Privacy Policy

Last updated November 11, 2026.

This policy covers the Soda Apply browser extension, the website sodaapply.com and the service behind them (together, "the service"), which fills in job application forms from your saved profile.

What we collect

• Your profile: name, contact details, address, links, work history, education, work-authorization and visa status, and the demographic answers you choose to save, plus your resume file. By default these stay in your browser. If you sign in, your profile is kept in your account so the extension, our website and our phone app show the same information.
• Your resume file (optional): only if you choose to keep it in your account (the checkbox next to the resume upload in the extension, or by uploading it on our website's profile page), the file is uploaded to our server and stored with your account so your other devices can attach it to applications. We do not read or share it for any other purpose. If you do not tick the box, it stays in your browser only.
• Your resume, read by AI: to fill in your profile, your resume is read by an AI model (Anthropic) through our server, and you need to be signed in with Google. For a PDF or Word file, the extension first takes the text out of it on your computer and sends only that text, not the file itself. A picture (PNG, JPG, WebP) has no text to take out, so the picture is sent. What is sent is read and not stored or logged by us, and it is used for nothing else. The first reading of a text resume each day is free; after that it costs 2 credits, and a picture costs 1 credit. You are asked before any credits are spent, and if you decline, nothing is sent and your profile is left as it is. The "Read it again with AI" button works the same way.
• Account: if you sign in with Google, your Google account email, name and a stable Google account id. We do not receive your Google password or access your Gmail, Drive or contacts.
• Where you have filled: the company, job title, link, application system and time of each application the fill has run on, with no answers. By default these stay on your device. If you sign in, they are kept in your account so the extension and our phone app show the same list. Clearing the list clears it on every device.
• Application questions: the wording of the questions on an application form and the options they offer. To answer a question, the question and the part of your profile needed to answer it are sent to the AI model (see "Who processes it"). We also keep a shared table of question wordings, their options and the kind of profile detail each one asks about (for example "needs sponsorship"), so the same question is recognized for everyone. That table holds no answers and nothing that identifies you.
• Answers you correct: when you change a multiple-choice answer the extension filled in, it sends us the question, its options, the answer it filled and the one you chose. Unless you turn off "Help improve answers" in the settings, it also sends the one detail from your profile that answer depends on: for work-authorization questions, your U.S. status, visa type and whether you need sponsorship; for other questions, your saved answer for that kind of question. It never sends your name, contact details, free-text answers or self-identification (gender, race, veteran or disability) answers. Nothing in the report identifies you or your account; we count these reports per question to find questions we fill wrongly.
• Your Workday password (optional): if you turn on the Workday sign-in helper, the email and the one password it types into Workday's sign-in and create-account forms are kept in the extension's storage on your device only. They are never synced, never sent to us or to the AI model, and are removed when you uninstall the extension.
• Usage data: how many credits you used, the site and path of the application page for each credit, request timing and error information.

What the extension reads on web pages

The extension reads a web page only while its side panel is open. It is built for job application sites such as Workday, Greenhouse, Ashby, Lever and other applicant-tracking systems, and for company careers pages. When the panel is open, it looks at the current tab to tell whether it is a job application. It reads the form's questions only when you click Fill. When you close the panel, the extension stops reading pages entirely: it does not look at, record or send anything from the sites you visit. It never reads your browsing history.

How we use it

• To fill in forms: to sort each question into the right profile field and to choose an answer.
• To improve autofill: the shared table of question wordings and the reports of answers you corrected (see "What we collect") show us which questions we recognize or answer wrongly.
• To run the service: sign-in, daily credit limits, abuse prevention.

We do not sell your data, do not use it for advertising, and do not use it to train general AI models.

Who processes it

• Anthropic (model provider): when the AI model is used, the question, the options, and the part of your profile needed to answer are sent to it. We do not authorize it to train on this data.
• Cloudflare: hosts the service, its database and its logs.
• Google: sign-in.
• Stripe: payments for paid plans. Stripe collects your card details; we never see or store your card number.

Where it is stored and for how long

• Your profile and remembered answers, if you sign in, are kept in your account until you delete it. A resume you chose to keep in your account is stored until you untick the option, remove the resume, or delete your account.
• The shared table of question wordings and the counts of corrected answers are kept as long as the service runs. They hold nothing that identifies you.
• Operational logs are kept for a short period set by our hosting provider.

Your choices

• Delete: "Delete account and cloud data" in the extension's settings page removes your account, profile, resume file (if you uploaded one), remembered answers and credit records. Copies in backups and logs expire over time.
• Local only: if you do not sign in, the AI model is not available and your profile stays in your browser.
• Contact: info@sodaapply.com.

Security

Data is sent over HTTPS. Access to the database is limited to the service owner. No system is perfectly secure.

Children

The service is not meant for people under 16.

Changes

We will update this page and its date when the policy changes.