CareerAI beta privacy notice

What we collect and why

• Your name, email address, and password hash to create and authenticate your account. Account and password-reset information supports sign-in and account recovery.
• Your mobile number (optional outside the India beta) and your India-residence declaration to check eligibility. An Indian mobile number and declaration are required for this beta. The mobile number is not verified by SMS.
• Uploaded resumes, extracted resume text, job descriptions you provide, analysis results, and optimizer suggestions and accepted edits to provide resume scoring, keyword matching, and editing tools.
• Optional profile information, such as your headline, summary, skills, links, and job preferences, to save your profile and support profile completion.
• Provider API keys you choose to supply, stored encrypted on the server, to send AI requests using your selected provider. Authentication passwords, tokens, and encrypted API keys are excluded from candidate data exports.
• Credit account, reservation, and ledger records to track platform credit use.

Who processes the data

• Vercel provides application hosting and processes requests to the application.
• Supabase provides the database used to store account and product data.
• The AI provider you select processes the resume content and job-description context sent for scoring or suggested edits. Supported providers include Google Gemini, OpenAI, Groq, and OpenRouter.
• The configured email provider processes recipient addresses and message content for account recovery and privacy identity checks. Provider identity and operational configuration: [OWNER TO CONFIRM].

Provider-specific retention periods and processing locations: [OWNER TO CONFIRM].

Your requests and how to make them

You can request access to your account data, correction, an export, or deletion, and raise a privacy concern by emailing hello@seekhly.in from your account email address. State the request you want to make. Do not send your password or API keys.

Before any disclosure of account data, export, or deletion, the operator verifies your identity with an emailed one-time code sent to your account email address. The operator handles deletion and export manually. There is no self-service deletion or export page in this beta.

Response timelines and any additional statutory rights or procedures: [OWNER TO CONFIRM]; for counsel review.

Retention and deletion

The retention register specifies deletion of user-owned account and product data through the operator procedure. Retained credit account, ledger, and reservation records remain pseudonymous personal data after the account link is removed; historical ledger records remain immutable.

• Account, resume, analysis, profile, and API-key retention periods: [OWNER TO CONFIRM].
• Credit-record and privacy-action-record retention periods: [OWNER TO CONFIRM].
• Backup retention and deletion from backups: [OWNER TO CONFIRM].
• Email and AI provider retention periods: [OWNER TO CONFIRM].
• Any statutory retention requirements: [OWNER TO CONFIRM]; for counsel review.

Grievance contact awaiting review

Whether applicable India law requires a grievance officer, and the officer's name, contact details, and procedure if required: [OWNER TO CONFIRM]; for counsel review. Privacy concerns can be sent to the privacy contact above.