Privacy Policy

Petalon is a Chrome extension and web application operated as a solo project. Contact: [email protected]. If you're in the EU, you can also reach us about data-protection questions at the same address.

• Account info — your email, a securely-hashed password, and an optional display name.
• Your votes — the flags (green / red / ghost) you cast on companies. Votes contribute to public aggregate counts but are never shown attributed to your account anywhere users can see.
• Tracked jobs (Pro plan) — what you save with the "Track job" button: the job link, position, company, your status, and any notes you type. Visible only to you.
• Billing — handled by Stripe. We hold only the identifiers Stripe gives us to look up your subscription, never your card details.
• Limited operational data — enough to keep the service healthy and to prevent abuse. We do not store browsing history or anything about pages you visit outside of what you explicitly save.

• No LinkedIn profile data, posts, messages, or connection graph. The extension only reacts to public job and company pages you yourself open.
• No advertising trackers. We don't sell ads, we don't sell data.
• No fingerprinting beyond what's needed to keep you signed in.

We use a small number of strictly necessary cookies to keep you signed in (Supabase Auth session). These cookies are not optional — without them you can't have an account at all. We do not use analytics, advertising, or marketing cookies, so there is nothing to "decline" in the meaningful sense. The banner you see on first visit is informational.

All data is stored in Supabase, hosted in the EU (Frankfurt). Stripe processes payments in their jurisdictions. Resend (transactional email) is hosted in the US; we send your email only to deliver trial-ending and password-reset messages.

We retain your account data — profile, tracked jobs, billing identifiers — for as long as you have an active account. If you delete your account, we delete those personal records.

One exception — votes are retained. Your votes stay in the database after account deletion because they help other candidates make better decisions. They're detached from your identity and continue contributing to the public count — that's the whole point of Petalon.

Backups are kept for 30 days as standard infrastructure practice and then expire automatically.

You can, at any time:

• Delete your account, which deletes the personal data linked to it (subject to the vote-retention exception above).
• Ask us in writing what we have on you and why — email [email protected] and we'll reply within 30 days.
• Correct inaccurate data by replying to that thread.

If we ever change this policy, we'll email you at least 30 days before any change that meaningfully affects how your data is handled. We won't quietly relax the limits we promise above.