kery.io kery.io
Search with evidence Apply with confidence
Sign Up Login

Legal

Privacy Policy

Last updated: August 2026 · Version 1.0 · Effective date: 26 August 2026

1. Introduction

kery.io ("kery.io", "we", "us", or "our") provides a job-application tracking dashboard and browser extension that help you save job listings, assess ghost-job risk, review market-worth signals, and prepare for interviews. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. kery.io is operated by Adam Kery trading as kery.io (ABN 76 776 757 103). We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and this policy is written to meet those requirements.

By creating an account, using our website at https://kery.io, using our dashboard, or installing the Kery Chrome extension, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect information in the following categories:

Account information

  • Email address: used to create and sign in to your account (via our authentication provider).
  • Account identifiers: internal user IDs and tokens used to associate your data with your account.
  • Browser extension token: a secret key (kery_sk_...) you copy from Your Account to connect the Chrome extension to your dashboard. This is stored in your browser extension and in our database linked to your account.

Job application data (provided by you)

  • Company name, job title, and country/location
  • Job posting URLs (e.g. LinkedIn or Indeed links)
  • Pipeline stage (e.g. Saved, Applied, Interview) when you move cards on your board
  • Interviewer context you choose to provide, such as the interviewer's role and seniority, and any public post or article you paste
  • Any notes or fields you enter manually in the dashboard

Data collected via the Chrome extension (when you choose to save)

The extension does not run in the background on its own. When you open the extension on a supported job page and click Save to Kery Dashboard, we read:

  • Job title, company name, and job URL from the current LinkedIn or Indeed listing page
  • Your saved extension token (to authenticate the save request)

We do not collect your LinkedIn or Indeed login credentials, passwords, or private messages.

Analysis and derived data

When you request or trigger features that analyse a job or interviewer context, we may process and store:

  • Ghost-job risk scores, repost detection results, and related summaries
  • Cross-listing and syndication research results
  • Market-worth estimates (where country/location is provided)
  • Interviewer notes and insights generated from the role and seniority you enter and any public content you paste
  • Timestamps and version metadata for analyses

Technical and usage data

  • Browser type, device type, and general usage needed to operate the service
  • IP address and request logs processed by our hosting and API infrastructure (standard web server logs)
  • Local storage / session data in your browser (e.g. sign-in session, dashboard preferences, pipeline view setting)

Cookies, Local Storage and Analytics

Our website and dashboard use cookies and browser local storage that are strictly necessary to run the service, such as keeping you signed in and remembering your dashboard preferences and pipeline view. These do not track you across other websites.

We also use analytics to understand how the service is used so we can improve reliability and performance. Analytics data is limited to what we need for this purpose and is not used to identify you personally where it can be avoided.

Website analytics (Google Analytics)

We use Google Analytics 4, provided by Google LLC, on the kery.io website to understand how visitors use the site and to improve our website and services. We do not use Google Analytics in the Kery Chrome extension. When you load a page, Google Analytics may collect the pages you view and time spent on them, the site or link that referred you, your approximate location (usually city or region level), your device, operating system and browser type, and online identifiers such as your IP address and cookie or similar identifiers. Google states that Google Analytics 4 does not log or store your IP address, and uses it only briefly to derive approximate location.

Google processes this information on our behalf and also under its own terms, and may store and process it overseas, including in the United States. Because this is a disclosure to an overseas recipient, we handle it consistently with Australian Privacy Principle 8, as described in the International Data Transfers section below. We use this information for website performance, product improvement and understanding visitor interest. We do not sell your personal information and we do not use Google Analytics for advertising. You can limit analytics through your browser settings, a privacy browser extension, or Google's Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. Further information is at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy. Blocking analytics will not stop the website working, but may reduce the accuracy of our statistics.

Our Chrome extension uses local storage only to hold your Kery account token so you do not need to re-enter it. The extension does not set advertising or cross-site tracking cookies.

You can control or clear cookies and local storage through your browser settings. Blocking strictly necessary cookies may stop parts of the service from working.

What we do not collect

  • We do not sell your personal information.
  • We do not request or store your LinkedIn or Indeed passwords.
  • We do not access your email inbox, contacts, or browsing history outside supported job pages when you use the extension.
  • We do not knowingly collect data from children (see Children's Privacy below).

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain your kery.io account and dashboard
  • Save and sync job applications you capture via the extension or dashboard
  • Run ghost-job risk, repost detection, market-worth, and interviewer persona features you initiate
  • Authenticate extension and API requests using your extension token
  • Improve reliability, security, and performance of our services
  • Respond to support requests and communicate service-related notices
  • Comply with legal obligations and enforce our terms
  • Analyse website traffic and usage via Google Analytics to improve our website and services
  • Generate your on-screen result when you use our free resume tools (Fit Check and the ATS Readability Check)

Marketing communications

If we send you marketing or promotional messages, we will do so only in line with Australian Privacy Principle 7 and the Spam Act 2003 (Cth). You can opt out at any time using the unsubscribe link in the message or by contacting us, and we will not use your personal information for marketing if you have asked us not to. We will always send you service-related messages about your account.

Legal basis (EEA/UK users): We process your data to perform our contract with you (providing the service), based on your consent where you paste interviewer URLs or run analyses, and where necessary for our legitimate interests in securing and improving the platform.

4. AI Processing and Third-Party Services

kery.io uses automated systems, including artificial intelligence models and third-party APIs, to generate insights. When you use analysis features, relevant job text, profile text, or URLs you provide may be sent to subprocessors for processing. These providers process data on our behalf and only as needed to deliver the feature. These automated features (such as ghost-job risk scores, market-worth estimates and interviewer persona insights) produce informational analyses only. They do not make automated decisions that produce legal or similarly significant effects for you, and you can always exercise your own judgement or contact us about any output. We disclose our use of automated systems here in line with the Australian Privacy Principles, including the automated decision-making transparency requirements under APP 1 that commence in December 2026.

Third-party services we may use include, depending on the feature:

  • Supabase: account authentication and user profile storage (including extension tokens)
  • Cloudflare: website hosting, API workers, and encrypted key-value storage for application data
  • OpenAI: AI-generated persona, ghost-job, and market-worth analysis (when those features run)
  • Jina AI: fetching publicly available web page text (to fetch job-ad text where a listing does not provide enough detail, and for cross-listing search)
  • When Was This Job Posted: posting-date verification for job listings
  • Crustdata: optional job-market and listing-history signals (when available)
  • Public web search providers: syndication and cross-listing research (e.g. search result snippets)
  • Google Fonts / CDN providers: delivery of fonts and front-end libraries on our website
  • Google LLC (Google Analytics): website usage analytics, as described under Website analytics (Google Analytics)

AI outputs are informational only. They may be incomplete or inaccurate. You should not rely on them as the sole basis for employment or legal decisions. We do not use your data to train public third-party AI models unless a provider's terms explicitly allow opt-in training and we have configured otherwise.

5. Chrome Extension: Permissions Justification

Our Chrome extension requests the following permissions solely to provide its stated features:

  • activeTab: Access the job listing page you are viewing only when you open the extension popup or interact with it, so we can read job title, company, and URL for preview and save.
  • storage: Store your Kery account token locally in your browser so you do not need to re-enter it every time.
  • scripting: Inject our reader on a job page when you open the extension, so we can read the title, company, and link you choose to save.
  • Host permissions for job boards: Read the publicly visible listing on pages you open from LinkedIn, Indeed, Seek, Glassdoor, ZipRecruiter, Monster, Reed, Adzuna, CareerBuilder, SimplyHired, Greenhouse, Lever, Ashby, Workday, SmartRecruiters, Jobvite, BambooHR, Built In, Wellfound, and Jora.
  • Host permission: kery API: Send saved job data securely to your kery.io account via our API when you click Save.

The extension reads a page only after you open it on that tab. It sends a job to your account only when you click Save. If the page is not a job ad, nothing is saved.

Resume tools (Fit Check and ATS Readability Check)

Fit Check and the ATS Readability Check are included with a free account and count toward your weekly limits. When you use them, your resume is read in your browser and only the extracted text is sent to our AI provider (OpenAI, in the United States) to generate your result. We do not save your resume, or the text taken from it, to your kery.io account or our application storage. Standard technical logs (such as IP address and request metadata) may be kept briefly, as described in the Data Retention section. Please do not include sensitive information, or another person's personal information, that you would not want processed in this way. As with our other analysis features, the results are informational only.

6. Data Storage and Security

Your job application data is stored in encrypted cloud infrastructure (Cloudflare Workers KV), keyed to your account. Account and authentication data are stored via Supabase. Extension tokens are stored hashed or as secrets linked to your user profile and should be treated like passwords: do not share them publicly.

We use industry-standard measures including HTTPS in transit, access controls, and isolated per-user storage. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Data Breach Notification

If we become aware of a data breach affecting your personal information, we will assess it promptly. Where a breach is likely to result in serious harm to affected individuals, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth). Our notice will describe the breach, the information involved, and the steps you can take in response.

Interviewer context: When you add interviewer context, you provide the interviewer's role and seniority and may choose to paste a public post or article. We build your interviewer notes from that context together with general company and job research. We do not ask for, fetch, or scrape the interviewer's LinkedIn profile. Because any public content you paste may include personal information about another individual, we use it only to help you prepare for your own interview, do not publish it, retain it only for as long as needed, and do not build or sell profiles of interviewers. We take reasonable steps to handle it consistently with the Australian Privacy Principles.

7. Community Log Submissions

When you submit an entry to the Community Log, including a Ghost Job Alert or an Interview Lesson, you voluntarily provide certain information for publication, which may include the company name, role title, jurisdiction, and a written account of your experience.

Community Log entries are published anonymously. They are not displayed alongside your name, email address, or account identifier. For moderation, abuse prevention, and account security purposes, we retain an internal record linking a submitted entry to the account that submitted it. This internal link is not disclosed publicly and is accessed only where reasonably necessary to investigate misuse of the feature, respond to a lawful request, or address a complaint concerning a specific entry.

You must not include personal information about any identifiable individual, including an interviewer, recruiter, or colleague, in a Community Log submission. We reserve the right to review, edit, decline to publish, or remove any submission that we reasonably consider contains personal information about a third party, is defamatory, or otherwise breaches this Privacy Policy or our Terms of Service.

By submitting a Community Log entry, you consent to its publication on kery.io in accordance with this section.

A published Community Log entry remains publicly accessible until you request its removal or your account is deleted, at which point we will remove the public entry within a reasonable period, and in any event no later than 30 days. We may retain an anonymised or aggregated form of the underlying signal, for example, a count contributing to an employer's overall ghost job risk profile, notwithstanding removal of the original entry.

If you believe a Community Log entry identifies you, whether or not it uses your name, you may contact us at the details below and we will review the entry and take reasonable steps to address your concern.

If you believe a Community Log entry is defamatory, discloses confidential information, or infringes your rights, you can also use the complaints and takedown process set out in our Terms of Service, and we will review it and, where appropriate, remove or disable access to the content.

8. Data Retention

We retain your personal information only for as long as is reasonably necessary to fulfil the purpose for which it was collected, in accordance with Australian Privacy Principle 11.2 under the Privacy Act 1988 (Cth).

Specifically:

  • Active account and job application data. Retained while your account remains active. If you delete an individual job application from your dashboard, the associated record is removed from our active systems within 7 days.
  • Account deletion. If you delete your account or submit a verified deletion request, we will delete or de-identify your personal information within 30 days of that request, except where we are required or permitted by law to retain certain records, including for fraud prevention, dispute resolution, or compliance with a legal obligation.
  • Extension tokens. Invalidated immediately upon regeneration or account deletion. Any corresponding hashed values are purged from our systems within 30 days thereafter.
  • Server and access logs. Retained for a maximum of 90 days for security, debugging, and fraud prevention purposes, after which they are automatically deleted.
  • Analysis outputs. Ghost job risk scores, market worth estimates, and communication style notes are retained with the associated job application record and deleted at the same time as that record, or after 12 months of account inactivity, whichever occurs first.
  • Community Log submissions. Retained as described in the Community Log Submissions section above.

Where your personal information is no longer required for any purpose set out in this Privacy Policy or permitted by law, we will take reasonable steps to destroy it or ensure it is de-identified.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate data in your dashboard or account settings
  • Delete your job applications or request account deletion
  • Regenerate your browser extension token (invalidating the previous token)
  • Object to or restrict certain processing
  • Export your data (contact us and we will assist)
  • Lodge a complaint with a data protection authority (EEA/UK/Australia and other regions)

Australian users may have rights under the Privacy Act 1988 (Cth) and applicable Australian Privacy Principles, including the right to make a complaint to the Office of the Australian Information Commissioner (OAIC) if you believe we have handled your personal information in a way that breaches the Australian Privacy Principles. We will respond to verified requests within a reasonable timeframe. We will usually respond to a request to access or correct your personal information within 30 days. There is no charge for making a request or for correcting your information, and we will not charge an excessive amount for giving you access. If we refuse access or correction, we will tell you why and how you can complain. If you have a privacy complaint, please contact us first; we will acknowledge it promptly and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

10. Children's Privacy

kery.io is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take steps to delete it.

11. International Data Transfers

We and our subprocessors may process data in the United States and other countries where our infrastructure providers operate. Where required, we rely on appropriate safeguards for cross-border transfers, and we take reasonable steps to ensure any overseas recipient of your personal information does not breach the Australian Privacy Principles in relation to that information. Our main overseas recipients, and the countries where they process data, are Supabase, Cloudflare, OpenAI and Jina AI, which process data primarily in the United States. Some search, font and content-delivery providers may process limited technical data in other countries. Because these recipients are overseas, under Australian Privacy Principle 8 we take reasonable steps to ensure they handle your personal information consistently with the APPs, and under section 16C of the Privacy Act 1988 (Cth) we may remain accountable for their acts and practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Last updated date at the top of this page. Material changes may also be communicated via the website or email where appropriate. Continued use of kery.io after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your rights set out above, please contact us at privacy@kery.io. kery.io is operated by Adam Kery trading as kery.io (ABN 76 776 757 103), based in Sydney, New South Wales, Australia.

Email: support@kery.io
Website: https://kery.io

This Privacy Policy is governed by the laws of Australia.