Introduction
OctoBird ("we," "our," or "us") provides a job application tracking platform available through our website and Chrome extension (collectively, "the Services"). This Privacy Policy explains how we collect, use, and protect your information across both platforms.
Information We Collect
Information You Provide
- Account Information: Email address, name, and authentication credentials when you create an account
- Job Application Data: Job postings, company names, job titles, URLs, application status, notes, and related information you choose to save
- Snippets and Templates: Quick-copy snippets, cover letter templates, and other custom content you create
- Calendar and Interview Data: Interview schedules, reminders, and related notes
- Feedback: Any feedback, questions, or support requests you submit to us
Automatically Collected Information
- Usage Data: Information about how you interact with our Services (such as features used and actions taken within the app). We do not track your general web browsing activity
- Device Information: Browser type and version, operating system, device type
- Extension-Specific Data: Websites where you use the Chrome extension to save job postings
- Error Logs: Technical information when errors occur to help us improve the Services
Chrome Extension Specific
Our Chrome extension accesses the following to provide its functionality:
- Active Tab: To capture job posting information from the current webpage you're viewing
- Webpage Content: Only when you explicitly click the extension icon to save a job posting
- Local Storage: To cache data and provide offline functionality
The extension does NOT track your browsing history, monitor your activity on other websites, or collect data without your explicit action to save a job posting.
How We Use Your Information
We use the collected information to:
- Provide and maintain the Services functionality
- Store and sync your job tracking data across devices
- Authenticate your account and maintain security
- Improve and optimize the Services based on usage patterns
- Respond to your support requests and communications
- Send important updates about the Services (you can opt out of non-essential communications)
- Detect, prevent, and address technical issues or security vulnerabilities
We do NOT use your job application data for any purpose other than providing the Services to you.
AI Processing
When you save a job posting using the Chrome extension, the job description content may be sent to a secure AI processing service (OpenAI APIs) to extract structured job information such as job title, company name, location, and other relevant details.
Important AI Processing Details:
- This data is processed solely to provide the requested functionality (extracting job information)
- The processed content is not used to train public AI models
- Processing occurs only when you actively use the extension to save a job posting
- The extracted information is stored in your account and synced to your devices
For more information about OpenAI's data handling practices, see OpenAI's Privacy Policy.
Data Storage and Security
We use Supabase as our data infrastructure provider for authentication and database services. We implement industry-standard security measures including:
- Encryption of data in transit using HTTPS/TLS
- Encryption of data at rest
- Secure authentication and authorization protocols
- Regular security audits and updates
While we implement robust security measures, please note that no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Data Sharing and Third Parties
We Do NOT:
- Sell your personal information to anyone
- Share your data with advertisers
- Use your job application data for marketing or analytics beyond improving the Services
- Share your data with third parties for their own purposes
We May Share Data:
- Service Providers: With trusted service providers who help operate the Services (e.g., Supabase for data storage). These providers are contractually obligated to protect your data.
- Legal Requirements: When required by law, court order, or governmental request
- Protection of Rights: To protect our rights, property, or safety, or that of our users
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
- With Your Consent: When you explicitly authorize us to share specific information
Third-Party Services
We use the following third-party services:
- Supabase: For authentication and data storage (Privacy Policy)
- OpenAI: For AI-powered job information extraction (Privacy Policy)
Chrome Extension Permissions Explained
Our Chrome extension requests the following permissions, which are necessary for its functionality:
activeTab
Allows the extension to access the current tab when you click the extension icon to save a job posting
storage
Saves your preferences and enables data sync across devices
scripting
Enables the extension to temporarily inject code to extract job posting information from web pages, only when you click the extension icon
identity
Required for secure Google OAuth authentication flow
Your Rights and Choices
You have the following rights regarding your personal information:
- Access: View all data we have stored about you through your account settings
- Edit: Modify or update your job application data, snippets, and account information at any time
- Delete: Remove individual job postings, snippets, or delete your entire account
- Export: You may request a copy of your data in a structured, machine-readable format
- Opt-Out: Unsubscribe from non-essential emails or stop using the Services by uninstalling the extension and deleting your account
How to Delete Your Data
- Log into your OctoBird account
- Go to Settings → Account
- Click "Delete Account"
- Confirm deletion
Your personal data will be deleted within a reasonable period following account deletion. If you have questions about data deletion, please contact us.
Data Retention
We retain your personal information only as long as necessary to provide the Services and fulfill the purposes outlined in this Privacy Policy. Your personal data will be deleted within a reasonable period following account deletion, except where retention is required for legal, security, or operational purposes.
Certain anonymized technical logs may be retained for security and debugging purposes.
International Users
Your information may be transferred to and processed in countries other than your own. We ensure that adequate safeguards are in place to protect your personal information in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this page
- Sending an email notification for significant changes
- Displaying a prominent notice in the Services
Your continued use of the Services after changes indicates your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Additional Rights for EU and California Residents
If you are located in the European Union or California, you may have additional rights under GDPR or CCPA:
- Right to know what personal information we collect and how we use it
- Right to request deletion of your personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your privacy rights
- Right to data portability
To exercise these rights, please contact us using the information above.
This Privacy Policy applies to both the OctoBird web application and Chrome extension.