1Who we are
BunnyHire is a service that finds jobs that match you and applies to them on your behalf. BunnyHire and SingleClickApply are two brands of the same service. This policy covers both, and the BunnyHire browser extension that works with either.
Questions or requests about your data: [email protected].
2What we collect
- Account details: your name, email address and sign-in details (sign-in is handled by our authentication provider), and a record of the terms you accepted, including when and from which IP address.
- Your résumé and profile: the résumé you upload and what we read from it, plus details you add, such as contact details, location, links, work history, education, skills, work authorization and your answers to common application questions, including the answers sheet we work out from your résumé and profile (for example, your years of experience with each technology). You confirm the sheet before the browser extension uses it, and can change it on your Profile page.
- Demographic answers, only if you choose to give them: the voluntary equal-opportunity questions many US employers ask (gender, whether you are transgender, race or ethnicity, veteran and disability status, sexual orientation). This is sensitive information. We never work it out from your résumé or anything else, and we keep it only if you tell us and agree to it, on your Profile page. It is stored apart from the rest of your profile, used only to answer those questions on your applications, and you can change or delete it there at any time.
- Your job preferences and activity: the roles you search for, the jobs you swipe on, and your auto-apply settings.
- Application records: which jobs we applied to for you, the résumé and cover letter sent, what was entered in each form (field names and values), and evidence that it was submitted (the confirmation page text and, where available, a screenshot).
- Payment details: card payments are handled by Stripe. We receive your plan, payment status and limited billing details, not your full card number.
- Support conversations: messages you send to our support assistant or team.
- Technical data: your IP address, browser and device type, and the logs we need to keep the service secure and working.
- From the browser extension, if you use it: the application forms it reads, the answers you give to questions on them, and which employer sites you have an account on (not your password). See section 6.
3How we use it
- To find and rank jobs that fit your profile, including by comparing your résumé and job postings with AI-based semantic matching.
- To tailor your résumé and cover letter to a posting.
- To fill in and submit employer application forms in your name, as you have authorized.
- To run your account: sign-in, billing, daily limits, notifications and support.
- To keep the service secure, prevent abuse and fix problems.
- To meet our legal obligations.
We do not sell your personal information, and we do not use it for advertising or share it for cross-context behavioural advertising.
4AI processing
Parts of the service use AI. To provide those features we send the relevant text, such as your résumé, profile details, a job posting, a question from an application form, or a support message, to AI providers (currently Anthropic and Voyage AI). We use their business API services and do not opt in to any use of your content to train their models.
Tailored résumés and cover letters are checked against your original résumé so they do not add experience you did not provide. You remain responsible for what is sent in your name.
We never send your demographic answers to an AI provider, and demographic questions on employer forms are never put to an AI model. Matching what you told us to a form’s choices is done by fixed rules in our own software.
6The browser extension
The BunnyHire browser extension (for Chrome, Edge and other Chromium browsers) finishes applications that employer sites only accept from your own browser. It does nothing until you connect it to your account, and it only acts on applications you have queued in that account.
What it reads and sends. When it finishes one of your applications, it opens the employer’s page in a tab and reads that page: the form fields (labels, types, choices and whether they are filled in), button labels, the page title and address, and the visible page text. It sends these to our servers so we can decide which of your details go in which field and what to click next. Our servers send back the values to fill in and your résumé to attach. To read the choices in a custom dropdown it opens the list and closes it again without choosing. Where a form asks something we have no ready answer for, a small AI model may be asked to find the answer in your own résumé (including the roles and achievements on it) and profile; it may only use what they say, and anything it cannot find there is left for you. A few questions that are “No” for nearly everyone and that a résumé cannot show (whether you have interviewed with, been offered a job by, been introduced by an agency to, or are related to an employee of that employer) are answered “No”; the extension tells you which answers it assumed or inferred before you send. Where a form requires a written answer (a paragraph) and you have no saved answer for it, an AI model may draft one from your résumé; for this your résumé’s text and the question are sent to the AI provider. The draft is checked against your résumé, typed into the form and outlined, and the application then stops: nothing is sent until you have read the draft, changed it if you wish, and chosen Continue. The wording you confirm is kept as your answer and used for the same question on later forms; you can see and change saved answers in your profile. If you choose your location yourself on a form because we could not tell which place of that name is yours, the state and country you chose are saved to the address in your profile, where those were blank, and you can change them there. With each request the extension also says which version of itself is running, so that an out-of-date extension can be noticed and updated. After the form is submitted, it sends the final page address, the page text and, if the tab is visible, a screenshot, so we can confirm the application went through and keep a record of what was submitted.
What it does not do:
- It does not read your other tabs, browsing history or bookmarks, and it does nothing on sites other than the application tab it opened.
- It does not read, type or store passwords on employer sites, and it never presses Sign In or Create Account for you. At an employer’s sign-in it fills in your email address, if the box is empty, and waits for you. A password you saved is filled in by your browser’s own password manager, not by the extension, and the extension can tell only that the box has been filled, not what is in it.
- It remembers which employer sites you have an account on. When it sees you get past an employer’s sign-in, we save that you have an account on that site and how you signed in: with your email, or the name on the sign-in button you used (such as Google or LinkedIn). The next time that site asks you to sign in, it can tell you that you already have an account there, so you do not create a second one. No password, and nothing you typed, is part of this. If you sign in through another provider, the extension does nothing on that provider’s pages.
- It never guesses an answer to a demographic or equal-opportunity question (gender, race or ethnicity, veteran or disability status, sexual orientation). By default it chooses “Decline to self-identify” where the form offers that choice and leaves the question for you where it does not. In your profile you can switch this to leaving them all for you, or, if you want, to answering them with exactly what you told us there. Then it picks the choice that says what you told us and, if a form’s choices cannot say it exactly, leaves that question for you instead of picking something close; anything you left blank is declined. The field values we record for an application note that a demographic question was answered, not what the answer was. Consent boxes are always left for you.
- It remembers your answers to questions only you can answer. When it stops for one and you answer it, what you entered is saved to your account so the same question on another employer’s form is answered without asking you again. It does not save demographic questions, declarations or consents, ID numbers, or questions that name the employer. Ask us to show or delete them at any time.
- It never accepts cookies or agreements for you. If an employer’s cookie banner offers a clear “reject” or “only necessary” choice, the extension picks that so the banner does not get in the way; if the banner offers no such choice, it leaves the banner alone.
- It does not sell or share this data, or use it for advertising.
- Our staff do not read it unless you ask us to (for support), to investigate security or abuse, or to comply with the law.
What stays on your device. A pairing token (a random credential that lets the extension talk to your account) and the state of the application in progress are kept in the extension’s local storage. Our servers keep only a hash of the token. It expires after 90 days without use, and disconnecting revokes it.
Permissions. The extension asks for access to common application sites (such as Greenhouse, Lever, Ashby, Workday, SmartRecruiters and Workable) and to our own site and API. Employer career pages can be on any domain, so it also offers optional access to all sites. That is only requested when you click “Allow access” in the extension, and it is only used on the application tab the extension opened. Notifications are used to tell you when an application needs you: to sign in, pass a security check, answer a question or review the form before it is submitted.
Your control. You can pause the extension from its toolbar icon, disconnect it from the icon or from your profile, or uninstall it at any time. Disconnecting stops all access to your account from that browser.
Our use of information received from the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use it only to provide the extension’s single purpose, finishing the applications you have queued, and for nothing else.
7How long we keep your data
We keep your profile, résumé and application history while your account is open, because the service cannot work without them. Demographic answers are kept only until you delete them, which you can do yourself at any time on your Profile page. When you ask us to delete your account, we delete your data, except what we are required to keep for legal, tax, security or dispute-resolution purposes, and anonymised or aggregated data that does not identify you. Applications already sent to employers are held by those employers, and we cannot recall them.
8Your rights and choices
- Access and correct: you can see and edit your profile and résumé in your account, and ask us for a copy of your data.
- Demographic answers: give them, change them, stop using them or delete them yourself on your Profile page, under Demographic questions. Deleting is immediate and complete.
- Delete: ask support to close your account and delete your data. A person handles the request and confirms it to you.
- Control automation: set your auto-apply level to review-only, or disconnect the browser extension, at any time.
Depending on where you live, including the EEA, the UK and California, you may have further rights, such as to object to or restrict processing, to data portability, and to complain to your data protection authority. Contact us and we will respond within the time the law requires. We do not treat you differently for using these rights.
9Security
Data is encrypted in transit, access to it is limited to what the work needs, and sign-in and the extension’s pairing token are handled so that neither your password nor the token is stored in readable form on our servers. No system is perfectly secure, so please use a strong, unique password.
10International transfers
Our providers may process data in the United States and other countries. Where the law requires it, we rely on safeguards such as standard contractual clauses for those transfers.
11Children
The service is for people who are at least 16 years old. We do not knowingly collect data from anyone younger. If you think we have, contact us and we will delete it.
13Changes to this policy
We may update this policy. The date at the top shows when it last changed, and if a change is material we will tell you in the product or by email.
14Contact
[email protected]. A person will answer.