ValidProfile Browser Extension - Privacy Policy

Effective date: June 18, 2026 · Version: 1.0.6

This Privacy Policy describes how ValidProfile ("ValidProfile", "we", "our", "us") collects, uses, discloses, stores, and otherwise processes information in connection with the ValidProfile browser extension (the "Extension") and ValidProfile applications that let you connect social accounts, business pages, and professional profiles you are authorized to manage (the "Connected Accounts features").

For this Extension, the service operator is PVH Software Solutions Pvt Ltd.

Important summary

• The Extension can access job pages to extract job details required for features such as ATS matching, resume tailoring, autofill, and assisted applications.
• The Extension performs apply-assistance actions only when triggered by your interaction and consent.
• We do not sell personal information.
• We do not share personal information for third-party advertising.

1. Scope and applicability

This Privacy Policy applies to candidate users who install or use the Extension with a ValidProfile account and to users who use ValidProfile applications to connect social accounts, business pages, or professional profiles they are authorized to manage. The Connected Accounts features may be provided through a separate ValidProfile application. Third-party services, including LinkedIn and employer career websites, are governed by their own terms and privacy notices.

2. Information we collect

• Account credentials and sign-in data: When you sign in, your identifier (such as email or username) and password are transmitted to the ValidProfile API to authenticate your account and issue session tokens.
• Session and token data: Access tokens, refresh tokens, sign-in state, and certain settings are stored in your browser profile using chrome.storage.
• Resume and profile data: Resume content, profile fields, skills, and preferences fetched from your ValidProfile account for ATS scoring, resume tailoring, cover letter generation, and form autofill.
• Job page content: Job posting details (including job title, company, and description text) from pages you view may be sent to ValidProfile servers when you invoke ATS scoring, tailoring, tracker, or AI chat features.
• LinkedIn session cookies and related session data: Subject to your permission and extension host permissions, the Extension may read LinkedIn cookie/session data in order to synchronize session context with ValidProfile and perform LinkedIn search or connection actions that you request.
• Local chat history: Assistant chat messages may be stored locally on your device unless and until cleared.
• Technical and diagnostic data: Limited telemetry (for example extension version, request status, and browser environment details) may be processed for reliability, abuse prevention, and troubleshooting.

3. Chrome permissions and page access

• The Extension may request host permissions for job boards, employer career pages, and LinkedIn where required for user-requested features.
• The Extension may use storage permissions to keep session state, preferences, and feature settings.
• If cookie/session access is enabled in browser permissions, the Extension may read limited session context needed for LinkedIn-dependent features you choose to run.

4. Data we do not intentionally collect

• We do not intentionally collect payment card data through the Extension.
• We do not intentionally collect government-issued identity numbers unless you explicitly add them to your own profile content.
• We do not sell personal information and we do not use personal data for third-party ad targeting.

5. How we use information

• To authenticate users and maintain account sessions.
• To provide requested features, including ATS scoring, resume generation, tailoring, tracker, LinkedIn tools, autofill, and mock interview support.
• To process job content that you submit through Extension actions.
• To secure services, prevent misuse, investigate incidents, and resolve errors.
• To comply with legal obligations and enforce contractual terms.

We do not sell personal information and we do not share personal information for third-party behavioral advertising.

6. Job application assistance and consent

• The Extension is designed to assist with applications and form filling based on your actions.
• You remain responsible for reviewing and confirming details before final submission on third-party sites.
• We do not claim control over hiring decisions made by employers or platforms.

7. Data recipients and processing locations

• ValidProfile systems: Data is sent to ValidProfile API infrastructure, including the default endpoint https://teams.validprofile.com/api, to process account and feature requests.
• LinkedIn: Data and requests may be sent to LinkedIn domains (including linkedin.com) when you use LinkedIn-dependent functionality while signed in to LinkedIn.
• Employer career sites: Page content may be read locally in your browser for job detection and autofill support. Such data is not transmitted by default, except where required for a feature you explicitly trigger.

8. Legal basis for processing (where applicable)

• Performance of contract: where processing is necessary to provide requested Extension services.
• Consent: where you grant optional permissions, including certain LinkedIn access permissions.
• Legitimate interests: for security, service integrity, diagnostics, and product improvement.
• Legal obligation: where processing is required by applicable law.

9. Storage, retention, and security

• Auth tokens, local settings, and chat history are stored in your browser profile and may be removed by signing out, clearing extension storage, or uninstalling the Extension.
• API traffic is transmitted over HTTPS/TLS encrypted channels.
• We apply reasonable technical and organizational safeguards designed to protect personal information.
• Server-side records are retained only for as long as needed for service delivery, legal compliance, dispute resolution, and legitimate business operations.

10. User choices and controls

• You may sign out within the Extension to clear locally stored session data and chat history.
• You may uninstall the Extension at any time.
• You may manage host permissions and site access through browser extension settings.
• LinkedIn features require active LinkedIn authentication in the same browser profile.

You can also disable or remove extension permissions from Chrome extension settings at any time.

11. International data transfers

Depending on your location, information may be processed in jurisdictions outside your country of residence. Where required by applicable law, appropriate safeguards are implemented for cross-border transfers.

12. Privacy rights

Subject to applicable law, you may have rights to request access, correction, deletion, restriction, objection, and/or data portability. To submit a request, contact us using the details below. We may require reasonable verification of identity before processing your request.

To request account or personal data deletion, email support@validprofile.com from your registered account email.

13. Automated decision-making

The Extension provides recommendations and assistance tools, but it does not make final employment decisions. Final hiring or rejection decisions are made by employers or third-party platforms.

14. Third-party services

The Extension may interact with third-party services, including LinkedIn and employer websites, to provide features requested by you. Third-party handling of data is governed by their own terms and privacy policies.

15. Third-party policy references

• Google Chrome Web Store Developer Terms: https://developer.chrome.com/docs/webstore/terms/
• Chrome Web Store Program Policies: https://developer.chrome.com/webstore/program_policies

16. Children's privacy

The Extension is not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16.

17. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. Material updates will be reflected by revising the Effective date and Version displayed on this page.

18. Contact information

For questions, requests, or concerns regarding this Privacy Policy: Email: support@validprofile.com

19. Connected social accounts and business pages

ValidProfile may allow you to connect social accounts, business pages, and professional profiles that you are authorized to manage.

Information we access: When you connect an account and grant permission, we may receive the account or page name, profile image, account identifiers, access tokens, posts and media, comments, and available engagement or performance metrics. The information available depends on the permissions you grant and the features you use.

How we use it: We use this information to connect and display your accounts, create or publish content you request, retrieve posts and performance information, and manage interactions where the relevant permissions are available. We also use it to maintain the connection, troubleshoot errors, and protect the service.

How information is stored and shared: Access tokens are stored securely and used to communicate with the connected service. Information may be processed by service providers that support our infrastructure and operations, and shared when required by law. We do not sell personal information or share it for third-party behavioral advertising.

Your choices: You can disconnect an account through ValidProfile or revoke the app’s access in the connected service’s settings. Revoking access stops future access, but does not automatically delete information already stored by ValidProfile.

Retention and deletion: We retain connected-account information only as long as needed for the purposes described in this policy, subject to legal and operational requirements. To request deletion of your connected-account information, email support@validprofile.com from your registered account email. Please identify the connected account in your request. We may ask for information needed to verify your identity and locate the data.

This Privacy Policy is provided for transparency regarding data practices associated with the Extension and Connected Accounts features.

For connected Meta accounts, see our data deletion instructions.