TalentOS Resume Capture

Chrome Extension · Internal Tool · Last updated: June 15, 2026

The TalentOS Resume Capture Chrome extension is an internal tool developed and operated exclusively by SFJ Business Solutions (SFJBS) for use by authorised recruiters and employees. It is not distributed publicly and is not available on the Chrome Web Store for general audiences.

This policy explains what data the extension collects, why it collects it, how it is handled, and your rights as a user.

1. Who This Extension Is For

This extension is intended solely for SFJBS employees and authorised recruiters who access the TalentOS Applicant Tracking System (ATS). Access requires a valid TalentOS account. Unauthorised use is not permitted.

2. What Data Is Collected

The extension collects only the minimum data necessary to perform its core function: capturing resume files from Naukri / Naukri ResDex and uploading them to TalentOS.

Resume files

PDF/DOC resume files downloaded or viewed by the recruiter on naukri.com or resdex.naukri.com are intercepted via XHR monitoring and forwarded to TalentOS as a base64-encoded upload.

Authentication token

Your TalentOS access token is synced from the TalentOS web application via a cookie watcher and stored in chrome.storage.local. This token is used to authenticate all API calls on your behalf.

Recruiter identity

Your name and email address are synced from TalentOS at login and stored locally in the extension to display in the popup dashboard.

Active requirement context

When a recruiter activates a job requirement in TalentOS, the requirement ID, code, title, and assignment ID are stored locally so the extension knows which role a captured resume belongs to.

Naukri credentials (optional)

If the Naukri auto-login feature is enabled for your account, the extension fetches your stored Naukri email and password from the TalentOS API to auto-fill the Naukri login form. These credentials are never stored in the extension itself — they are fetched on demand and used only to fill the login form.

Capture counters

A local count of resumes captured in the current session is maintained in chrome.storage.local for display in the popup. This counter is cleared on logout.

3. What Data Is NOT Collected

The extension does not collect browsing history.
It does not read or transmit page content outside of resume file interception on naukri.com and resdex.naukri.com.
It does not track keystrokes, form inputs, or any candidate personal data beyond what is contained in the resume file itself.
It does not collect analytics, usage metrics, or crash reports to any third-party service.
It does not access your microphone, camera, clipboard, or location.

4. How Data Is Used

All data collected is used exclusively to operate the resume capture workflow within TalentOS:

→Resume files are uploaded to the TalentOS Candidate Service API for parsing, deduplication, and storage.
→Authentication tokens are used to authorise API requests to TalentOS backend services (hosted on Google Cloud Run).
→Requirement context ensures captured resumes are linked to the correct job opening and recruiter assignment.

Data is never sold, rented, shared with third parties, or used for advertising.

5. Data Storage & Retention

Local extension storage (chrome.storage.local): Session data (token, recruiter identity, active requirement, capture counters) is stored locally on your device. It is cleared when you log out of TalentOS or when the extension session is reset.

TalentOS backend: Uploaded resumes and candidate records are stored in SFJBS-controlled PostgreSQL databases and Google Cloud Storage (S3-compatible). Retention follows SFJBS internal data retention policies.

No remote logging: The extension does not send logs, errors, or telemetry to any external service. Console output is limited to your local browser DevTools.

6. Permissions Used

The following Chrome permissions are declared in the extension manifest, each with a specific justification:

storage

Stores auth token, recruiter identity, and active requirement context locally on your device.

cookies

Watches for changes to the TalentOS accessToken cookie to keep the extension session in sync when you log in or refresh your token.

activeTab

Allows the popup to interact with the currently active tab when a recruiter activates a requirement.

scripting

Enables injection of the content scripts on Naukri pages for XHR interception.

tabs

Used to open the TalentOS web application in a new tab when the recruiter clicks the login button in the popup.

notifications

Shows a browser notification when a resume is successfully captured or when an error occurs.

7. Host Permissions

The extension is granted access to the following domains only:

▸*.naukri.com / resdex.naukri.com — for resume XHR interception and Naukri auto-login
▸TalentOS frontend domains (Vercel) — to receive login/logout/requirement events
▸TalentOS API gateway (Google Cloud Run) — to upload resumes and fetch credentials
▸localhost — for internal development and testing only

The extension does not operate on any other websites or domains.

8. Security

All communication between the extension and the TalentOS backend is performed over HTTPS. Authentication uses short-lived JWT access tokens. The extension does not persist any passwords. Naukri credentials, if used, are fetched ephemerally from the TalentOS API and never written to extension storage.

If you believe there is a security issue with this extension, please contact the TalentOS engineering team at growth@sfjbs.com.

9. Changes to This Policy

SFJBS may update this privacy policy as the extension evolves. Since this is an internal tool, updates will be communicated to authorised users via internal channels. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact

For questions about this privacy policy, data handling, or the TalentOS Resume Capture extension:

SFJ Business Solutions

Bengaluru, Karnataka, India

growth@sfjbs.com