Privacy

Plainhand stores your sign-in email, profile, resume, saved roles, drafts, generated files, application records, connected-app grants and help requests in its hosted Postgres workspace and Supabase Auth. Sessions use secure cookies; workspace access requires your account.

Your connected AI chat can read workspace context and save drafts through tools you authorize. Its provider handles that context under its own terms. Review connector permissions before connecting. Plainhand does not claim audited compliance.

Browser extension. The Plainhand extension reads a page only when you click one of its buttons on that page. Save this job sends the page address, company, role and posting text to your workspace. Fill this page sends the page address and the form's field labels and choices, fills fields with answers from your approved application, and attaches your approved resume and cover letter files. Sensitive questions are left for you, and it never submits an application. It keeps its Plainhand sign-in in your browser's extension storage. It does not read your browsing history, does not run on pages you have not clicked it on, and does not sell or share data or use it for advertising. Plainhand's use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Use workspace export in Settings for your saved state, or download individual packet files. Delete your account to remove live workspace records, sessions and grants and request deletion of the Supabase Auth user. Copies already exported or shared with an AI provider remain with those recipients.

Saved workspace data and help requests remain until account deletion or removal. Sessions expire after 30 days; expired session and rate-limit records are purged daily. When encrypted operational backups are enabled, copies are scheduled to expire after 14 days; deletion is not immediate in backups. Backups must be configured by the operator before launch.