Browser Extension Privacy Policy

1. About this policy

This privacy policy explains how the "Save to Tarve — Job Tracker" browser extension ("the Extension") collects, uses, and protects your data. The Extension is published by Tarve ("we", "us", "our") and is designed to help you save job listings from supported job boards directly to your Tarve job tracker.

This policy should be read alongside our main Privacy Policy, which covers the broader Tarve platform.

2. Data we collect

The Extension collects only the minimum data necessary to function:

• Authentication tokens: When you sign in, your email address and an authentication token are stored locally on your device using Chrome's local storage API. Tokens are never synced across devices.
• Job listing data: When you click "Save to Tarve", the Extension extracts publicly visible job details from the current page, including: job title, company name, location, salary, and job description. This data is only collected when you actively choose to save a job.
• Page URL: The URL of the job listing page you choose to save.
• Saved job URLs: A list of URLs you have previously saved is stored locally to prevent duplicate saves. This list stays on your device.

3. Data we do NOT collect

The Extension does not:

• Track your browsing history or activity.
• Collect data from pages you do not actively save.
• Access your personal data on job board sites (e.g., your profile, applications, or messages).
• Use cookies or tracking technologies.
• Collect analytics or usage data.
• Share any data with third parties.
• Sync authentication tokens or personal data across devices.

4. How we use your data

The data collected by the Extension is used solely to:

• Authenticate you with your Tarve account.
• Extract job details from the page you are viewing when you click "Save to Tarve".
• Send the extracted job data to the Tarve API at api.tarve.co.uk to save it to your job tracker.

5. Where your data is stored

• On your device: Authentication tokens and saved job URLs are stored locally using Chrome's chrome.storage.local API. This data never leaves your device except when making authenticated API requests to Tarve.
• On our servers: Job data you choose to save is transmitted securely over HTTPS to our API at api.tarve.co.uk and stored in your Tarve account. See our main Privacy Policy for details on server-side data handling.

6. Permissions explained

The Extension requests the following browser permissions:

• storage: To securely store your authentication token and saved job URLs locally on your device.
• activeTab: To read job listing data from the page you are currently viewing when you click the extension. This permission is only active for the current tab.
• Host permissions (specific job boards): To inject the "Save to Tarve" button on supported job board websites (LinkedIn, Indeed, Reed, Glassdoor, Totaljobs, CV-Library, and NHS Jobs) and to communicate with the Tarve API.

7. Data security

We take the following measures to protect your data:

• All communication with our API uses HTTPS encryption.
• Authentication tokens are stored locally only (not synced across devices).
• Tokens are automatically cleared when you sign out.
• Token expiry is checked locally before any API request.
• The Extension only accepts messages from its own context, preventing cross-extension attacks.
• A Content Security Policy restricts what code can run within the extension.

8. Data retention

Local data: Authentication tokens and saved URLs are stored until you sign out or uninstall the Extension. Signing out clears all locally stored data.

Server data: Saved job listings are retained in your Tarve account until you delete them or close your account. See our main Privacy Policy for full details.

9. Your rights

Under UK GDPR, you have the right to:

• Access the data stored by the Extension (sign in to your Tarve account to view saved jobs).
• Delete locally stored data by signing out of the Extension or uninstalling it.
• Request deletion of server-side data by contacting us.
• All other rights as described in our main Privacy Policy.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the Extension or our website. Your continued use of the Extension after changes constitutes acceptance.

11. Contact

If you have questions about this privacy policy or the Extension's data practices, contact us at support@tarve.co.uk.