1. What We Collect

We collect and process the following information when you interact with our platform:

• Email and password: Handled securely through SuperTokens authentication.
• CV/Resume files: Uploaded directly by you for ATS analysis.
• Billing details: Required billing address for payment processing.
• Payment reference: Transaction reference and payment status processed via Razorpay (we never store card numbers or sensitive credit/debit card details on our servers).
• Usage logs: Technical information including IP address, device type, web browser type, and navigation logs.
• Anonymised analytics: Performance metrics tracked via Google Analytics.

2. How We Use It

Your data is used solely to provide and improve our services, including to:

• Create, secure, and manage your user account.
• Process your CV file to generate a tailored ATS compatibility score and gap report.
• Deliver your free basic score and process paid full analytics reports.
• Settle payment transactions securely via our Razorpay integration.
• Provide customer support, run fraud prevention checks, and maintain legal compliance.
• Analyze overall usage to improve product interface and algorithm performance.

3. CV and Resume Handling

Your CVs contain highly personal information, which we safeguard with the highest standards:

• Uploaded CVs are shared securely with the Anthropic Claude API for the sole purpose of analyzing resume content.
• Automatic Deletion: CV files are completely deleted from our storage buffers within 24 hours of processing.
• No Model Training: Your resume contents are never used to train machine learning or AI models.
• No Sharing: We do not sell, rent, or share your resume files with external recruiters, talent agencies, or employers.
• Your CV is processed exclusively to deliver the exact service and feedback you request.

4. Third Party Services

To run our services, we partner with specialized, industry-trusted third-party service providers:

• Anthropic Claude API: Handles deep resume parser analysis and score reports.
• Razorpay: Handles secure merchant payment checkouts.
• SuperTokens: Provides secure, open-source user authentication systems.
• Vercel: Hosts our frontend and serverless cloud functions.
• Google Analytics: Records anonymised platform usage metrics.

5. Legal Basis

We process your personal information under the following legal bases:

• Consent: When you voluntarily upload files or register an account.
• Contract Performance: To fulfill the delivery of purchased premium reports.
• Legitimate Interests: To secure the platform and optimize user experience.
• Legal Compliance: To satisfy statutory, accounting, or tax laws.
• For EU/EEA visitors: GDPR legal bases apply. You reserve the right to withdraw your consent at any time.

6. Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes set out below:

• CV/Resume files: Deleted within 24 hours of uploading.
• Account profile: Retained while your account is active, and automatically deleted 30 days after account closure.
• Payment transaction history: Kept for 7 years to comply with Indian GST, tax, and corporate accounting laws.
• Server system logs: Retained for 90 days.
• Google Analytics: Anonymised logs are retained for 26 months.

7. Security

We employ robust technological measures to keep your data secure:

• All database transmissions are encrypted in transit using industry-standard HTTPS/TLS.
• Passwords are hashed at the client/auth level managed by SuperTokens.
• We strictly do not collect, view, or store payment card numbers, CVVs, or OTPs on our databases.
• Strict logical access control limits administrative access to system backend endpoints.

8. Your Rights (DPDPA 2023)

Under the Digital Personal Data Protection Act (DPDPA), 2023 of India, you hold clear rights regarding your digital information:

• The right to access, review, and request correction or erasure of your personal data.
• The right to withdraw your processing consent easily.
• The right to register a grievance with us regarding data handling.
• The right to nominate any other individual to exercise your rights in the event of death or incapacity.
• For inquiries or to exercise these rights, email us at legal@nityaved.com. We will respond within 30 days.

9. Grievance Officer

For DPDPA compliance queries, complaints, or grievance redressal, you can directly contact our Grievance Desk:

10. International Transfers

Your data may be processed or held on cloud servers hosted outside of India by our partners (such as Anthropic or Vercel). We ensure these transfers are guarded by robust contractual data protection clauses and strictly adhere to safe international standard regulations.

11. Policy Updates

We reserve the right to modify this policy as standards change. Any updated versions will be posted immediately on this page with an updated "Last Updated" date. We recommend checking back periodically.