What the extension permissions are for
Every permission the extension asks for, what it is used for, and how to take a site back. It ships with access to no job board at all.
The extension asks for very little at install time and asks for the rest one site at a time, in the click that needs it.
Granted at install
| Permission | What it is used for |
|---|---|
| Storage | Keeps a copy of your resume and the answers you typed before, on your computer |
| Downloads | Saves the tailored file so the form's upload dialog opens on the right one |
| Active tab and scripting | Runs the form filler in the one tab where you pressed the button |
| Tabs | Opens and follows the tabs in a queued run |
| involveresume.com | Reads the resume the site already read, and the sign-in you already have |
| Our database server (Supabase) | Reads only your own account details, to check what your plan allows |
Asked for later, one site at a time
| Permission | When it is asked for |
|---|---|
| Any job board, per site | At the moment you press a button that needs that site, granted for that host only |
| JobTeaser | Named separately so the browser dialog says the portal rather than all sites |
When you first install it, the extension runs on no website except Involve's own. It does not act on any page you visit until you allow that site.
Reading and filling are two different grants
Letting the extension fill a form on a site does not start it reading every page you open there. The sites the score reader runs on are their own list, written only by the switch in the popup. Turning that switch off, or revoking the site permission in the browser, both stop it.
What it will not do with any permission
- It never submits a form from the toolbar button.
- It never overwrites a field you have already filled in.
- The toolbar button never ticks a consent checkbox or radio. Those are yours. The unattended auto-apply run is the one exception, and only after you have turned on "Tick that box for me from now on" on the auto-apply screen — that switch exists because a form that will not submit with the employer's privacy box unticked cannot be sent for you at all. Leave it off and the run stops there instead.
- It never answers a work authorisation, visa, citizenship, clearance, criminal record, disability, veteran, ethnicity, gender or date of birth question. Where you have answered one before, it is replayed with a red outline and a note telling you to check it.
- It leaves a required field it has no answer for blank and marks it, because a silently wrong answer is worse than a visible gap.
Taking access back
- Open the browser's extensions page.
- Open the extension's details, then its site access settings.
- Remove the host, or set it to "on click".
Your account stays the same. To clear what the extension keeps on your computer, use Forget everything at the bottom of the extension window. It removes the copy of your resume and your saved answers.
What the website holds is a separate question, answered in your data, and how to delete it.
Questions about this
Why does it ask again on every new site?
Because it starts with permission for no job site at all. Chrome gives permission for one site at a time, when you click, and you can take it back at any time.
Does letting it fill a form let it read every page on that site?
No. Filling and reading are separate lists. The score reader runs only on sites you turned it on for with that switch in the popup.
How do I revoke a site?
From the browser's own extensions page, under the extension's site access settings. The extension stops running there immediately.
Why does it need downloads?
It saves the tailored document to your machine so the form's upload dialog opens on the right file.
Grant one site, not all sites
There is a wildcard option in the browser dialog and there is no reason to use it. One board at a time is the intended shape.
Open Involve Resume