Is Hirecarta - All-in-one, AI Job Application Platform safe?

Low risk

Hirecarta sends autofill field values, selectors, page URLs, and local storage identifiers to hirecarta.com analytics.

When Hirecarta fills or observes forms, its content script logs pre-filled values, AI-filled values, selectors, and the page URL. The logger also includes a PostHog session ID and Hirecarta profile data read from the page's localStorage, then posts events to hirecarta.com/hc-events/capture. It also marks pages with a DOM attribute and event that let sites detect the extension is installed.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

RevvRallyv2.2.6Chrome Web Store
15Risk
Who publishes it

RevvRally - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
RevvRally
Registered address
19 Tyler Rd, Lexington, MA 02420-2416, US
Registered contact
Chester Liu

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Hirecarta - All-in-one, AI Job Application Platform contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • hirecarta.com

    Hirecarta - All-in-one, AI Job Application Platform sends data to hirecarta.com. No other extension we have analysed sends data here.

Updated 30 September 2026jbphhplpkgnllkldlecpdopdlmjlaadp