Newkid

Privacy Policy

Last Updated: January 17, 2026

Overview

Newkid ("we", "our", or "us") operates the Newkid Chrome Extension (the "Extension"). This privacy policy explains how we collect, use, and protect your information when you use our Extension.

Information We Collect

1. Authentication Information

  • Email address: Used for account identification and authentication via Clerk
  • Authentication tokens: Short-lived JWT tokens (60-second validity) for secure API communication
  • Session cookies: HTTP-only cookies set by our web application for authentication purposes

2. Profile Information

  • Personal details: Name, phone number (if provided)
  • Resume: PDF file and extracted text content (if uploaded)
  • Professional information: Any additional remarks or notes you provide in your profile

3. Job Application Data

  • Application sessions: Job titles, company names, platform (LinkedIn/Indeed)
  • Questions and answers: Form responses generated during job applications
  • AI usage: Count of AI-powered autofill requests

4. Subscription Data

  • Subscription tier: FREE, PLUS, PRO, or LIFETIME_PRO
  • Usage metrics: Monthly AI request counts, API usage statistics
  • Payment information: Managed by Stripe (we do not store credit card details)

5. Technical Information

  • API request logs: For debugging, security, and rate limiting purposes
  • Error logs: To improve extension functionality and reliability

How We Use Your Information

We use the collected information for the following purposes:

  1. Authentication: Verify your identity and maintain secure access to your account
  2. Core Functionality: Provide AI-powered job application autofill on LinkedIn
  3. Service Improvement: Analyze usage patterns to enhance features and user experience
  4. Customer Support: Respond to your questions, requests, and technical issues
  5. Subscription Management: Track usage limits and enforce tier-based restrictions
  6. Legal Compliance: Comply with applicable laws and regulations

Data Storage and Security

Storage Location

  • All user data is stored on secure PostgreSQL databases hosted on Supabase (AWS infrastructure)
  • Resume files are stored on Supabase Storage with encryption at rest
  • Authentication is managed by Clerk with industry-standard security practices

Security Measures

  • Encryption: All data transmission uses HTTPS/TLS encryption
  • Token expiry: Authentication tokens expire after 60 seconds
  • HTTP-only cookies: Session cookies are inaccessible to JavaScript (XSS protection)
  • Access control: Data access restricted to authenticated users only
  • No local storage: Extension does not store sensitive data in browser local storage

Data Sharing and Third Parties

We share your information with the following third-party services:

1. Clerk (Authentication Provider)

2. OpenAI or Anthropic (AI Provider)

3. Stripe (Payment Processor)

4. Supabase (Database and Storage)

Data Retention

  • Active accounts: We retain your data while your account is active
  • Account deletion: You may request account deletion by contacting support
  • Retention after deletion: We may retain logs for up to 90 days for security and legal purposes
  • Resume files: Deleted immediately upon profile deletion or file removal

Your Rights

You have the following rights regarding your personal data:

  1. Access: Request a copy of your personal data
  2. Correction: Update or correct inaccurate information in your profile
  3. Deletion: Request deletion of your account and associated data
  4. Export: Download your data in a portable format
  5. Opt-out: Discontinue use of the Extension at any time

To exercise these rights, contact us at: support@newkid.io

LinkedIn Data

The Extension operates on LinkedIn.com to provide job application automation:

  • No LinkedIn data collection: We do not collect, store, or share your LinkedIn profile data, connections, messages, or activity beyond the job applications you initiate
  • User-initiated actions: All automation is triggered by you clicking the "Start Auto-Apply" button
  • Job application data: We only store the job titles, company names, and your responses to application questions
  • LinkedIn Terms of Service: You are responsible for ensuring your use of automation complies with LinkedIn's Terms of Service

Children's Privacy

The Extension is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Displaying a notification in the Extension (for material changes)

Continued use of the Extension after changes constitutes acceptance of the updated policy.

Cookie Policy

Cookies We Use

  1. Session Cookies: HTTP-only authentication cookies set by Clerk on *.newkid.io domain
  2. Purpose: Maintain your login session and enable secure API authentication
  3. Expiry: Automatically expire when you log out or after session timeout
  4. Third-party cookies: Clerk may set additional cookies per their privacy policy

Managing Cookies

You can control cookies through your browser settings. However, disabling cookies will prevent the Extension from functioning properly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers.

Contact Us

If you have questions about this privacy policy or our data practices:

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal bases for processing your personal data are:

  1. Contract performance: Processing necessary to provide the Extension services
  2. Legitimate interests: Improve our services, prevent fraud, and ensure security
  3. Consent: Where you have given explicit consent for specific processing activities
  4. Legal obligations: Comply with applicable laws and regulations

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  1. Right to Know: Request information about data collection and use
  2. Right to Delete: Request deletion of personal information
  3. Right to Opt-Out: Opt-out of the "sale" of personal information (we do not sell personal information)
  4. Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at support@newkid.io.

By using the Newkid Chrome Extension, you agree to this privacy policy.

Privacy Policy - Newkid | Data Protection & GDPR Compliance | Newkid