Privacy policy

Effective 20 October 2026. This policy applies to the Who Fits? Chrome extension and the API at https://decision-assistant.fly.dev.

Who we are

Who Fits? is a recruiter screening tool published by Pouya Pournasir. For an account deletion or a privacy question, email pouya__1__pournasir@hotmail.com.

What we collect

• Account email and a hashed password, so you can sign in.
• Job descriptions, role titles, companies, and approved rubrics you save.
• Profile text you confirm for Evaluate, plus Jev results, scores, and optional notes.
• A candidate name parsed from that text, used only as a label on your history.
• Usage counts for hosted job-role drafts, and stored Jev cost for a daily spend cap.

The extension stores a session token on this device. If you connect ChatGPT, access tokens stay in Chrome storage on this device. If you paste an OpenAI API key, it stays in Chrome session storage on this device. Those secrets are not sent to the Who Fits? API.

What we do not collect

• We do not read LinkedIn until you capture or evaluate the open tab.
• We do not collect browsing history, passwords from other sites, or payment cards.
• We do not message candidates or post on LinkedIn.

How we use it

We use this data only to run Who Fits?: sign you in, draft and store rubrics, send a confirmed profile to Jev, show a recommendation, and enforce hosted draft limits and a daily spend cap.

Who else sees it

• TypeSafe Jev receives the rubric questions and the approved profile text when you confirm Evaluate.
• If you have no connected model, a hosted language model receives the job description to draft a rubric. That is the only hosted language-model step.
• If you connect ChatGPT or an OpenAI API key, OpenAI receives draft (and optional comparison) requests from the extension. Those requests do not use the hosted language-model quota.
• The API is hosted on Fly.io in the United States. Data is stored in SQLite on that host.

We do not sell your data. We do not use it for advertising.

Retention and deletion

Job descriptions and evaluation rows stay until you delete them. The side panel can delete saved roles and evaluation history. Hosted draft counts are not restored when you delete roles.

Profile text is stored with an evaluation only when you keep extracts, or briefly while an optional comparison runs. The default evaluate path does not keep the profile text after the run.

Passwords are stored as hashes. To delete an account entirely, email pouya__1__pournasir@hotmail.com.

Security

Traffic to the API and to OpenAI uses HTTPS. Session tokens are bearer tokens. An OpenAI API key never leaves the browser except toward api.openai.com.

Children

Who Fits? is for professional recruiting. It is not directed at children under 13.

Changes

If this policy changes, we will update this page and the date above. Continued use after a change means you accept the new policy.