Privacy Policy

Last updated: June 2026

Sponzza ("we", "our", or "the extension") is a Chrome browser extension that helps international professionals in the UK identify genuine visa-sponsoring employers on LinkedIn. This Privacy Policy explains what personal data we collect, why we collect it, how we store it, and your rights in relation to it.

1. What data we collect

We collect only the minimum data necessary to provide the service:

• Google account email address. Collected when you sign in with Google. Used solely to identify your account. We do not access your Google contacts, calendar, emails, or any other Google data.
• CV / résumé text. When you upload a PDF CV, we extract the text content and store it privately in your account. This text is used to score your fit against job listings you view on LinkedIn. Your CV text is visible only to you.
• Job application activity. When you click Apply on a LinkedIn job at a company that holds a UK sponsor licence, we save: company name, job title, job URL, and the date. This data is visible only to you in the Tracker feature.
• Session token. We store your login session locally in Chrome's storage to keep you signed in between browser sessions.

2. What we do not collect

• We do not read, store, or transmit your LinkedIn messages, connections, profile data, or any private LinkedIn content.
• We do not collect your browsing history beyond the LinkedIn jobs pages where the extension is active (linkedin.com/jobs/*).
• We do not sell, share, rent, or license your personal data to any third party, ever.
• We do not display advertising of any kind.
• We do not track you across websites.

3. How we use your data

• CV text is sent to our AI analysis service (Anthropic Claude) to generate a relevance score for specific job listings. It is not stored by Anthropic beyond the duration of the request.
• Job title and description text from LinkedIn job pages is sent to our analysis service to identify the UK SOC 2020 occupation code and salary threshold. No personally identifiable information is included in these requests.
• Application activity is stored in your private Supabase database account, accessible only by you via row-level security.

4. How data is stored and protected

Your account data is stored in Supabase, a secure cloud database hosted in the EU. Each user's data is isolated using row-level security — no other user or administrator can access your records. All data is encrypted in transit (HTTPS/TLS) and at rest.

Your CV and job activity are stored under a folder keyed to your unique user ID. Only you can access your own folder.

5. Third-party services

Sponzza uses the following third-party services to operate:

• Google OAuth — sign-in only. Governed by Google's Privacy Policy.
• Supabase — database and file storage. Governed by Supabase's Privacy Policy.
• Anthropic — AI text analysis (SOC matching, CV scoring). Governed by Anthropic's Privacy Policy.
• Cloudflare — API proxy and website hosting. Governed by Cloudflare's Privacy Policy.

No data is shared with any other third party.

6. Data retention and deletion

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing privacy@sponzza.com. We will process deletion requests within 30 days.

When you replace your CV in the extension, the previous version is overwritten. We do not retain historical CV versions.

7. Your rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at privacy@sponzza.com.

8. Children

Sponzza is intended for adults in the UK workforce. We do not knowingly collect personal data from anyone under the age of 18.

9. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date above. Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy questions, data access requests, or deletion requests:

• Email: privacy@sponzza.com
• Website: sponzza.com