Privacy & Data Retention

• Email — to verify you (OTP) and send your report.
• Job description & resume — to tailor the interview. Treated as sensitive PII.
• Your profile choices — confirmed seniority, focus skills, target companies.
• Interview transcript & answers — to score and give feedback.
• Integrity signals — tab-switch / paste events, used only for an integrity score.
• Payment metadata — handled by Razorpay; we store transaction records, not card details.

Before any text reaches an AI provider, we detect and replace direct identifiers (name, email, phone, address, profile URLs) with typed placeholders. The model receives only redacted text. Your raw, un-redacted text never leaves our infrastructure.

This minimizes what any third-party model can ever see and is the privacy guarantee we surface throughout the product.

A scheduled purge job enforces these windows. Deletes are hard deletes, not soft hides — except legally-required financial records.

• Delete everything — one request wipes inputs, redacted text, summaries, transcript and results immediately (only financial records remain).
• Access — request a copy of the data we hold about you.
• Grievance — raise a concern with us directly.
• Consent — you explicitly consent before upload; you can withdraw it by deleting your data.

File any of these on the contact & data requests page.

• AI model providers — receive only redacted text, never your originals. See our AI usage policy.
• Razorpay — processes payments securely.
• Email provider — delivers your OTP and report.
• We do not sell your data or use it to train models.

• Sensitive fields encrypted at rest.
• Secrets kept in environment config, never committed.
• Rate limiting on auth and sensitive endpoints.
• Least-privilege access and audit logging on admin actions.

We follow India's Digital Personal Data Protection (DPDP) Act and GDPR best practices: purpose limitation, explicit consent, a clear processing notice, and data-subject deletion. This page is our processing notice.