Privacy policy

Updated 30 October 2026

This policy explains how Filstero handles information. Filstero is a job-search product operated by FILSTERO PTE. LTD. (UEN 202647695N). For privacy questions or requests, contact support@filstero.com.

When browser verification is enabled on sign-up, password sign-in or recovery forms, Cloudflare Turnstile processes the browser and network information needed to check for automated abuse. Its challenge token is sent to Supabase for validation. See Cloudflare’s privacy policy. This check does not grant access to your documents or employer accounts.

Information we collect

• Account and access information: your email address, account identifier, authentication records, invitation and access-code status, and the information needed to keep you signed in. Email/password accounts use our authentication provider to securely handle passwords.
• Google sign-in information: if you choose Google, we receive your Google account identifier, email address and verification status, and basic profile information such as your name and profile picture. Our authentication provider stores this information with your account.
• Job-search information: the contact details, work and education history, skills, preferences, work-permission information, saved jobs, application stages, notes and optional compensation answers you choose to provide.
• Documents: resumes you choose to upload, file metadata and details you choose to save from extracted text. Reading a resume begins in your browser; uploading sends the file and extracted text to our service for processing, and stores the original document privately. You review suggested details before saving them to your profile.
• Billing information: subscription and transaction identifiers, billing country, payment status, invoices, receipts and refund requests. Paddle handles checkout, payment details, tax and payment-related communications. Full card details are handled by Paddle rather than stored in your Filstero workspace.
• Operational information: our providers process technical information such as IP addresses, browser/device details, request and authentication logs, and email delivery events to operate and protect the service. We also receive messages you send for support.

How we use information

We use this information to provide account access, authenticate you, save your job-search workspace, suggest relevant jobs, support application preparation, send access and account-recovery emails, respond to support requests, and diagnose security or reliability problems.

Google information is used for account identification and sign-in. Google sign-in does not grant us access to your Gmail messages, contacts, calendar or Google Drive files. We do not request those permissions in this version.

We do not sell personal information, use Google user data for advertising, or use your Google data or resumes to train general-purpose AI models. We do not use advertising trackers.

Service providers and sharing

We use Supabase for authentication, database and private document storage; Render for web hosting; Resend for transactional email; and Google Workspace for support email. Google also handles Google sign-in when you choose it. These providers process the information needed to deliver their services. Hosting and database resources are configured in Singapore, but providers may process operational information or support data in other countries.

Paddle is the merchant of record for paid subscriptions and processes the billing and tax information needed for your purchase. Its privacy policy explains its payment processing. We receive the transaction and subscription records needed to provide paid access and handle support.

Your profile, documents and application tracker are not public. Authorized operations access may be needed to handle a request, investigate a fault or protect the service. We may disclose information when legally required or necessary to address misuse or a security incident.

Browser extension and Fastlane

The optional extension checks the current page’s URL and title when you open it, to show available application support or save a job. Choosing Save sends the selected job link and title to Filstero for review. The extension stores a connection token and expiry locally so it can retrieve your saved details, confirmed answers and selected documents. Short-lived Fastlane session state checks the connected account, role, destination and selected document versions. Functional progress reports include the current step, fields filled and attachment status so the website and extension can show progress and recover interrupted work. These are not analytics or mouse, scroll or keystroke histories.

Form inspection happens locally. When you request autofill, attachment or Fastlane continuation, the details and selected files are shared with the employer website. The employer may retain them before you make the final Submit click. If a destination cannot be verified automatically, you check the role, website and prepared files before continuing. Existing answers and attachments stay unchanged.

Basic autofill on other application sites runs only when you open the extension and request it. It checks form labels locally and fills clear, empty contact fields with your saved details. You review the results before submitting. It does not monitor your browsing history or automatically submit applications.

Sign-ins, new questions, CAPTCHA checks, declarations and final submission may require you. Filstero does not automatically submit applications or keep a general browsing-history log. Disconnecting removes the browser connection; it does not delete your Filstero account or information already received by an employer. Third-party websites have their own privacy practices.

Filstero’s use and transfer of information received through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Optional AI resume review

When AI review is available for your account, it requires your agreement before sending your resume text, confirmed answers and the job description to OpenAI. The agreement identifies whether the request passes through OpenRouter. We remember your AI processing permission for your account on the current browser/device, across resume tailoring, cover letters and selected-passage suggestions. You can withdraw it through Manage beside the saved AI permission. A changed processor or disclosure requires agreement again. Manual editing does not send this text to an AI provider. We do not send your original PDF to the AI model.

We use API processing with training disabled and do not enable optional response storage. This does not guarantee zero retention: providers may retain information for abuse monitoring or legal obligations. OpenAI's standard abuse monitoring can retain content for up to 30 days, with documented exceptions. Processing may occur outside Singapore. AI suggestions can be inaccurate; you choose which changes to accept.

We keep account-specific review results, confirmed answers used in saved versions, consent version and request usage records to support retries, cost limits and your workspace. Account deletion removes these private review records. Aggregate spending totals do not identify you.

Cookies and browser storage

We use necessary cookies for sign-in and account access. An access cookie can last up to 24 hours; sign-in cookies allow your session to continue. Blocking these cookies can prevent sign-in. The optional browser extension stores its connection information locally so it can access your saved application details.

Retention and your choices

We retain account and workspace information to operate the service while your account remains active. You can edit saved profile information and remove uploaded documents in the app. Deleting an uploaded document does not automatically erase details you previously saved to your profile.

To request a copy, correction or deletion of your account information, email support@filstero.com. We may verify that the request comes from the account holder. Limited records may need to be retained for security or legal reasons; provider logs and backups may persist until their retention periods end.

You can remove Filstero’s Google access in your Google Account’s third-party connections settings. Revoking Google access does not itself delete the Filstero account or information already stored. Contact us for account deletion.

Security and policy updates

We use encrypted connections, private document storage and account-based access controls. No service can guarantee absolute security. Avoid uploading identity documents, financial records or other information that is unnecessary for your job search.

We will update this page when our data practices change. If we introduce access to additional Google data, we will explain the purpose and request the relevant permission before accessing it.

Filstero’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.