Fitrole privacy policy

Effective 2 November 2026

Fitrole (formerly called JobMatch) is provided under the Orbitra AI name. For privacy questions or data requests, contact [email protected].

Information we use

• Information you give when you create your account on the Fitrole website: name, email address, a password (stored only as a one-way hash), and optionally what work you are looking for, which the team reads to approve your account. Accounts set up earlier with an invite code keep that code on record.
• Your profile, set on the Fitrole website: CV summary, target job field, experience, degree, licences, languages, seniority, visa preference and agency preference. Display and filter settings stay in the extension.
• Information from LinkedIn job pages you view: job IDs, titles, companies, locations, and descriptions of jobs you open. Job descriptions may include advertised salary and company details.
• When you click Apply or Easy Apply: the job, company, time, button type, and displayed score. This records a click, not a completed application.
• When you flag a result: a snapshot of your profile, the job, the score shown, and the model responses behind it. The operator may inspect that specific snapshot to investigate your flag.
• Private job tag rules you add: the tag name, your explanation of what should match, and the model's yes/no results and explanations for jobs you open.
• Jobs you save (the ☆ in the extension): the job ID and the title, company and location shown for it, when you saved it, and on the website where you are with it (saved, applied, interview, offer, rejected or archived) and any notes you write.
• CV files you upload on the Fitrole website (PDF, Word or text): the file as you uploaded it, the text read from it, its name, size and upload time. Files are stored encrypted.
• When you ask for AI help (filling in your profile from a CV, how well you fit a saved job, interview prep, a cover letter, or grouping your skills gap): the answer, kept with the job or your account so you can see it again, and your AI credits (how many you have left, and what each was spent on).
• Your website login: name, email address, password (only as a one-way hash), language, roles, and when you signed up, confirmed your email and were approved. The website keeps an activity log of account actions (for example a sign-in, a profile view by the team, or a data download), naming the account's email.
• An installation API key, stored in the browser; the server stores only its hash. One key per browser you sign Fitrole in on, all belonging to one account, each with the browser and operating system it was signed in from (for example "Chrome on Linux", from its User-Agent) and when it was last used, to the hour. You see these on the website's Browsers page. The server uses the connecting IP address to limit sign-in and registration attempts. Its access log records IP address, time, request path, and response status.

How we use and share information

Fitrole uses this information to compare job postings with your profile, show eligibility, visa and agency information, apply your filters, remember recent Apply clicks, and investigate results you flag. Your email address also identifies your account when you set Fitrole up in another browser: for extensions from before version 0.5.0, registering with the email address and the invite code an account was set up with adds that browser to that account, so both share one profile and history. Automatically detected agency facts about companies and jobs are shown to other Fitrole users. Your own tag rules and results, CV match scores, and requirement results stay with your account. The extension reads job content already displayed in your browser; it does not request information directly from LinkedIn or send your profile to LinkedIn.

The extension sends data over HTTPS to the Fitrole server. The model that scores jobs runs on that server. AI help is only used when you press its button, and the website names the AI provider first:

• Filling in your profile from a CV file sends the text read from that file.
• Help with a saved job (fit, interview prep, cover letter) sends your profile and that job's posting.
• Grouping your skills gap sends your profile and the job requirements your CV didn't meet.

AI assistants you connect. You can connect an AI assistant, such as Claude or ChatGPT, to your Fitrole account. Nothing is shared until you sign in on the Fitrole website and press Allow. A connected assistant can then read the jobs you opened with the extension and the jobs you saved (with Fitrole's results for them), your CV and job preferences, and your saved jobs' status and notes; it can save jobs and update their status and notes for you. What it reads goes to that assistant's provider, which handles it under its own terms. The assistant can also record its own rating of how well a job fits you, with its reasons: Fitrole keeps these with your account and uses them to check and improve its scoring. An assistant never sees your password, and only gets tokens that work for your account until you sign it out on the website's Claude & Codex page, change your password, or delete your account.

For AI help, your name, email address and visa needs are never sent to the AI provider. The server records only that a call was made (when, which model, and its size), not its text. That provider handles the text under its own terms. The Fitrole team can see your profile and CV files to approve and support your account; each time they open them is recorded in the activity log. Cloudflare routes traffic to the server through Cloudflare Tunnel and may process connection metadata; see Cloudflare's privacy policy. The server downloads the public UK sponsor register from GOV.UK without sending your profile or job activity there. We do not sell your data, use it for advertising or lending decisions, or share it with other parties except service providers needed to operate Fitrole or when legally required.

Where data is stored and how long we keep it

Your account and profile are kept on the Fitrole server. The extension keeps its API key, a read-only copy of your profile, your display settings and recent results in Chrome's extension storage on your device. The website keeps your sign-in and your theme and language choice in your browser's storage; it sets no cookies and uses no tracking or analytics. The server and the website store their data in SQLite databases on the operator's machine, reachable only by their own processes. A copy of both databases and the CV files is made every night and kept for 14 days on the same machine.

• Your account and current profile remain until you delete your data or the operator deletes the account.
• Scoring requests, model-call history, cached scores, and the record of which jobs you opened expire after 30 days by default. A daily cleanup task removes expired records, usually within a further day. The job postings themselves (public text, shared by all users and not linked to you) stay in a shared cache.
• Apply clicks and profile versions needed for those clicks are kept for 90 days by default. The interface shows related clicks from the previous 7 days.
• Flagged result snapshots are kept for 180 days by default.
• Saved jobs, with their status and notes, remain until you remove them or delete your account. Your CV files and the text read from them remain until you delete them or your account; only your five most recent uploads are kept.
• The record of AI provider calls (time, model and size, without any text) is kept for a year; deleting your account removes your account from it. AI answers and credits remain until you delete your account.
• A connected AI assistant's sign-in lasts until you sign it out, and at most 60 days without being used. The fit ratings assistants record remain until you delete your account.
• The website's activity log has no fixed retention period yet.
• Nightly copies are kept for 14 days, so deleted data is gone from them within 14 days.
• Your tag rules and their job results remain until you remove a rule or delete your account. Shared agency findings contributed by your analyses are removed when you delete your account.
• Local browser data remains until you delete it in Fitrole settings or clear the extension's storage.
• Access logs (IP address, time, request path and status) are kept in the containers' logs, which are rotated by size (at most 100 MB per service); there is no fixed number of days.

Your choices and deletion

You can change your profile and preferences on the Fitrole website. Turning off a visible badge does not stop scoring or server storage. Download my data in the website's Account settings gives you everything Fitrole keeps for your account as a JSON file (your CV files download on the CV page). Delete my Fitrole account in the website's Account settings removes your account, profile, CV files, saved jobs (with their notes), personal scoring history, Apply clicks, flags, tags and tag rules, connected AI assistants and the ratings they recorded, and your login. It deletes the whole account, so the keys in every browser you signed Fitrole in on stop working. Sign out in the extension removes the account and its local data from that browser only. Shared company classifications derived from public postings may remain without an account identifier. Job content supplied by other users can remain in the shared cache until it expires. For help with a deletion request, email [email protected].

Your rights

You can see and download what Fitrole keeps about you (Download my data), correct your profile on the website, delete your account at any time, and object to or ask us to restrict a use of your data by emailing [email protected]. We use your data to provide the service you signed up for, and your connection details to keep it secure (rate limits); AI help is used only when you ask for it. You may also complain to your data protection authority (for example the KVKK in Türkiye, the ICO in the UK, or the authority of your EU country). Fitrole is not meant for anyone under 16.

Security and policy

Data sent between your browser, the extension and Fitrole uses HTTPS. The installation API key is stored as a hash on the server. The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

We may update this policy when Fitrole's data practices change. The effective date above will change when we do. Fitrole is independent of LinkedIn and is not endorsed by LinkedIn.