Who is responsible
Kabeiri Group, Kentucky, United States, operates Ktulhu.xyz and is responsible for the account information described here. Privacy contact: admin@kabeiri.com.
Information we use
You can search as a guest without an account. Your guest shortlist and filters stay in this tab’s session storage for up to 24 hours after your last change, including during navigation and reloads. They are removed when the tab closes or after sign-in. When you choose to sign in, a draft is held in this tab’s session storage for up to 30 minutes to carry your search through sign-in; it is removed after your account loads. We limit anonymous requests using a daily hash of the client IP address (or a shared quota when unavailable), plus service-wide limits. The application’s guest usage records expire and are cleaned up during subsequent requests; raw IP addresses are not stored in those records.
ChatGPT sign-in provides your account identifier, email, and display name. We store your company watchlist, selected companies, saved search filters, and usage counters. Subscribers also have Stripe customer/subscription identifiers, status, and access dates stored in our database. Stripe collects payment details on its hosted pages; we do not receive full card numbers or security codes.
Hosting and security providers process technical information, including IP addresses, request times, browser information, and errors, to deliver and protect the service. We receive information you send when contacting support.
Optional usage measurement
With permission, a random identifier in this tab’s session storage groups activity for up to 30 minutes. We count whether you reached search, began typing, submitted a company, received results (including zero openings), encountered an error, opened a job, or started saving or sign-in. We record only broad screen-size, entry-page, and referral categories (direct, search, social, or other), never the full referring URL. These records describe consenting visits, not all visitors or unique people. Withdrawing consent removes the local visit identifier.
Only after you choose “Allow usage counts,” we record one anonymous record per company-search attempt: time, whether it came from a typed website, example, saved company, refresh, or retry; guest or signed-in use; success or a general error category; number of openings returned; whether cached fallback results were used; and whether a job link was opened. Each attempt has a random identifier to prevent duplicate counts. These records contain no company URLs, search terms, job details, account identifiers, or IP addresses and do not identify returning visitors across tabs or visits. Our test runs are marked separately.
We use your consent for this optional measurement. It is off until you opt in, and you can turn it off at any time in “Cookie settings.” We also honor Do Not Track and Global Privacy Control signals. Search continues to work when measurement is off. Records older than 90 days are excluded from reporting and removed as new activity arrives. Hosting security logs and short-lived abuse-prevention counters are separate from these records.
Purposes and legal bases
We use data to provide your workspace, save preferences, enforce limits, handle support, administer billing, prevent abuse, and comply with legal obligations. Where applicable, our legal bases are performance of our contract, legitimate interests in operating a secure service, and legal obligations. We do not use your watchlist to make employment decisions about you.
Providers and disclosure
OpenAI/Sites and infrastructure providers including Cloudflare host the application and support sign-in. Stripe handles payment, fraud prevention, and subscription management. They receive the data needed for those services and may process it under their own policies. We may disclose information when legally required or to protect users and the service.
We do not sell personal information, share it for targeted advertising, or load third-party advertising or analytics trackers. See our cookie policy.
Public job sources and links
We retrieve public careers pages and hiring feeds. Public results may be cached and shared across visitors; they do not contain your private watchlist or profile. If assisted discovery is enabled, company names, public company URLs, page text, and links may be sent to OpenAI for extraction. Account names and emails are not included in those requests. Connection status appears under “Help.”
Opening an employer link sends a browser request to that employer, which applies its own privacy policy. Job applications take place outside Ktulhu.xyz.
Retention and deletion
Profile, watchlist, and saved-search records remain while your account is in use, until you delete them or request deletion. Account deletion removes those records and usage counters from our active application database. End any subscription first to retain access to billing controls, or contact us for help canceling and deleting your data.
Public job caches are maintained separately. Provider backups, security logs, payment records, and correspondence may remain as necessary for security, disputes, or legal/accounting obligations. Providers follow their own retention policies. Deleting application data does not delete your ChatGPT account or records held by Stripe.
Your rights and choices
Use Account to export or delete application data. Remove watchlist companies and saved searches in the workspace. Email admin@kabeiri.com to request access, correction, deletion, portability, restriction, or to object to processing where applicable. We may verify your identity. Appeal a decision by replying and requesting a privacy review. You may complain to your privacy regulator. Applicable law determines your rights and response periods.
International processing and children
We operate in the United States; providers may process data in other countries under their applicable data-protection terms and transfer safeguards. This service is for adults aged 18 or older. Contact us if you believe a child provided personal data.
Policy changes
We update the effective date when this policy changes and provide additional notice of material changes when required. Questions: admin@kabeiri.com.