Privacy Policy

What we collect

• Sign-in details. Your email address, and if you sign in with Google, the name and account id Google shares with us. If you set a password, we keep only a one-way hash of it, never the password itself.
• Your profile. Your years of experience, the role areas you are interested in, the countries you can work in and the work modes you accept.
• Your application profile and resume. If you use Floish Autofill: the details it fills applications with, which you type in or Floish reads from your resume. That is your name, contact details and address, work history, education, links, skills, work authorization, notice period and salary expectations, and, only if you choose to give them, your answers to voluntary equal-opportunity questions (gender, race, veteran and disability status). Also the resume file you upload and the text read from it.
• Answers you save. With “Remember what I submit” on, your answers to an application's open questions, so you type each one once. Never salary, visa or equal-opportunity answers, and never a password.
• Your job record. The listings you mark as applied or not for you, the stages you record, and any notes you type. Notes are private to you. Jobs Floish applies to for you are marked applied.
• Billing details. When you subscribe, you enter your card on Dodo Payments's own checkout page, not on Floish. From Dodo Payments we receive the state of your subscription and, for each payment, its amount, currency, tax and date, the country used for billing and a reference number. We never receive your card number. Your receipts come from Dodo Payments.
• Invites. If you were invited, the email address the invite was sent to and when it was used.
• Technical and usage data. Your IP address and browser type when you sign in, kept briefly to prevent abuse; error reports; and which parts of the app you use. Each time you use Autofill, how many fields it found, filled or could not fill, and which hiring system and site the form was on; never the labels or what was typed.

Apart from what Floish Autofill reads when you use it (see below), we do not collect your precise location, contacts or anything else from your device, and we never ask your browser for your location. To show the right price we use the country your internet connection comes from, which every website can see. We use it for that alone. If you subscribe, it is passed to Dodo Payments as your billing country and is kept with the payment record described above.

Why we use it

• To sign you in and keep you signed in.
• To match listings to the preferences in your profile.
• To keep your job record and show it back to you.
• To fill in job applications for you from your profile and resume, and to send them when you ask Floish to.
• To bill you, keep your access in step with your subscription, and handle cancellations.
• To keep the service working, secure and free of abuse.
• To understand how Floish is used, so we can improve it.
• To email you sign-in codes and messages about your account and subscription, such as a trial that is ending or a payment that failed. We send no marketing email.

Job postings are sorted with automated tools, including AI. If you use Floish Autofill, AI also reads an application's open questions, the job, and your profile and resume to draft answers for you, and reads the labels of fields it does not recognise to tell what they ask; you can turn drafting off. Your email, phone, address, date of birth, work authorization, salary and equal-opportunity answers are never sent to the AI. We never use your profile, resume, answers, record or notes to train an AI model, and we do not let our AI provider do so.

The Floish Autofill extension

Floish Autofill is our browser extension. You connect it to your Floish account, and it fills in job applications from your profile: on the jobs you pick on Floish (Apply with Floish), or on an application form you open and ask it to fill (Autofill).

• What it reads on web pages. To spot application forms, it looks at the form fields on the pages you visit and their labels, on your device. It sends nothing from a page until you press Autofill or start Apply with Floish. Turn off “Offer to fill on any site” to keep it to known job sites.
• What it sends to Floish when you use it. Which job the page is for, worked out from its address; the labels and choices of fields it does not recognise, never what is in them; the open questions it drafts answers to; and, for Apply with Floish, a description of the page's fields and buttons (their labels and whether they are filled, never their contents), so it can decide what to do next.
• What it keeps only on your device. The key that connects it to your account, your settings, and, if you save one, the email and password you use on job sites, including any password it makes for an account it creates for you. These are never sent to Floish. They are kept in your browser's storage for the extension, which is not encrypted, so anyone who can use your browser profile could read them.
• What it puts into applications. It types your profile, answers and resume into the application forms it fills. With “Submit for me” on, it sends the application; with it off, it stops before Submit and you send it. Either way, the company and the hiring system it uses receive your application under their own privacy policies, as if you had sent it yourself. It can also sign in to job sites, or create accounts on them, with the email and password saved on your device. You can turn each of these off in the extension's settings.
• Equal-opportunity questions. It answers them only from what your profile holds. When your profile has no answer, Autofill leaves the question to you, and Apply with Floish picks the form's “Decline to answer” option when it has one.
• Disconnecting. Disconnect the extension on Floish's Autofill page, or sign out in its settings, and its key stops working. Removing the extension deletes everything it kept on your device.

Floish Autofill's use of information it receives adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that information only to provide and improve the extension's single purpose, filling in job applications for you. We do not sell it, use it for advertising or to decide on credit, or let anyone read it except with your permission, for security, or as the law requires.

Who else sees it

We do not sell personal data and we do not share it with advertisers. Trusted providers process it on our behalf for hosting, email delivery, sign-in, AI processing, analytics and error reporting, each only for that purpose and under a contract that protects your data. When you apply to a job, with or without Floish, the company and its hiring system receive your application under their own policies. Payments are handled by Dodo Payments, which is the merchant of record for your subscription: it holds your card details under its own privacy policy and shares only the payment facts listed above with us. Your data is stored in India; some providers process it in the United States under the safeguards recognised in the EU and UK for such transfers. We disclose data otherwise only when the law requires.

Cookies

One essential cookie keeps you signed in, for up to 24 hours. Our analytics keep an identifier in your browser to tell one visit from the next; it is not used for advertising. If you would rather not be measured, switch it off under Analytics in your account settings; it applies to your account on every device, and we will do it for you if you would rather email us. Dodo Payments's checkout page sets its own cookies while you are on it, under its own policy.

How long we keep it

• Your account, profile and job record: until you delete your account.
• Your application profile, resume and saved answers: until you delete your account. You can remove your resume or any saved answer on the Autofill page at any time.
• Autofill counts: until you delete your account.
• What the extension keeps on your device: until you sign out of it or remove it.
• Sign-in sessions and codes: hours at most.
• Logs and error reports: a short period, then deleted.
• Billing records: for as long as accounting and tax law requires, even after you delete your account.

Security

We protect your data with standard measures, including encryption in transit and sign-in protections. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Your rights

You can see, correct, copy or delete the data we hold about you, and object to or restrict how we use it. Your profiles, resume, saved answers and job record are editable in the app. For anything else, email info@floish.com from the address on your account and we will act within 30 days, free of charge. Deleting your account removes everything we hold about you, except the billing records we must keep by law.

If you are in the EU or UK these are your rights under the GDPR, and you may complain to your local data protection authority. If you are in California, they include your rights under the CCPA; we do not sell or share personal information as that law defines it. Everyone else has the same rights from us, whatever their local law adds.

Children

Floish is for people aged 18 and over. We do not knowingly collect data from anyone younger.

Changes

If this policy changes, the date above changes with it, and a change that matters is announced on the site or by email first.

Contact

Floish is operated from India. Questions or requests about your data: info@floish.com