Bulk Resume Downloader for Workable privacy

Where the extension runs

Entirely in your browser. Atesen Software receives no candidate data, no Workable token and no list of jobs from it. The only Atesen Software service it ever contacts is the license server, and only when you have entered a license key.

What it reads

With the API token you enter, it reads from your own Workable account: the list of jobs, a job's pipeline stages, the job's candidates, each exported candidate's details, and each resume file from the short-lived address Workable gives for it. It changes nothing in Workable.

What it stores

• Your token: in the browser's session storage, cleared when the browser closes, or, if you tick Remember, in the extension's local storage on this computer until you disconnect. It is never synced to other devices.
• Your export options, such as the file name pattern, in the browser's synced extension storage.
• If you enter one, your license key and the date it was last checked, in the extension's local storage on this computer, until you remove it.
• The ZIP and its index.csv only as files you download. While an export runs, candidate data is held by the tab (the browser may keep a large export in its temporary storage); it is gone when the tab closes.

What it sends, and to whom

• To your Workable account (yourcompany.workable.com): requests carrying your token, as Workable's API requires.
• To the address Workable gives for each resume file: a plain download request, without your token.
• Only if you entered a license key: the key, and nothing else, to the Atesen Software license server (https://resume-downloader.atesensoftware.com), while the export page is open, at most once a day while the key is still valid (about once an hour after the key has expired), and once more before an export if that day has passed, to receive a renewed key and to learn whether the subscription was canceled or refunded. The server keeps the key's id, Paddle's subscription and transaction ids and a keyed hash of the buyer's e-mail address; it never receives candidate data or your Workable token.
• Buying the unlimited plan happens on the license site, in Paddle's checkout. Paddle is the merchant of record and receives your e-mail address and payment details; the extension never sees them.
• Nothing else: no analytics, no error reporting, no remote code.

Permissions it asks for

• Storage: for the token, your options and, if you enter one, your license key.
• Access to workable.com: to call Workable's API, which does not allow ordinary web pages to call it.
• Optional access to one more address, asked for only when Workable keeps resume files outside workable.com: to download those files. The browser asks you first, and you can refuse.

Candidates' personal data

Resumes and the index contain personal data about job applicants. Once exported they are files on your computer, under your organisation's own data protection obligations. The extension does not keep copies.