Chrome extension privacy policy

1. Who we are and what this covers

RecruiterDesk Capture (the "extension") is published on the Chrome Web Store by N53 Techworks LLP, under the PeopleCap brand, with its registered office at N53 Techworks LLP, 19th Floor, Tower-B, Alphathum, Sector-90, Noida, Uttar Pradesh 201305, India. It works only with a RecruiterDesk account: a signed-in member connects it to their workspace from Settings in the RecruiterDesk app. In this policy, "we", "us" and "our" refer to N53 Techworks LLP, and "you" refers to the person using the extension.

2. What the extension can and cannot access

The extension asks Chrome for three permissions and uses each for one job:

• Active tab. When you click the extension's icon, Chrome gives it the address (URL) of the tab you are on, so it can fill in the profile address. It gets nothing from the tab until you click, and nothing but the address when you do.
• Side panel. To show the capture form beside the page.
• Storage. To keep your sign-in on this browser, described in section 4.

It also has permission to connect to RecruiterDesk's own servers, and to no other website.

The extension does not:

• read, copy, scrape or change the content of any page you visit;
• run anything inside the pages you visit, or automate clicks, scrolling or navigation;
• read your browsing history, other tabs, cookies, keystrokes, passwords or downloads;
• work in the background or on a schedule: it acts only when you use it;
• contain analytics, advertising or tracking code, or send data to any third party.

3. What the extension sends, and where

Everything the extension sends goes over an encrypted (HTTPS) connection to RecruiterDesk, into the workspace you connected it to, and is signed with a key that identifies you as the member who sent it. It sends:

• A duplicate check. When the side panel shows a profile address, the extension sends that address to RecruiterDesk to ask whether the person is already in your workspace. RecruiterDesk answers with only that person's name, record reference and when the record was last updated, if there is a match.
• A capture, when you click Save. The profile address, plus whichever you provide: the name, email address and phone number you type, the profile text you paste, and the CV file you choose (PDF, DOC or DOCX).

RecruiterDesk reads pasted text and CV files with the same resume reading it uses for every other resume, which can use our AI provider, OpenAI, as a processor bound by contract, as described in our Privacy policy. Contact details are taken only from what you type, never from pasted text or a file.

4. What the extension keeps in your browser

• Your connection, kept in Chrome's local extension storage until you disconnect: a sign-in key for this browser, your name, your email address and your workspace's name, so the panel can show who is connected.
• The last profile address you clicked on, kept in Chrome's session storage and cleared when you close the browser.

Nothing else is stored by the extension. Candidate details you type, paste or attach are not kept in the browser after they are sent.

5. How the data is used

We use the data the extension sends only to provide its single purpose: saving a candidate to your own RecruiterDesk workspace and telling you whether they are already there. We do not sell it, use it for advertising, use it to decide creditworthiness or lending, or transfer it except as needed to provide that purpose, to comply with the law, or as part of a merger or acquisition with notice to you. We do not let people read it except with your agreement, for security, or to comply with the law.

The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

6. Who is responsible for candidate data

A candidate saved through the extension becomes part of your workspace's talent database, like any other record you add. Your organisation is the controller (the data fiduciary, in India's Digital Personal Data Protection Act, 2023) of that record, and we are your processor, as set out in our data protection note. You are responsible for having a lawful basis to hold the data and for following the terms of any website you use. A candidate saved through the extension starts with consent recorded as not yet documented: a profile you found is not consent, so RecruiterDesk gives you a consent request to send when you first contact the person.

7. Your choices, retention and deletion

• Disconnect a browser at any time from Settings, Profile, Chrome extension in RecruiterDesk. Its sign-in key stops working at once. A workspace owner or admin can disconnect any member's browser, and a member's browsers are disconnected automatically when their access ends.
• Remove the extension from Chrome to delete everything it keeps in your browser.
• Candidate records are kept in your workspace until you, or someone in your workspace, deletes them, or until your workspace is closed, as described in our Privacy policy. The exports and erasure tools for individual people apply to them like any other record.

8. Security

Data is encrypted in transit. A browser's sign-in key is stored on our side only as a one-way hash, works only for saving captures and the duplicate check in its own workspace, and can be revoked at any time. Each member is limited in how many captures they can save in a day. Workspace data is isolated from every other workspace at the database level.

9. Changes to this policy

If we change what the extension accesses or sends, we will update this policy, and its date above, before the change reaches the Chrome Web Store.

10. Contact

For questions about this policy, write to privacy@recruiterdesk.io. To raise a data-protection grievance, use dpdp.grievance@recruiterdesk.io. By post: N53 Techworks LLP, N53 Techworks LLP, 19th Floor, Tower-B, Alphathum, Sector-90, Noida, Uttar Pradesh 201305, India.