Legal
Privacy Policy
Last updated: April 19, 2026
1. Notice — Data We Collect
In accordance with the Digital Personal Data Protection (DPDP) Act 2023, this notice informs you of the personal data we collect, the purpose for each data point, and your rights regarding that data.
| Data Collected | Purpose | Retention |
|---|---|---|
| Email address | Account creation, authentication, job alert emails | Until account deletion |
| Phone number (optional) | Account verification, recovery | Until account deletion |
| Profile data (title, skills) | Personalised job recommendations via semantic matching | Until account deletion |
| Resume text (uploaded/pasted) | ATS scoring, AI rewrites — processed in-memory only | Discarded within 60 seconds |
| Job tracker entries | Application tracking, notes, pipeline management | Until account deletion |
| Payment history | Transaction processing, subscription management, refund handling via Razorpay | As required by tax law (8 years) |
| Usage data | Anonymous page views via Vercel Analytics (cookieless, no cross-site tracking) | Aggregated, non-attributable |
2. Resume Data
Your resume is never stored. When you upload or paste your resume into the ATS checker, the text is parsed in-memory, scored, and immediately discarded. We do not write resume text to any database or log file. The same policy applies when you use AI rewrite or JD match features — your text is sent to our inference provider (Groq) for processing and is not retained by them beyond the API call under their data processing agreement.
3. How We Use Your Data
- To authenticate you and save your preferences across sessions.
- To generate personalised job recommendations using an embedding of your profile (title + skills). The embedding is a numeric vector — not human-readable text.
- To process payments and manage subscriptions via Razorpay.
- To send job alert emails if you opt in (unsubscribe link in every email).
- To improve the product via aggregate, anonymised usage patterns.
We do not sell your data or use it for advertising.
4. Third-Party Sharing
We share personal data with third-party service providers only to the extent necessary to operate the Service. We do not share your data with recruiters, employers, or advertisers.
- Razorpay — payment processing. Your name, email, and payment details are shared with Razorpay to process transactions. Razorpay is PCI-DSS compliant. We do not store your card details. Privacy policy
- Supabase — database and authentication (EU/US data centres). Privacy policy
- Railway — backend API hosting. Privacy policy
- Vercel — frontend hosting and privacy-preserving analytics (cookieless, no cross-site tracking). Privacy policy
- Groq — AI inference for resume features (Starter/Pro only). Data is not used for model training under our DPA. Privacy policy
- OpenAI — embedding generation for job/profile matching. Only job metadata and your profile title/skills are sent — never resume text. Privacy policy
- Resend — transactional email delivery. Privacy policy
5. Cookies
We use a single session cookie to keep you logged in (Supabase Auth). We do not use advertising cookies, third-party tracking cookies, or fingerprinting. Vercel Analytics is cookieless.
6. Data Retention and Deletion
You can delete your account at any time from the dashboard settings. Deletion removes all profile data, tracker entries, and the profile embedding from our database within 30 days. Payment records are retained for 8 years as required by Indian tax law. Anonymous analytics data (aggregate counts) cannot be attributed back to you and is not deleted.
7. Right to Withdraw Consent
Under the DPDP Act 2023, you have the right to withdraw your consent for data processing at any time. To withdraw consent, email admin@joboscope.comwith the subject line “Withdraw Consent” from the email address associated with your account. Upon receiving your request:
- We will stop processing your personal data within 7 business days.
- Your account and all associated data will be deleted within 30 days.
- Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
- Certain data (e.g., payment records) may be retained where required by law.
8. Your Rights Under DPDP Act 2023
As a Data Principal under the DPDP Act 2023, you have the right to:
- Access — request a summary of your personal data and how it is being processed.
- Correction — request correction of inaccurate or incomplete personal data.
- Erasure — request deletion of your personal data (subject to legal retention requirements).
- Nominate — nominate another person to exercise your rights in case of death or incapacity.
To exercise any of these rights, email admin@joboscope.com. We will respond within 30 days.
9. Grievance Redressal
In accordance with the DPDP Act 2023, if you have any grievance regarding the processing of your personal data, you may contact our Grievance Officer:
Grievance Officer: Arjun
Email: admin@joboscope.com
Response time: Within 30 days of receipt of complaint
If you are unsatisfied with the resolution, you may escalate your grievance to the Data Protection Board of India as established under the DPDP Act 2023.
10. Changes to This Policy
If we make material changes we will update the “Last updated” date and, where required, notify registered users by email. Continued use of the Service after changes constitutes acceptance of the updated policy.