Jobspiq Privacy Policy.

Jobspiq Intelligence Systems ("Jobspiq", "we", "us") operates jobspiq.in and the Jobspiq mobile app (together, the "Service"). This Policy explains what personal data we collect, why, and what rights you have, in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules.

Under the DPDP Act, Jobspiq is a Data Fiduciary and you, as a user, are a Data Principal. "Personal data" means any data about you by which you are identifiable.

This Policy applies to job seekers, recruiters, and visitors. By using the Service you agree to the collection and use of information as described here. Where we rely on your consent, you may give, refuse, or withdraw it at any time as described in Section 5. This Policy should be read together with our Terms of Service, which also governs your use of the Service.

Account data: full name, email address, password (stored as a salted hash, never in plain text), and if you sign in with Google your Google account email and profile name.

Profile data: phone number, LinkedIn URL, current role, years of experience, skills, preferred roles/locations, salary expectations, and any free-text narrative you choose to write about your career (e.g. why you're leaving a role, your strengths, or key achievements/metrics) to help us match and present you better.

Resume data: the resume file you upload, and the structured data we extract from it (skills, work history, education, and LinkedIn/GitHub URLs if present) to build your match profile. Your resume necessarily contains personal data (name, contact details, employment history) see Section 6 for how this is processed.

Application & tracker data: jobs you save or apply to, application status, interview rounds, and any free-text notes or AI interview debriefs you write including questions you add manually and any answer you write for them. This may include contact details you choose to log about a third party e.g. a recruiter's or interviewer's name, phone number, or LinkedIn URL and compensation figures you choose to record for an offer (CTC, ESOP, joining date). We also retain the AI match-score breakdown and summary generated for each job match shown to you, so you can see why a job was recommended.

Communications data: your Telegram chat ID (only if you link Telegram), Expo push token (mobile app) or Web Push subscription keys endpoint, p256dh, and auth keys (browser push), and any bug report, feature request, or review you submit in-app. We may also send occasional product/service announcements to your linked Telegram, separate from personalised job alerts.

Technical data: IP address, browser/device user-agent, and request timestamps, logged for security, fraud, and abuse prevention.

Recruiter & company data (if you register as a recruiter): your company's name, domain, and profile details, and where we verify a company its GST or CIN registration number. This is a business registration identifier, not a personal government ID, and is used solely to confirm the company is a genuine, hiring entity. We also log basic outreach activity (e.g. how many candidates you've contacted this month) to enforce fair-usage limits.

We do not knowingly collect personal government ID numbers (e.g. Aadhaar, PAN), personal bank/financial account details, biometric data, or health data. Please do not include these in your resume or notes they are not needed for any feature of the Service.

We process your personal data only for the purposes you'd reasonably expect from a job-matching service, and on one of two legal bases recognised by the DPDP Act:

• Your consent for account creation, resume parsing, and optional notification channels (Telegram, push).
• Legitimate use under Section 7 of the DPDP Act for data you voluntarily provide for a specified purpose (e.g. applying to a job through our tracker), and for security/fraud-prevention logging.

We use your data to: (a) compute AI match scores between your profile and live job listings; (b) send you job alerts by email and, if linked, Telegram; (c) power the Application Tracker and AI interview-debrief features you actively use; (d) respond to support requests and bug reports; and (e) maintain security and prevent abuse. We do not use your individual profile to rank you for recruiters without a job application action on your part, and we do not sell personal data to anyone.

The Service is intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18, and we do not direct advertising or behavioural tracking at children. If you believe a minor has created an account, contact us using the details in Section 13 and we will delete it.

Where we rely on your consent (e.g. linking Telegram, enabling push notifications, uploading a resume for AI parsing), that consent is specific to the stated purpose and you give it through a clear, affirmative action ticking a box or pressing a button not through silence or a pre-ticked option.

You may withdraw consent at any time, as easily as you gave it: disable notification channels in Profile → Notifications, remove your resume from Profile → Resume, or close your account entirely (Section 9). Withdrawing consent does not affect the lawfulness of processing already carried out before withdrawal, and may mean we can no longer provide the specific feature that depended on it (e.g. Telegram alerts).

We do not sell personal data. We share the minimum necessary data with the following processors, solely to operate the Service:

• Cerebras, Groq / Google Gemini your resume text, job descriptions, and (where you use these features) your interview notes and manually-added questions are sent to these AI providers to extract structured fields or generate AI Content (match analysis, debriefs, ideal-answer frameworks). Your resume contains personal data (name, contact details, work history); these providers process it under their own data-processing terms solely to return the result and do not use it to train their models on our enterprise terms.
• OpenAI (fallback) used as a fallback provider for some AI extraction tasks.
• Brevo your email address, to deliver account and job-alert emails.
• Telegram Bot API your Telegram chat ID, only if you link Telegram, to deliver instant alerts and occasional product announcements.
• Google your Google account email/name, only if you choose "Sign in with Google".
• Cloudflare IP address and request headers, for DDoS protection and content delivery.
• Browser push services (e.g. Google FCM, Mozilla autopush, Apple Push) your Web Push subscription keys, only if you enable browser notifications, so your browser vendor can route the notification to your device. We never see the notification content beyond what we send through this channel.

Your match-score embeddings (the AI representation used to rank jobs against your profile) are computed by a model running on our own servers and never leave our infrastructure.

We do not use Google Analytics, Meta Pixel, or third-party advertising trackers.

Each AI provider processes data under its own terms and privacy practices, which we do not control. We select providers with reasonable care, but we do not warrant that their processing is error-free, and any AI-generated output they return may be inaccurate see the "AI-generated content" section of our Terms of Service for how that limits our liability.

If we allow recruiters to post roles directly, a recruiter only ever sees your profile and contact details after you apply to their specific listing never your full candidate profile by default, and never for cold outreach outside that application. A recruiter's GST/CIN registration number is used only for our internal verification and is never shown to candidates or other recruiters.

Community interview question bank: if you submit interview notes through the AI Interview Debrief feature, the questions you were asked may be added to a shared question bank visible to other users preparing for interviews at the same company. Only the question text, company name, and role category are stored in this bank never the interviewer's name or contact details, your personal answer, or your feedback notes, and never a link back to your account or application. Please avoid naming the interviewer inside the question text itself, since that text is stored and shown as written.

Some features let you record information about third parties for example a recruiter's or interviewer's name, phone number, or LinkedIn URL in your Application Tracker or interview notes, or a question you manually add to your prep bank that references a specific person. You, not Jobspiq, are responsible for having a lawful basis to collect and share that person's data with us for instance because it was given to you directly in a professional context. We store this data only to power the feature you used it for (e.g. showing it back to you in your tracker) and do not independently verify, use, or share it beyond that. If a third party asks us to remove data you've recorded about them, we may do so without notifying you.

Your data is currently stored on servers operated by our infrastructure providers, which may be located outside India. Where personal data is transferred outside India, we do so consistent with Section 16 of the DPDP Act and any country-specific restrictions notified by the Government of India from time to time.

We retain your account and associated data for as long as your account is active and the data is needed for the purposes in Section 3. Aggregate, de-identified statistics (e.g. skill-demand frequency) that no longer identify you may be retained indefinitely; everything else tied to your account is deleted as described below.

Delete your account: go to Profile → Danger Zone and confirm this immediately and permanently deletes your profile, resume, saved jobs, applications, interview notes, match history, devices, and notification settings in one action. No waiting period, no support ticket required. If you'd rather not use the in-app option, email [email protected] and we will do it for you within 30 days, except where we're required to retain limited records (e.g. security logs) to comply with law.

Resume files specifically: you can delete your uploaded resume on its own at any time from Profile → Resume, without deleting your whole account. Even if you don't, we automatically delete the raw resume file 90 days after upload as a data-minimization measure the skills already extracted to your profile are kept so your matching isn't affected, but the original PDF and its full extracted text are purged.

We implement reasonable technical and organisational measures to protect your data, including: bcrypt password hashing, encrypted database connections, access-controlled resume storage (only your authenticated account can retrieve your own resume), and least-privilege access for staff. No system is perfectly secure, and we do not guarantee that unauthorised access, loss, or misuse of data will never occur; our liability for any data-security incident is subject to the limitations set out in our Terms of Service. If a breach affecting your personal data occurs, we will notify you and the Data Protection Board of India as required under the DPDP Act.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how it has been processed.
• Correction & completion of inaccurate or incomplete personal data most fields are editable directly in your Profile.
• Erasure of personal data that is no longer necessary for the purpose it was collected (Section 9).
• Withdraw consent at any time (Section 5).
• Grievance redressal raise a complaint with our Grievance Officer (Section 13) before approaching the Data Protection Board.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email [email protected] from your registered email address. We will respond within 30 days.

In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as required under the DPDP Act, describing the nature of the breach and the steps we are taking to address it.

For any privacy questions, complaints, or to exercise the rights in Section 11, contact our Grievance Officer:

We aim to acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

We use browser local storage (not third-party cookies) to keep you signed in (access/refresh tokens) and remember preferences like dark mode and job filters. These are strictly functional and are not used for cross-site tracking or advertising.

We will notify registered users by email of material changes to this policy before they take effect. Continued use of the Service after such notice constitutes acceptance of the revised policy.

Questions about this policy or your data? [email protected]