Ingraft Privacy Policy
Last updated: 31 July 2026 · Version 1.0
1. Who we are
Ingraft is a Chrome extension and accompanying service that tailors your CV and cover letter to a specific job advert, and keeps track of the jobs you have saved or applied to.
For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is Samuel Mudd, trading as Ingraft, 58 Harrow Road, Birmingham B29 7DW, United Kingdom.
Questions, requests or complaints: privacy@ingraft.co.uk.
2. What we collect, and why
2.1 Data we store on our servers
This is the complete list. There is nothing else.
| Data | Why we hold it | Lawful basis |
|---|---|---|
| Email address | It is your account identifier and how you sign in. It is also shown to people you have accepted as friends. | Performance of a contract |
| Password, stored only as a bcrypt hash | To sign you in. We cannot read your password and cannot recover it for you. | Performance of a contract |
| Display name and avatar (an emoji and a colour) | Shown on your profile and to friends. Defaults to the part of your email before the @ sign until you change it. | Performance of a contract |
| Jobs you save or mark as applied: job title, employer, the advert's web address, where the listing came from, location, any closing date stated on the advert, and the dates you saved and applied | This is the application tracker. It is the feature. | Performance of a contract |
| Your plan, how many documents you have generated, and monthly counts | To apply your allowance and bill you correctly. | Performance of a contract |
| Aggregate counts of AI tokens used by your account | To understand what the service costs to run. These are numbers only - no content is retained. | Legitimate interests (running a viable service) |
| The email addresses of friends you have added, and pending friend requests | To run the friends list and leaderboard, which are optional. | Performance of a contract |
| The date you created your account | Account administration. | Performance of a contract |
2.2 Data we deliberately do not store
The following passes through our server and is never written to our database or to disk:
- Your CV file. When you upload it we read the text out of it in memory, extract the details, and return them to your browser. The file is never written to disk and is discarded as soon as the request finishes.
- Your CV details. The structured version of your CV lives in your browser's extension storage. Your browser sends it with each tailoring request and we hold it only for the moment it takes to answer.
- The CVs and cover letters we write for you. These are returned to your browser and stored there. We keep no copy.
- The text of job adverts you tailor against. Used for that one request, then discarded.
We do not log the contents of requests. Because we hold no copy of your CV, we cannot produce one for you, and we cannot recover your documents if you clear your browser data.
2.3 Data stored in your browser
The extension stores the following on your own computer using Chrome's extension storage. It is not transmitted to us except as described above, and removing the extension removes it.
- Your CV details and, if you upload one, your reference cover letter
- Documents Ingraft has written for you, kept so you can reopen them later
- Your sign-in token, which expires after 30 days
- Your settings: chosen template, tone, and which tab you had open
3. Who we share it with
3.1 Anthropic
Ingraft uses Claude, an AI model operated by Anthropic PBC (USA), to read job adverts and write your documents. When you tailor a document we send Anthropic your CV details, the text of the job advert, your chosen settings and, if you provided one, your reference cover letter. Anthropic returns the finished text to us and we pass it to your browser.
Anthropic acts as our processor and is contractually bound to use this data only to provide the service. Your data is not used to train AI models.
This involves a transfer of personal data to the United States. That transfer is covered by the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, as set out in Anthropic's Data Processing Addendum.
3.2 Other Ingraft users
Friends and the leaderboard are optional. If you accept someone as a friend, they can see your email address, your display name, your avatar and how many applications you have made in total and this week. They cannot see which jobs you applied to, your CV, or anything you have written. If you would rather not share your email address with anyone, do not use the friends feature.
Sending a friend request to an email address will tell you whether that address has an Ingraft account.
3.3 Infrastructure
Our server and database are hosted by Railway Corp. (United States). This is a transfer of personal data outside the UK, covered by their standard data processing terms incorporating the UK International Data Transfer Addendum. They store data on our behalf and do not use it for their own purposes.
3.4 Payments
Ingraft does not currently take payments, so we hold no payment or card details at all. When paid plans launch, card payments will be handled by Stripe, who process them as a separate data controller under their own privacy policy. We will never see or store your card number - we will only receive confirmation that a subscription is active.
3.5 What we never do
- We do not sell your personal data. Ever, to anyone.
- We do not use it for advertising or share it with advertisers or data brokers.
- We do not use it to train AI models, and our AI provider is contractually barred from doing so.
- There are no third-party analytics, trackers or advertising cookies in the extension.
4. How long we keep it
- Your account and tracked jobs: until you ask us to delete them.
- Your CV, job adverts and generated documents: not retained. They exist on our server only for the seconds it takes to handle a request.
- Records we must keep by law, such as records of payments for tax purposes: for as long as the law requires, currently six years.
5. Your rights
Under the UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent where we rely on it.
To exercise any of these, email privacy@ingraft.co.uk. We will respond within one month. There is no charge.
You can delete your account yourself, without asking us: open the extension, go to the Profile tab and choose Delete my account. You will be asked for your password, because it cannot be undone.
Deleting your account removes your email address, password hash, profile, tracked jobs and friend connections, and removes your address from other people's friend lists and pending requests. Anything held in your own browser is cleared at the same time, and uninstalling the extension removes the rest.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would appreciate the chance to put things right first.
6. Security
- All traffic between the extension and our servers uses HTTPS.
- Passwords are hashed with bcrypt. We never store or see the plain password.
- Sign-in tokens expire after 30 days.
- The API only accepts requests from the Ingraft browser extension, not from ordinary websites, so another site cannot use your session.
- Rate limits apply to sign-up, sign-in and generation to make abuse impractical.
No system is perfectly secure. If we ever suffer a breach that is likely to put your rights at risk, we will tell the ICO within 72 hours and tell you without undue delay.
If you find a security problem, please report it to privacy@ingraft.co.uk. We will not pursue anyone who reports a genuine issue in good faith.
7. Cookies
The extension does not use cookies. Your sign-in token is kept in extension storage, not in a cookie. This website uses no cookies and no analytics.
8. Children
Ingraft is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has created an account, tell us and we will delete it.
9. Automated decision-making
Ingraft uses AI to write documents, and the free job-matching feature (when enabled) uses AI to rank job adverts. Neither makes any decision that produces a legal or similarly significant effect about you. Everything the AI produces is a draft for you to read, edit and decide whether to use. It is your CV and your application; the responsibility for what you send is yours.
10. Browser permissions
The extension asks to read the page you are on only when you click Tailor, so it can read the job advert. It does not run in the background, does not read pages you have not asked it to read, and does not track your browsing.
Data collected through the extension is used solely to provide the tailoring and tracking features described here, in line with the Chrome Web Store Limited Use requirements.
11. Changes
If we change this policy we will update the date at the top. If the change materially affects your rights we will tell you by email before it takes effect.