1. Information We Collect
We collect information necessary to facilitate AI hiring, automated interview screening, and tailored resume building:
- Account Credentials: Full name, verified email address, encrypted password, role (Candidate or Recruiter), and optional contact phone number.
- Professional Profile & Resumes: Work experience, education history, skills, certifications, portfolio links (GitHub, live demo URLs), and uploaded CV documents in PDF or DOCX format.
- AI Interview Recordings & Transcripts: Audio and video streams recorded during scheduled AI screening interviews, along with AI generated speech-to-text transcripts.
- Payment & Billing Data: Order IDs and payment reference tokens issued via Razorpay. We do not store sensitive credit card or debit card CVVs or PINs on our servers.
2. How We Use Collected Information
We process user information to deliver, safeguard, and improve our services:
- Generating ATS-compliant resumes with customized styling, typography, and validated dates.
- Matching candidates with relevant job opportunities posted by verified recruiters.
- Providing automated interview evaluations, behavioral scoring, and feedback summaries to recruiters.
- Enforcing fair usage quotas (e.g. 1 resume per rolling 7 days for Free candidates, 5 resumes for Pro candidates).
- Sending critical operational emails such as registration verifications, password resets, and interview confirmations.
3. Information Sharing & Third-Party Processors
We do not sell personal data to advertisers or data brokers. Data is shared exclusively under strict confidentiality:
- Prospective Employers: When a candidate applies for a job or completes an AI interview, their profile, resume, and screening report are made available to that specific employer.
- Payment Processor (Razorpay): Transaction tokens and billing details are transmitted encrypted via Razorpay's PCI-DSS compliant infrastructure.
- Communication Services: Transactional emails are securely delivered via certified SMTP/API providers (Resend).
- Legal Compliance: If required by Indian law enforcement or court orders under applicable cyber regulations.
4. Data Storage & Encryption Standards
We employ rigorous modern security protocols to protect your personal information:
- Industry-standard TLS 1.3 encryption for all data in transit across web and mobile.
- Secure salted bcrypt hashing for all stored user passwords.
- Encrypted database storage hosted on SOC2-compliant enterprise cloud infrastructure.
- Strict role-based access control preventing cross-tenant data leakage.
5. User Rights & Account Deletion
Under applicable data protection guidelines, you have rights regarding your personal data:
- Access & Export: You can view and export your profile and resume data anytime through the app.
- Correction: You can update personal details, skills, or portfolio URLs directly from your profile settings.
- Account Deletion: You can delete your account inside the mobile/web app or via our public Account Deletion Portal.
6. Retention, Soft-Deactivation & Anti-Abuse
When an account is deleted by a user:
- The profile is immediately deactivated and removed from active search listings.
- To prevent exploitation of free-tier quotas and to comply with statutory financial record-keeping laws, past quota logs, invoice records, and fraud-detection identifiers are securely archived in a soft-deactivated state.
- Users wishing to restore their account may do so securely via email One-Time Password (OTP) verification.