HatataAI Privacy Policy

Last updated: 24 October 2026

HatataAI is a personal job-application assistant. This policy covers the HatataAI web app and the HatataAI Apply Assistant browser extension. In plain terms: your data is used only to do the job you asked for, on your account. We do not sell it, and we do not use it for advertising.

What the extension accesses

• Your HatataAI sign-in. When you connect the extension, your username and password are sent once to your HatataAI server to obtain a login token. The token is stored locally in your browser (chrome.storage.local) and sent with your requests. Your password is not stored by the extension.
• The job page you choose to act on. Only when you click “Generate application kit,” the extension reads the visible text and the form field labels of the current tab and sends them to your HatataAI server to produce your cover letter and answers. It does not read pages in the background, and it acts only on the tab you have open when you click.

What we do with it

• The posting text and your saved profile are used to generate your tailored documents and application answers. This processing uses the Anthropic (Claude) API as a subprocessor; the relevant text is sent to Anthropic solely to generate your content and is not used to train models.
• Generated applications are saved to your own HatataAI account so they appear on your board and desk.
• Answers can be written into the application form's fields, but only when you click “Populate” (or “Populate all”) for that specific application. The extension never fills anything on its own, and it never clicks submit: nothing is ever sent to an employer. You review the form and submit it yourself.

Website analytics

Our public website (hatataai.com) uses Vercel Web Analytics to count visits. It is cookieless: it stores nothing on your device, sets no identifier, and cannot follow you to other sites. We see aggregate figures only, page views, referring site, country and device type, never who you are. That is why this site shows no cookie banner: there is nothing to consent to.

Account activity and app usage

To keep accounts secure and to support you, we log account events on your account: sign-ins and sign-outs (web app or extension), failed sign-in attempts, password resets, and changes an administrator makes to your account or plan. Each entry records the time, a coarse device label (browser and operating system, such as “Chrome · macOS”) and your country as reported by our hosting provider. We do not store your IP address.

Inside the signed-in app we count how often each screen (Today, Jobs, Applications and so on) is opened per day, as totals only. These counts are not linked to your account: we cannot see which screens you opened, nor which jobs or documents you looked at. Your browser keeps a list of the screens you opened today, so a screen is counted as a visitor once per day; it never leaves your device.

Both are deleted automatically after 90 days, and both stay in our own database; neither is shared with anyone.

What we do not do

• We do not sell or rent your data.
• We do not use your data for advertising or profiling.
• We do not share your data with third parties, beyond the content processor named above and the cookieless website analytics described above.
• We do not track your browsing outside of pages you explicitly act on.

Data retention and deletion

Your profile and generated applications remain in your HatataAI account until you delete them or your account is removed. Account activity entries and screen totals are deleted after 90 days. To disconnect the extension, use “Sign out” in the popup, which clears the stored token from your browser.

Contact

Questions about this policy or your data: bisrat.moges306@gmail.com.