Yuqi Application Copilot is an assisted job-application tool. It processes only the information needed to scan a user-selected form, resolve approved answers, attach a resume, and fill the fields the user chooses. It does not submit applications on the user's behalf.
Information processed
- Application page content: visible labels, choices, control types, page title, and canonical HTTPS origin and path.
- Profile information: user-approved contact, location, education, experience, skills, work authorization, demographic answers, and recurring application answers.
- Resume files: the active private Resume Vault PDF or a one-time local PDF selected by the user.
- Authentication information: a short-lived yuqi.site access token retained in Chrome session storage.
- Operational information: workflow identifiers, resolution status, integrity metadata, and errors required to complete or troubleshoot the requested action.
The extension does not intentionally collect full browsing history, page screenshots, payment information, personal communications, or information from tabs the user has not selected for application assistance.
How information is used
Information is used only to identify fields on the selected application page, retrieve approved profile and resume data, resolve potential answers, fill user-approved fields, and maintain an auditable application workflow. Data is not sold, used for advertising, transferred to data brokers, or used for unrelated eligibility, lending, or credit decisions.
Storage and retention
The access token is kept in chrome.storage.session and cleared when the browser session ends. A bounded local cache may retain sanitized field classifications; it excludes passwords, resume files, immigration answers, and full page content. Private profile data and resume metadata are encrypted at rest by the authenticated yuqi.site Career service. Resume downloads use short-lived signed URLs and integrity verification.
Data sharing
The minimum required field metadata is sent to first-party yuqi.site MCP and Career services. Unfamiliar non-sensitive labels may be classified by a local Codex process or by the configured first-party model service when local classification is unavailable. Credentials, sensitive answers, resume files, and full page bodies are excluded from model prompts. Application information reaches a job application site only when the user chooses to fill that site's form.
Security and user control
Network requests use HTTPS. The MCP gateway enforces authentication and authorization, privileged operations are confirmation-gated, and security-relevant actions are audited. Users can review every resolved value, leave fields blank, use a local resume, sign out, or request deletion. CAPTCHA, MFA, legal terms, attestations, signatures, and final submission always remain manual.
Chrome Web Store Limited Use
Use of information received through Chrome APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only to provide or improve the extension's prominent application-assistance feature.
Contact
Questions or deletion requests may be sent to yuqi.guo17@gmail.com.