Candora Privacy Policy
Last updated: 20 October 2026
Candora ("we", "us") is a browser extension that fills in job applications, tracks the jobs you apply to and, on the Pro plan, syncs your data and drafts application text with AI. Candora is operated by Akash O G, based in Bengaluru, India. Contact: privacy@candora.tech.
Summary
- Without an account, everything Candora stores stays in your browser on your device. We receive nothing.
- With an account, we store your email address and plan. On Pro, the data you choose to sync is stored on our servers.
- We never sell your data, show you ads or use it for advertising.
- Diversity (EEO) answers are only ever entered into the form that asks for them. They are never sent to AI.
- Your saved job-site password is encrypted with your passphrase and never leaves your device.
What Candora stores on your device
Your profile (name, contact details, address, links, work history, education, skills, languages and optional diversity answers), your resume files, the applications you track (including offer details you enter), answers you save, your settings and, if you add one, a job-site login encrypted with a passphrase only you know. If you use the referral finder, it also stores the names, headlines, connection level and profile links of people shown on a LinkedIn company People page you chose to save. That list never leaves your device and is not synced; you can delete it per company in the tracker. This data lives in your browser's extension storage. Removing the extension deletes it.
What Candora reads on web pages
Candora runs on web pages so it can recognise job applications. On a recognised application form it reads the form's fields and the job posting (title, company, location, pay and description) to fill the form, show job insights and add the job to your tracker. On LinkedIn, Indeed and Naukri it only notices when you finish applying, to add the job to your tracker. On a LinkedIn company People page it reads the people cards on screen only when you choose "Save these people for referrals". This happens on your device. Nothing from the pages you visit is sent to us unless you use a Pro feature described below.
Accounts
Accounts are created by signing in with Google. Google tells us your email address, name and profile picture and a Google account ID; we never see your Google password. We send you no email. We also store your plan and a log of when you used resume parsing, AI drafts or job skills, used for daily limits.
Pro features and the data they send
- Sync: your profiles, resumes, tracked applications (including saved job descriptions and drafts), saved answers and settings are stored on our servers so they appear in every browser where you sign in. Your job-site password is never synced.
- Resume parsing: the resume PDF you choose is sent to our server, which extracts its text; that full text, including the contact details on your resume, is sent to Inception Labs (the Mercury model) to pick out your details. We keep only a usage record, not the file (unless it is also synced).
- AI drafts: your work history, education, skills, the "What the AI should know about you" text, and the job's title, company and description are sent to our server and Inception Labs (the Mercury model). Your contact details, address, links, salary and diversity answers are never sent. If you rate a draft, we store the task type and your rating.
- Job skills: when AI is on and you save a job to your tracker (or Candora records an application), the job's title, company and description, and nothing about you, are sent to our server and Inception Labs to list the skills the job asks for. The list is stored with that job in your tracker, and synced with it.
Payments
Payments are handled by Dodo Payments, which acts as the merchant of record and collects your payment details, billing address and taxes. We receive your subscription status, renewal date and a customer reference, never your card details. See Dodo Payments' privacy policy: https://dodopayments.com/legal/privacy-policy.
Service providers
| Provider | What for | Data |
|---|---|---|
| Supabase (Mumbai, India region) | Accounts, database, server functions | Account and synced data |
| Sign-in | Your sign-in; Google's own privacy policy applies | |
| Inception Labs | Resume parsing, AI drafts and job skills (Pro), Mercury model | As described above |
| Dodo Payments | Checkout, billing, tax | Payment and billing details |
Inception Labs processes the text we send it to produce the parsed details or the draft, under its terms of use and privacy policy. We have switched off Inception's option to use our requests to train or improve its models. Inception does not publish a fixed retention period: it keeps the data it receives for as long as it needs to provide its service or meet its legal obligations. Copies held by Inception are covered by its policy and are not removed when you delete your Candora account; you can contact Inception at legal@inceptionlabs.ai.
Retention and deletion
Data on your device stays until you delete it or remove the extension. Synced data stays until you delete it or your account. On the Account page, Delete account removes your account and everything stored on our servers right away and cancels an active subscription. Dodo Payments keeps billing records as the law requires. Usage records are kept while your account exists. Text already sent to Inception Labs for parsing, drafts or job skills is kept under Inception's policy (see Service providers).
Security
Data travels over HTTPS. Each user's server data is protected by row-level security so only that user can read it. Job-site passwords are encrypted on your device with AES-GCM using a key derived from your passphrase.
Your rights
You can see and change your data in the extension at any time, export your applications as CSV, and delete your account and server data. For any other request (access, correction, deletion or a complaint), email privacy@candora.tech. You may also contact your local data protection authority.
Children
Candora is not meant for anyone under 16.
Changes
We will post changes here and update the date above. Significant changes will also be shown in the extension.
Chrome Web Store Limited Use
Candora's use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the features described here, and is never sold, used for advertising or creditworthiness, or read by humans except with your permission, for security, or where the law requires.