Privacy Policy

Your privacy is critically important to us. This Privacy Policy explains how Professional Vault collects, uses, and protects your personal information.

Information We Collect

We collect information you provide directly, including:

  • Account information (name, email, password)
  • Documents you upload to our service
  • Information extracted from your documents by our AI
  • Usage data and preferences

How We Use Your Information

We use your information to:

  • Provide and improve our services
  • Process and analyze your documents
  • Send you notifications about your account
  • Ensure the security of our platform

Google Drive Integration

When you connect your Google account to Professional Vault, we may request access to your Google Drive to enable document import functionality.

What We Access

  • Your Google Drive files and folders (read-only access for importing)
  • File metadata including names, types, and modification dates
  • Your Google account email address and profile information

How We Use Google Data

  • To display your Google Drive files for selection and import
  • To import selected files into your Professional Vault account
  • To authenticate your identity when signing in with Google

We do NOT modify, delete, or share your Google Drive files. Access is read-only and used solely for importing documents you explicitly select.

Google Data Storage

  • Google OAuth tokens are encrypted using industry-standard encryption and stored securely
  • Imported files are copied to your Professional Vault storage; original Google Drive files remain unchanged
  • You can disconnect Google Drive access at any time from your account settings

Limited Use Disclosure

Professional Vault's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for:

  • Serving advertisements or retargeting
  • Selling or transferring data to third parties
  • Training AI models (except for features you explicitly use within our app)
  • Any purpose other than providing our document management services to you

Chrome Extension

The ProfVault Form Filler Chrome extension helps you auto-fill job application forms using your profile data. This section explains how the extension handles your information.

Data Collected by the Extension

  • API Token - Your authentication token is stored locally in Chrome's secure storage to keep you logged in
  • Form Field Information - When you click "Fill Form", the extension reads form field labels, names, and types from the current page to match them with your profile data
  • Page URL and Title - Used to provide context for AI-powered form filling (e.g., company name, job title)
  • Cached Results - Previously filled form data is cached locally to save credits on repeat visits

How Extension Data Is Used

  • Form field information is sent to Professional Vault servers to match fields with your profile data
  • Our AI analyzes form questions and generates appropriate answers from your stored profile
  • Matched data is returned to the extension and filled into the form fields
  • Page context helps the AI tailor responses (e.g., customizing cover letter content for the specific company)

Extension Data Storage

  • Local Storage - Your API token and cached form results are stored only in Chrome's local storage on your device
  • Server Storage - Form field data is processed in real-time and is not permanently stored on our servers
  • Cache Expiration - Locally cached form results are automatically deleted after 7 days

Extension Permissions

The extension requires certain permissions to function:

  • Storage - To save your API token and cached results locally
  • Active Tab - To read and fill form fields on the current page
  • Scripting - To inject the form-filling functionality into web pages
  • Host Permissions - Access to job application sites (Greenhouse, Lever, Workday, etc.) to fill forms on those platforms

What the Extension Does NOT Do

  • Does NOT collect browsing history or track your activity across websites
  • Does NOT access form data unless you explicitly click "Fill Form"
  • Does NOT submit forms automatically - you always review and submit manually
  • Does NOT share your data with advertisers or third parties (except OpenAI for AI processing)
  • Does NOT store your passwords or sensitive financial information

Removing Extension Data

You can disconnect your account by clicking "Disconnect" in the extension popup. This removes your API token from local storage. Uninstalling the extension removes all locally stored data. To delete your profile data from our servers, use the account deletion option in your Professional Vault settings.

Third-Party Service Providers

We use the following third-party services to provide our functionality:

  • Google - Authentication and Google Drive integration
  • OpenAI - AI-powered document analysis and extraction
  • Amazon Web Services - Cloud infrastructure and storage
  • Stripe - Payment processing

Each provider processes only the minimum data necessary for their specific function and is bound by their respective privacy policies and our data processing agreements.

Data Security

We implement bank-level encryption and security measures to protect your documents. All data is encrypted in transit and at rest. We never share your documents with third parties without your explicit consent.

Your Rights

Under GDPR and CCPA, you have the right to:

  • Access your personal data
  • Request deletion of your data
  • Export your data
  • Opt-out of data processing

Contact Us

If you have questions about this Privacy Policy, please contact us at admin@myprofvault.com.

Last updated: February 14, 2026