Privacy and advertising choices

Information used to provide the service

We use your account details, searches, saved jobs, plan and payment status to provide Pebble Jobs. If you upload a CV, it is used for the profile matching and document tailoring you request. Our service providers include Supabase for accounts and storage, Lovable and Cloudflare for hosting, Anthropic for AI processing, Resend for email, and Razorpay for payments. Pebble Jobs does not receive your card details.

Meta advertising measurement

When advertising sharing is permitted (see Your choices below), we send Meta (Facebook) confirmed registration, checkout-started, trial and purchase events through its server-side Conversions API. This supports advertising measurement and ad optimisation. Events contain a timestamp, event identifier, a fixed Pebble Jobs page address, hashed email and account identifiers, the Meta click identifier from the ad you arrived through (where present), your IP address and browser information, and plan price or purchase amount and currency where applicable. Hashed email and account identifiers are included only after you choose Accept all. Hashing is not anonymisation: Meta may match these identifiers to its users. Meta processes information in the United States and other locations under its own terms and privacy policy.

Where advertising sharing is permitted, a restricted image-based Meta browser Pixel reports visits to public marketing pages. Meta receives the canonical public page address, timestamp and browser network information and may use its cookies subject to your browser settings. We do not load Meta's automatic form-collection or advanced-matching script. Browser visits are not also sent through CAPI; conversions remain server-only to avoid duplicate counting. Account, search, login, pricing and payment pages are not reported. URLs containing query parameters or fragments are not reported.

We never send your CV, searches, job interests or visa details to Meta. Known institutional partner accounts are excluded entirely. We cannot recognise a visitor's institutional affiliation before they identify themselves through sign-in.

Your choices

In the UK, the EU/EEA, Switzerland, and wherever we cannot determine your location, we ask first and share nothing with Meta until you choose Accept all. Elsewhere, advertising measurement is on by default without a banner, and you can opt out at any time through Cookie settings; hashed email and account identifiers are still only shared after you choose Accept all. Both acceptance and refusal are remembered on your device. Global Privacy Control blocks sharing everywhere, even if you previously allowed it; we do not prompt you to override that signal.

Use Cookie settings in the footer to allow sharing or choose Essential only to withdraw. Opening settings does not change your choice. Choices are stored on your device and, when signed in, synchronised with your account. We retain the notice version and acceptance time as evidence, including after withdrawal; withdrawal stops future reporting once recorded and does not recall information already sent. Events that occurred before acceptance are not replayed. Advertising browser context is cleared on withdrawal and is not used after 30 days without a fresh permitted visit.

Account control

You can delete your account from the account page. Advertising permission is optional and does not change your ability to sign up, search, or purchase access.