Privacy
How Parcel uses your information and the choices you control.
Information you provide
Parcel stores account details such as your name and email, sign-in and security settings, and the job-search content you or your authorized assistant save. This can include career details, preferences, Jobs, postings, Matches, Resumes, uploaded PDFs, Cover Letters, research, interview dates, Practice results, and Notes. Save only information you are entitled to use.
Why we use it
We use this information to provide your workspace, save and retrieve your work, authenticate you, honor access permissions, deliver requested documents, and operate and protect the service. Sign-in and verification services process the information needed to complete those actions.
Assistant access and other providers
An assistant can read or change the information covered by the access you approve. Revoke directory and plugin connections from Connections. WebMCP page tools use your current website sign-in: close the Parcel page or sign out to stop those tools, and manage the assistant’s browser permissions in your browser. Your assistant provider handles information it receives under its own terms and privacy policy. Revoking Parcel access does not erase information already sent to that provider. Cloudflare supplies application hosting, database, file storage, and infrastructure services. Operating in Canada does not mean information is stored only in Canada; these providers may process information in other countries. Chosen sign-in providers process sign-in information.
Public Resumes
Your workspace is private by default. Publishing a Resume makes its public content accessible to visitors with the link and, if you allow indexing, search engines. A Share follows the latest saved Resume. Deactivation stops future Parcel access, but cannot retrieve downloads or remove copies held by visitors or search engines. Other Job content and Cover Letters are not part of a Resume Share.
Cookies and optional analytics
Necessary browser storage supports sign-in, security, site functions, and privacy choices. Sentry error messages, exception chains and stacks, browser and runtime details, recent navigation and request activity, request timing, anonymous diagnostic identifiers, and server operation details help us keep the website working. We redact recognizable personal identifiers and credentials from diagnostic messages. We do not automatically collect account identity, request bodies, form values, or saved job-search content for error reporting. Cookie preferences are stored only in your browser. After you allow Optional analytics, Google Analytics measures broad page categories, completed website actions, and approved campaign labels. These actions include signup requests, leaving optional setup, saved Jobs, and the presence of an active connection; no account identity or saved content is sent. Campaign measurement accepts only fixed source, medium, and campaign labels, not arbitrary query values or referring URLs. Sentry measures page loads, navigation, requests, and responsiveness, and Cloudflare measures page speed and responsiveness. Cloudflare collects page paths, referring URLs, browser performance measurements, and element selectors or resource URLs used to diagnose slow or shifting elements. It does not record form values or document text, use analytics cookies, or retain IP addresses in its RUM databases or logs. We keep Cloudflare measurement off for its excluded European regions. Turning Optional analytics off reloads the page if Cloudflare is active; save your edits first. Separately, Session replay allows Sentry to record masked page structure and interactions. Parcel-written public content and marked interface labels are readable. Your text and input values are masked, personal images and documents are blocked, and private URLs and attributes are removed. Styling, Parcel icons and branding, control states, and interactions are retained. No private Job, Resume, or Notes text is included. You can allow or withdraw either choice through Cookie settings in the footer. Public Resume pages include no analytics, replay, Sentry reporting, or cookie banner. Google, Sentry, and Cloudflare may process information outside Canada; this Sentry project uses its US region.
Storage, security, and retention
Your current job-search content and structured document revisions remain available while your account exists, including when your search is dormant. Uploaded PDF bytes remain while at least one current Resume uses them. Replaced PDFs are removed when no current Resume uses them, so an old revision link may no longer work. Access controls protect private records. Infrastructure logs may contain request metadata such as IP addresses and locations. Recovery points are kept for up to 30 days. Minimized deletion-control records are kept for 35 days after completion so deletion can be replayed after recovery. Administration action records expire after 90 days. Cloudflare logs and traces follow its plan retention, currently seven days on the paid plan. These records are not an extra workspace history.
Your choices and deletion
You can review and change your saved content, revoke connections, deactivate Public Resume Shares, and request account deletion in Settings. Deletion stops Parcel-controlled access and removes Parcel-owned content, including internal revisions and all uploaded files owned by your account. Access stops when deletion is accepted; cleanup remains pending until required active stores have been cleared. It does not synchronously erase infrastructure logs, rotating backups, or records controlled by separate providers. Bulk account export is not available.
Questions and notice changes
Parcel operates this service in British Columbia, Canada. Email contact@workinparcel.com for privacy questions, access or correction requests, or concerns about your information. We will update this notice when our practices change.