Privacy
Knockwork exists to fill out job applications for you, which means it handles personal information by design. This page says exactly what we store, where it lives, and what we will never do with it. Plain language, no surprises.
What lives where
In your browser (on your computer, not our servers):
- Your full application profile: name, contact details, education, work history, essay answers, and the passwords the bot creates for job-site accounts. It sits in the extension's local storage on your machine.
- Your AI keys (Holo, DeepSeek, 2Captcha). They are stored by the extension and sent directly to those providers when used.
- Your base resume file.
On our servers:
- Your account email address and sign-in session.
- Your knowledge base: the background text you paste so resumes can be tailored.
- Tailored resumes generated for your applications, and the job descriptions they were tailored to.
- Activity events from your bot (what it is doing, which jobs it applied to) so your dashboard works from any device. Recent events are kept in memory for live streaming.
What passes through but is not kept
- When a resume is tailored, your DeepSeek key rides along with the request so the AI call is billed to you directly. It is used for that job and not written to disk on our side.
- Job application form contents are typed by the extension in your browser. They go to the employer, not to us.
What we never do
- We never sell your data or share it with advertisers.
- We never train AI models on your information.
- We never submit an application without your say-so. Stop-before-submit is the default.
- We never read your email inbox. Verification emails are matched by sender and code pattern only, through the poller you configure.
Cookies
One cookie: your sign-in session. No analytics trackers, no ad pixels.
AI providers
The bot's reasoning runs on H Company's Holo model, and resume tailoring uses the model you bring a key for (DeepSeek by default). When the bot works, screenshots of the job-site pages it is filling and the relevant parts of your profile are sent to those providers to decide the next action, under your own API keys and their privacy terms.
Deleting your data
Removing the extension wipes everything stored in your browser. Email us from your account address to delete your server-side account, knowledge base, and stored resumes.
Questions
Write to the address in the footer of the main page. A human reads it.