Effective 28 October 2026 · Version 2026-10-28-r22
Privacy Policy
Your CV and job search are personal. This policy explains the information Career Parrot uses and the choices you have.
Who is responsible
Career Parrot is operated by Opinionated Technologies. Contact: grey@greyjabesi.com.
Information you provide
We process your account email and sign-in information, CV text and approved edits, name and contact details you enter, skills, experience, qualifications, search preferences, saved vacancies and application drafts. Avoid including identity documents, financial details, medical information or other unnecessary sensitive information in your CV.
How the service uses information
We use account and profile information to provide your account, help edit your CV when you request it, match your preferences to vacancies, keep your drafts and support you. We also use limited account, billing and security records to prevent abuse, process subscriptions, handle requests and maintain the service. Providing core account information is needed for an account; optional profile details help personalize results.
Your device and saved profile
CV files are read in your browser to extract text. The upload step does not send the original PDF or DOCX file to our server. Your working profile is kept in browser session storage. If you choose “Keep my profile on this device”, a copy is also kept in local storage. Sign-in uses browser storage to keep your session connected. When signed in and saving your profile, CV text and profile information are stored in your private cloud account. Signing out and clearing this device’s data are separate controls from deleting cloud account data.
AI wording suggestions
If you request AI wording help, your CV text is sent through our server to OpenAI. Suggestions are checked against the supplied facts and remain subject to your review and approval. We request that the generated response is not stored as a response object, but providers may retain operational or security records under their own terms. Do not upload information you do not want processed by an AI provider. We do not make hiring, visa or work-permission decisions.
First-party source measurement
We count landing views, CTA and destination choices, profile starts, whether a CV was added and newly confirmed accounts by a small allowlist of campaign sources. Counts contain no names, emails, CV text, raw account identifiers, IP addresses or device fingerprints. Random tab-session references and separate keyed deduplication references expire after 24 hours and are removed on the next analytics write to prevent duplicate events and enforce limits; they are separate from account and CV records. Session attribution may be carried through your confirmation link. Reports show aggregates only. No third-party advertising tracker is added.
Email and operational notifications
Resend delivers account confirmation, recovery and opted-in job alerts. You can turn off Email alerts in Settings; account, security and billing communications may still be needed. Limited owner notifications may be delivered through Telegram: event type, a short account reference and payment amount/status where relevant. These operational messages do not contain CV text or application drafts.
Payments
Stripe processes card checkout and recurring subscriptions. PayChangu is an additional option for accounts whose saved country of residence is Malawi and processes one-time payments for 30 days of access. Card and mobile-money details are entered into the chosen provider’s payment interface, not stored as full payment credentials in Career Parrot. We keep account-linked provider references, amounts, currencies, payment status, access periods and limited event, consent and cancellation records. Your private country of residence determines local payment options; job destinations and IP addresses do not authorize local checkout.
Service providers and international processing
Cloudflare hosts the service; Supabase provides authentication and database storage; OpenAI processes requested AI edits; Resend delivers email; Stripe and PayChangu process payments; and Telegram supports limited owner notifications. Our application database is hosted in the EU. These providers may also process information in other countries, including outside the UK, South Africa or Malawi, under their applicable service and data-processing arrangements. Contact us for information about the safeguards relevant to your request.
Vacancies, applications and public information
The shared vacancy catalogue contains job information and source links, not your private CV or profile. Automatic employer applications are not connected at present. When you open an employer website, email app or messaging service, you control the information you send and that service’s privacy terms also apply.
Why we can process information
We process information needed to provide the service under our agreement with you, to meet applicable legal obligations, and for legitimate interests in operating, securing and supporting the service. Where we rely on consent for optional alerts or processing, you may withdraw it without affecting processing already carried out. We consider your rights when relying on legitimate interests.
How long information is kept
Account, CV and draft information is kept while needed for your account or until you delete it. Deleting your account removes the cloud profile and application history and revokes account access. Minimal billing, deletion, security and notification records may remain where needed for reconciliation, preventing duplicate actions, legal obligations or disputes; these records do not need CV contents. Payment providers and backups may retain records under their own retention arrangements. The period depends on the record’s purpose and applicable obligations. Contact us to ask about a particular record or request a retention review.
Your controls and rights
You can edit your profile, turn off alerts, pause matching, clear device data and delete your account in Settings. Deletion ends account access and cancels any linked membership immediately; it does not automatically issue a refund. Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing. Send requests to grey@greyjabesi.com; we may need proportionate identity verification. You may complain to the UK Information Commissioner, South Africa’s Information Regulator, Malawi’s Data Protection Authority, or your relevant local regulator.
Updates and contact
Effective 28 October 2026. We will update this page when our practices materially change. For privacy questions or requests, contact grey@greyjabesi.com.