# Privacy Policy

Sponzza Visa Sponsorship Checker · Last updated: June 2026

Sponzza ("we", "our", "the extension") is a Chrome extension that helps international professionals in the UK identify genuine visa sponsoring employers on LinkedIn. This policy explains what data we collect, why, and how it is protected.

## 1. What we collect

- Google account email address. Collected when you sign in with Google. Used only to identify your account. We do not access your Google contacts, calendar, or any other Google data.
- CV / résumé text. When you upload a PDF résumé, we extract its text content and store it privately in your account. This text is used to score your fit against job roles you view on LinkedIn. Your original PDF is stored securely.
- Job activity. When you click Apply on a role at a company that holds a sponsor licence, we save the company name, job title, job URL, and date. This data is visible only to you in the Tracker tab.
- Device storage. We store your login session locally in Chrome's storage to keep you signed in between browsing sessions.

## 2. What we do not collect

- We do not read, store, or transmit any LinkedIn messages, connections, profile data, or private content.
- We do not collect browsing history beyond the LinkedIn jobs pages where the extension is active.
- We do not sell, share, or license your personal data to any third party.
- We do not display advertising.

## 3. How data is stored and protected

Your account data (CV text and job activity) is stored in Supabase, a secure cloud database. Each user's data is isolated using row-level security — no other user can access your records. Data is encrypted in transit (HTTPS) and at rest.

AI analysis (SOC code matching and CV scoring) is performed via a Cloudflare Worker that calls Anthropic's API. Your CV text and job description are sent to this service for analysis. No data is retained by the AI service beyond the duration of the request.

## 4. Third-party services

- Google OAuth — used for sign-in. Governed by Google's Privacy Policy.
- Supabase — used for secure data storage. Governed by Supabase's Privacy Policy.
- Anthropic — used for AI analysis. Governed by Anthropic's Privacy Policy.
- Cloudflare — used for the analysis API. Governed by Cloudflare's Privacy Policy.

## 5. Data retention and deletion

Your data is retained for as long as your account is active. You can delete your account and all associated data by contacting us at the email address below. We will process deletion requests within 30 days.

## 6. Children

Sponzza is intended for adults in the UK workforce. We do not knowingly collect data from anyone under 18.

## 7. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the extension after changes constitutes acceptance of the updated policy.

## 8. Contact

For privacy questions or data deletion requests, contact us at: privacy@sponzza.com