GenZloth Privacy Policy

Last updated: June 12, 2026

GenZloth ("the extension", "we", "us") is a Chrome extension that helps job seekers draft personalized job-application emails from a job posting and send them from the user's own email account. This policy explains what data the extension handles, where it is sent, and how it is protected.

1. Single purpose

GenZloth has a single purpose: to draft and send tailored job-application emails. All data described below is used only to deliver that functionality.

2. Data we handle

• Account information: if you create a GenZloth account, we collect your email address and password (passwords are transmitted over a secure connection and stored only in hashed form on our server).
• Profile information: details you choose to enter — your name, email, phone number, location, LinkedIn URL, skills, work experience, education, and projects — used to personalize generated emails.
• Resumes: resume files you upload, stored so they can be attached to outgoing emails.
• Job applications: records of the jobs you draft emails for (such as company and role) for tracking within the extension.
• Google account data: if you connect Google, we use Google OAuth to obtain an access token and your email address so the extension can send email from your Gmail account.
• AI provider API keys: if you use "bring your own key", your OpenAI or Google Gemini API key is stored only on your device using chrome.storage.local. It is never transmitted to our servers.
• Drafts and settings: your in-progress email drafts and preferences are stored on your device via chrome.storage.

3. Where your data is sent

• To AI providers (OpenAI / Google Gemini): the text needed to generate your email — the job posting, your profile details, and the selected template — together with your own API key. This is sent directly from the extension to the provider you chose.
• To Google (Gmail and OAuth APIs): the composed email (recipient, subject, body, and any attached resume) so it can be sent from your account, plus authentication requests to sign you in, read your email address, and revoke access on sign-out.
• To our backend: your GenZloth account credentials, profile data, resumes, and job-application records, so they can be saved to your account and synced across sessions.

4. What we do not do

• We do not sell or transfer your data to third parties.
• We do not use or transfer your data for any purpose unrelated to the extension's single purpose.
• We do not use your data to determine creditworthiness or for lending purposes.
• We do not track your browsing history or activity on other websites.

5. Data storage and security

Local data (drafts, settings, and AI API keys) stays on your device in Chrome storage. Account data, profiles, resumes, and job-application records are stored on our server and protected with access controls and authenticated requests. Data sent to Google and your chosen AI provider is governed by their respective privacy policies.

6. Data retention and deletion

You can remove your AI API key at any time from the extension's Settings. You can request deletion of your GenZloth account and associated data (profile, resumes, job applications) by contacting us at the address below.

7. Third-party services

• OpenAI Privacy Policy
• Google Privacy Policy (Gemini, Gmail, and OAuth)

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about this policy or requests to delete your data: solvifyx@gmail.com.