Privacy Policy

We handle two distinct categories of data in the Enterprise platform:

Account and billing data:

• Organisation name, admin email, and password (hashed via Firebase Auth)
• Plan type, slot usage, and billing cycle dates
• Payment records processed via Razorpay (we do not store card details — Razorpay handles PCI compliance)
• Consultant email addresses added by the admin

Candidate data (uploaded by your team):

• Resume files (PDF or DOCX) — temporarily parsed to extract text for ATS analysis
• Candidate name, email, and phone number entered into the candidate profile
• ATS analysis results and scores stored per candidate profile
• Resume drafts saved in the resume builder, associated with the candidate profile
• Job descriptions pasted by your consultants for keyword matching

Usage data:

• Log data (timestamps, IP addresses, browser type) for security monitoring
• Feature usage patterns (anonymised) to improve the platform

We use workspace and account data to:

• Provision and maintain your workspace and team accounts
• Process payments and issue GST-compliant invoices
• Send transactional emails (plan confirmations, slot alerts, team invitations)
• Respond to support queries
• Detect and prevent fraud or abuse

We use candidate data solely to:

• Run ATS analysis against job descriptions at your team's request
• Store analysis results and resume drafts within your workspace
• Generate and email PDF resumes when instructed by your team

We never use candidate data to train or improve AI models. Candidate data is processed exclusively to deliver the service to your workspace.

All workspace and candidate data is stored in Google Firebase Firestore (a Google Cloud product) with servers located in the Asia-South region. Access is controlled via Firebase Security Rules enforcing workspace isolation — no data is accessible across organisations.

Authentication is handled by Firebase Authentication. Passwords are never stored in plain text. All data in transit is encrypted via TLS.

We apply role-based access controls: consultant accounts can only access candidates within their admin's workspace. Admins can revoke consultant access at any time.

Each agency workspace is fully isolated at the database level. Candidates, ATS results, resume drafts, and team data in your workspace are never visible to or shared with any other organisation using the platform.

Because your organisation uploads and controls candidate personal data, you are the data controller for that data under applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDPA).

You are responsible for:

• Obtaining candidates' consent or having another lawful basis to process their data
• Informing candidates their resumes are being processed using AI tools
• Handling candidate requests for data access, correction, or deletion
• Ensuring your team members handle candidate data in accordance with applicable law

We will assist you in meeting your obligations where technically possible — for example, permanently deleting a candidate profile and all associated data upon your request via support.

Candidate profiles are retained for the life of your workspace. If you delete a candidate profile, all associated ATS results and resume drafts are permanently deleted within 30 days.

Account data is retained for 12 months after account closure for tax and legal compliance purposes, then permanently deleted.

Resume files uploaded for ATS analysis are processed in memory and are not stored as files — only the extracted text and analysis results are persisted.

We rely on the following third-party processors to deliver the service:

• Google Firebase — authentication, database, and hosting
• Razorpay — payment processing and GST invoicing (PCI DSS compliant)
• Anthropic / OpenAI — AI model APIs used for ATS analysis and resume rewriting (data sent is limited to resume text and job descriptions; no persistent storage on their end per their API terms)
• Vercel — application hosting and edge delivery

We enter into appropriate data processing agreements with these providers where required.

We will never use your candidates' personal information for marketing, advertising, or any purpose beyond delivering the platform features to your workspace. We do not sell candidate data to any third party.

As the workspace admin, you may:

• Export your workspace data by contacting support
• Request deletion of your workspace and all associated data
• Update your organisation's account information from the dashboard
• Revoke consultant access at any time

To exercise these rights, email support@resumegyani.com.

We may update this Privacy Policy periodically. Material changes will be notified to the admin email on record at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.

For privacy-related queries or data deletion requests: