OfferGrad Privacy Policy
Privacy product-controls update 16 October 2026; the historical authorisation evidence is retained.
1. About this policy
1.1 This policy explains how Zeyu Chen (ABN 30 801 375 193), trading as OfferGrad ("OfferGrad", "we", "us") collects, uses, discloses and protects personal information when you use OfferGrad, including our website, web application, Chrome extension and connectors for third-party AI assistants (the "Service").
1.2 We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).
1.3 Terms such as "Application", "Authorisation", "Autopilot", "Connected AI Assistant", "Connector" and "Profile Facts" have the meanings given in our Terms of Service.
2. Summary
| Key points |
|---|
| We collect the information needed to find roles and prepare applications for you, and — only if you authorise it — submit them. |
| We do not sell your personal information, use it for advertising, or use it to train AI models. |
| Recorded facts take priority. Supported answers may also use disclosed conservative rule defaults, labelled as defaults rather than verified information you supplied. |
| We share application information with an employer only for applications you authorise. |
| We use service providers, including AI model providers, several of which are outside Australia. |
| Connecting an AI assistant is optional. You control what it can do and can disconnect at any time. |
| You can access, correct, export and delete your information, and withdraw your authorisations. |
3. The personal information we collect
3.1 Account information: name, email address, sign-in records and account settings. Passwords are handled by our authentication provider and stored only in hashed form.
3.2 Profile Facts: your resume and your answers to our questionnaire, which may include: visa subclass and expiry date; work rights and any work restrictions; sponsorship needs; education and employment history; current city, preferred locations and willingness to relocate; availability and notice period; salary expectations; driver licence status; years of experience; English test results; how you heard about roles; employers you have worked for, interviewed with or been placed with, and people you know at an employer; work-arrangement preferences; outside business activities; citizenships, permanent residencies and export-control status; career motivation and experience statements; contact preferences; phone number, current country and legal name; LinkedIn, GitHub and portfolio links; restraint-of-trade obligations; and the employment types and seniority you are seeking.
3.3 Application information: the roles considered for you, match assessments and labels (including "Potential Match"), the answers and materials prepared for each Application, the source used for each answer, snapshots of the structure of application forms (questions, options and which fields were filled), submission status and outcomes, and tasks that need your attention.
3.4 Authorisation and consent records: the version and text of each Authorisation or consent you give or withdraw, the time, your IP address and browser type.
3.5 Extension information: while you use the Chrome extension on supported sites, the content of application forms needed to fill them, extension settings stored in your browser, connection tokens and error codes. We do not collect your browsing history or content from other websites.
3.6 Connected AI Assistant information: which assistant and provider you connected, the permissions you approved, authorisation tokens, and a log of each request (time, action, the information needed to perform it, and the result). We do not collect your conversation with the assistant beyond the specific request sent to us.
3.7 Technical information: device and browser type, IP address, timestamps, and performance and error data. We aim not to include application content in operational logs.
3.8 Payment information (if paid plans are introduced): our payment provider processes your card details; we receive payment status and limited billing details, not full card numbers.
3.9 Communications: messages you send us, such as support requests and feedback.
3.10 Information about other people: if you tell us about people you know at an employer, or include referees in your resume, you must have their permission to share their details for your job applications.
4. Sensitive information
4.1 We do not ask for health information, criminal history, racial or ethnic origin, religious or political beliefs, sexual orientation, biometric or genetic information in your profile.
4.2 When an employer asks optional demographic questions, the Service chooses "prefer not to say" or an equivalent option. If such a question is required and has no such option, the Service pauses and asks you. If you choose to answer it yourself, we collect that answer with your consent and use it only for that Application.
4.3 If your resume or statements contain sensitive information (for example, about a disability), we treat your upload as consent to use it for your Applications. You can remove it at any time.
4.4 Citizenship, permanent residency and visa details are not "sensitive information" under the Privacy Act, but we treat them with extra care because they affect your eligibility for roles.
5. How we collect personal information
- From you, when you register, complete your profile, upload documents, change settings, answer questions or contact us.
- Through the extension, from the application forms you ask us to complete on supported Employer Platforms.
- By generating it, when our systems (including AI models) create information about you from other information — for example match assessments, prepared answers and cover letters. We treat this generated information as information we collect.
- From a Connected AI Assistant, when it sends a request to us at your direction.
- From service providers, such as our payment provider (payment status).
Job listings are collected from employers' public career websites; they are mostly about roles, not individuals.
6. How we use personal information
6.1 We use personal information to:
- create, secure and administer your account;
- find, assess and rank roles against your preferences and Profile Facts;
- prepare answers, cover letters and other materials, fill application forms and, if you grant L2, submit Applications;
- show you the status of your Applications and tasks that need your attention;
- respond to requests from a Connected AI Assistant that you have connected;
- apply limits (daily, per-employer and AI-cost limits), prevent duplicate applications, and detect errors, misuse and security incidents;
- record your Authorisations and consents as evidence of your instructions;
- provide support, communicate with you about the Service and, with your consent where required, send you marketing;
- improve the Service using de-identified or aggregated information and, only with your consent, staff review of your records (section 12); and
- comply with our legal obligations and resolve disputes.
6.2 We do not sell personal information, use it or transfer it for personalised or interest-based advertising, share it with data brokers, or use it to assess creditworthiness or for lending.
7. AI and automated decisions
7.1 AI models. We use large language models provided by third parties, accessed through model gateways such as OpenRouter, to: extract requirements from job descriptions; assess how well a role fits your profile; classify application questions; prepare answers, cover letters and statements from your Profile Facts; and check prepared answers for consistency. We send only the parts of your Profile Facts, resume, job description and form content needed for each task.
7.2 No training. We do not use your information to train AI models, and we choose provider settings that prevent our providers from using it for training and limit how long they keep it, where those settings are available.
7.3 Answer controls. Legal-identity answers use recorded facts or disclosed conservative rule defaults. The selected answer is checked for contradiction with explicit information you supplied. Missing source or proof metadata does not by itself prevent a conservative truthful answer. These checks are not independent legal review or a certificate of legal or immigration eligibility. Your profile and resume take priority. Where applicable information is missing, disclosed conservative rules may answer: sponsorship required; no undeclared permission, citizenship or permanent residency for a known country; prefer not to say for voluntary statistics; a truthful No or lowest skill/employment option; Negotiable salary text or a stated job minimum with supported units; and short neutral ordinary text. Sources are marked OWNER_RULE_DEFAULT or generated content, not verified facts you supplied. We do not invent experience, qualifications or licences. Before starting a fill, read these rules and add or correct information in your profile and Answer Library. Supplied or uncertain records are not overwritten with defaults. Unsupported options, missing documents, logins, security challenges or video tasks may still need you.
7.4 Automated decisions. Some decisions are made by computer programs using your personal information and could significantly affect your interests, because they influence which employment opportunities you are put forward for and what is said in your Applications.
- Personal information used: your Profile Facts, resume, job preferences and exclusions, Authorisation settings, and your previous Applications through the Service.
- Decisions made solely by computer programs while Autopilot is on: which roles are selected, ranked, labelled Potential Match or excluded; the answers entered in application forms, including the options selected; whether an Application is paused for your input; and, if you have switched on automatic submission, whether an Application is submitted.
- Decisions where computer programs do things substantially and directly related to a decision: match explanations and prepared Applications that you review in confirmation mode before deciding whether to submit.
7.5 You can see why a role was selected, exclude roles or employers, correct your Profile Facts, turn off automatic submission, and contact us to ask about or challenge an automated decision.
7.6 We do not make hiring decisions. Employers and Employer Platforms may use their own automated tools under their own policies.
8. Who we disclose personal information to
8.1 Employers and Employer Platforms — the content of each Application you authorise, including your resume, cover letter and answers. Once received, they handle it under their own privacy policies.
8.2 Service providers who help us operate the Service — hosting, database and storage, AI model processing, payments, security and support — under contracts that limit their use of the information (see section 10).
8.3 Connected AI Assistants that you choose to connect, at your request (see section 9).
8.4 Others where appropriate: our professional advisers, insurers and auditors; a purchaser or successor of our business (we will notify you); and courts, regulators or law-enforcement bodies where required or authorised by law.
9. Connected AI Assistants
9.1 Connecting an AI assistant (for example ChatGPT or Claude) to OfferGrad is optional. You choose the assistant and the permissions it has on our consent screen.
9.2 What we receive from the assistant: a token identifying your account and the assistant, and the content of each request that is needed to perform it — for example "pause Autopilot", a preference you asked to change, or your answer to a pending question. We do not request, collect or store your wider conversation with the assistant.
9.3 What we send to the assistant: only the information needed to respond to a request, within the permissions you approved — for example summaries of your Applications, pending questions (which may include job details and parts of your Profile Facts relevant to the question) and suggested answers for a form the assistant is completing. We do not send passwords, payment card details or government identifiers through a Connector. Your Legal-identity facts are shared only if you approve the profile-reading permission, and they can be changed only in OfferGrad.
9.4 What happens next: the assistant provider receives and handles this information under its own privacy policy and settings. It may keep the information in your conversation history and may be located outside Australia, including in the United States. We cannot recall information once the provider has received it. Please review the provider's privacy settings, including whether it uses conversations to train its models.
9.5 Your controls: you can view the request log and disconnect an assistant at any time in Settings. Disconnecting revokes its access immediately. Request logs are kept for the period in section 14.
9.6 Before you connect, we will ask for your consent to this overseas disclosure on the connection screen, including a statement about the Privacy Act.
10. Overseas disclosure and service providers
10.1 Some of our service providers store or process information outside Australia. The main providers and locations are:
| Provider | Purpose | Location(s) |
|---|---|---|
| Supabase | Database, authentication and file storage | Australia (Sydney region) |
| Vercel | Website and application hosting | Australia (Sydney region) and United States |
| OpenRouter | Access to AI models | United States |
| AI model providers accessed through OpenRouter (for example Anthropic) | AI processing of job descriptions, forms and profile excerpts | United States |
| Stripe (if paid plans are introduced) | Payments | Australia and United States |
| Connected AI Assistant providers (only if you connect one) | Responding to your requests through the assistant | Per provider, including the United States |
10.2 For our service providers, we take reasonable steps, including contractual terms, to ensure they handle personal information consistently with the APPs. For Connected AI Assistants, we rely on your consent as described in section 9.
11. The OfferGrad Chrome extension
11.1 The extension requests the following browser permissions: access to OfferGrad's own website and to supported Employer Platform domains (currently Greenhouse, Lever and Ashby career sites), to read and fill application forms; "tabs" and "activeTab", to open and manage application tabs; "storage", to keep your extension settings; and "alarms", to schedule work.
11.2 On supported pages, the extension reads form questions, options and page status, fills in answers and records the structure of the form. It sends this information to our servers to prepare and track your Applications. It does not collect your browsing history, keystrokes on other sites, or content from other websites.
11.3 The use of information received from the extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
12. Staff access and quality review
12.1 Our staff do not view your Profile Facts or Application content except: (a) with your explicit consent — for example when you ask for support, or if you switch on the optional quality review setting; (b) where necessary for security or to investigate fraud or misuse; (c) to comply with the law; or (d) in aggregated or de-identified form.
12.2 Our systems automatically generate quality records (for example, tables showing how each question was answered). Unless you have consented to quality review, staff see these records only in de-identified form or in the circumstances in 12.1.
13. Security
13.1 We use measures such as encryption in transit, access controls, row-level database security, private file storage, secure secret management and monitoring. We limit staff access as described in section 12.
13.2 No online service is completely secure. If we experience a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
14. How long we keep information
| Information | Retention |
|---|---|
| Account and Profile Facts | Until you delete them or close your account; removed from backups within 30 days |
| Application records (prepared answers, status, sources) | For as long as your account is open, unless you delete them earlier |
| Form structure snapshots and technical diagnostics | 12 months |
| Authorisation and consent records | As long as needed to show what you authorised and to meet our legal obligations |
| Connected AI Assistant request logs | 12 months |
| Payment records | 7 years, as required for tax purposes |
| Support communications | As long as needed to deal with your request |
14.1 When we no longer need information, we take reasonable steps to delete or de-identify it. Employers keep copies of submitted Applications under their own policies; we cannot delete those.
15. Your rights and choices
- Access and correction: you can view and update your Profile Facts in the Service, or ask us for access to or correction of other information we hold.
- Export and deletion: you can export your data in a machine-readable format and close your account in Settings.
- Authorisations: you can withdraw L1 or L2, or turn off automatic submission, at any time.
- Connected AI Assistants: you can disconnect any assistant at any time.
- Marketing: you can unsubscribe from marketing at any time.
- Anonymity: because job applications must identify you, it is not practicable to use the Service anonymously or under a pseudonym.
16. Marketing and cookies
16.1 We send service messages that are necessary to operate your account. We send marketing only where permitted by the Spam Act 2003 (Cth), identify ourselves in each message and include a simple way to unsubscribe.
16.2 We use cookies and similar technologies that are necessary for sign-in, security and operating the Service. We will use optional analytics cookies only with your consent.
17. Children
17.1 The Service is for people aged 18 or over. If we learn that we hold information about a person under 18, we will delete it.
18. Complaints
18.1 If you have a privacy question or complaint, contact our privacy officer at hello@offergrad.com. We will respond within a reasonable period, usually within 30 days.
18.2 If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au, phone 1300 363 992).
19. Changes to this policy
19.1 We will publish any update with a new version date. If a change materially expands how we use or disclose your information, we will notify you in advance and, where required, ask for your consent.
20. Contact
Privacy officer, OfferGrad (Zeyu Chen). Email: hello@offergrad.com.