systems listed in its manifest, LinkedIn job pages, and hirly’s own site. On those pages it reads the job posting and the form’s fields so it can fill them.
It may also ask, once and only when you press the button in its popup, for permission to fill forms on employer sites it does not already recognise. That grant exists because a job you open from LinkedIn can send you to any company’s own site. You can decline, and everything else keeps working; you can revoke it at any time from Chrome’s extension settings.
The extension contains no analytics, no tracking, and no third-party code. It sends data to hirly’s own servers and nowhere else. It does not read pages outside the sites above, and it never submits an application for you — you review every form and press submit yourself.
What autonomous submission does
Separately from the extension, hirly can submit an application for you through a server-side process — not your browser. It only ever runs for one job at a time, only after you press Apply on that specific posting, and only for an account that has granted standing consent. It is never a sweep of your feed and never a standing rule that picks jobs on its own.
It fills the form the same way the extension does, using only answers you have given; it never invents an answer to a legal or screening question. Immediately before it presses submit it takes a screenshot of the filled form, kept as evidence and shown back to you on the application’s page — the screenshot, never the values.
Who else processes your data
We do not sell your data, and we do not share it for advertising. We use a small number of providers to run the service:
| Supabase | Database, file storage and authentication. Your profile, resumes and application records are stored here. |
| OpenAI | Writes your tailored resume and cover letter and drafts answers to screening questions. Receives your resume text and the job description for that purpose. |
| Railway | Runs the hirly application and its background worker. |
| trigger.dev | Runs the autonomous submission process, for accounts that have granted consent. Receives your profile, tailored materials and screening answers only for the one job being submitted. |
| Resend | Sends account emails, such as sign-in links. Receives your email address only. |
Employers receive whatever you submit on their own application form. That submission is yours: hirly fills the form, you review it and send it.
How long we keep it
Your profile and applications are kept while your account exists, because the product is not useful without them. Delete your account and they are deleted with it.
The extension stores a sign-in token and a cached copy of your profile in your browser so it can fill forms without a round trip. Signing out of the extension, or removing it, clears that.
Your choices
You can view and edit everything in your profile from your account settings, revoke the extension’s access at any time, and delete your account — which deletes your profile, resumes, cover letters, saved answers and application history.
To ask a question about your data, or to request deletion by hand, email [email protected].
Changes
If what we collect or who processes it changes, this page changes first, and the date at the top changes with it.