Privacy Policy

PrepMyRes ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

This policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and other applicable Indian privacy laws, as well as international standards like GDPR where applicable.

2.1 Personal Data You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Professional title, company, location, bio, skills
• Resume Data: Work experience, education, certifications, achievements
• Job Preferences: Desired roles, salary expectations, location preferences
• Communication Data: Messages, feedback, support requests

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Cookies and Tracking: Session data, preferences, analytics
• Log Data: Access times, error logs, performance metrics

2.3 Third-Party Information

• Social Media: Information from Google, GitHub, LinkedIn (with your consent)
• Public Sources: Publicly available professional information
• Partners: Data from job boards and recruitment platforms (with consent)

We process your personal data for the following purposes under lawful bases as defined by the DPDP Act:

3.1 Service Provision (Contractual Necessity)

• Creating and managing your account
• Providing resume optimization and ATS compatibility services
• Processing payments and managing subscriptions
• Facilitating communication between users and employers

3.2 Legitimate Business Interests

• Improving our AI algorithms and matching accuracy
• Analyzing usage patterns to enhance user experience
• Preventing fraud and ensuring platform security
• Conducting research and development

3.3 Consent-Based Processing

• Sending marketing communications and newsletters
• Sharing your profile with potential employers (job seekers)
• Using your data for personalized recommendations

4.1 With Your Consent

• Sharing your profile with employers when you apply for jobs
• Displaying your information in search results (with privacy controls)
• Third-party integrations you explicitly authorize

4.2 Service Providers

• Cloud hosting and storage providers
• Payment processing companies
• Email and communication service providers
• Analytics and performance monitoring tools

4.3 Legal Requirements

We may disclose your information when required by Indian law, court orders, or government regulations, or to protect our rights, property, or safety.

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and vulnerability testing
• Data Minimization: Collecting only necessary information
• Secure Infrastructure: ISO 27001 certified cloud providers
• Employee Training: Regular privacy and security training

As a data principal under the DPDP Act, you have the following rights:

• Right to Information: Know what personal data we process and how
• Right of Access: Obtain a copy of your personal data
• Right to Correction: Update or correct inaccurate information
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Receive your data in a structured format
• Right to Grievance Redressal: File complaints about data processing

To exercise these rights, contact us at privacy@prepmyres.com. We will respond within 30 days as required by law.

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until account deletion + 30 days for backup recovery
• Resume Information: Until you delete it or close your account
• Usage Analytics: Aggregated data retained for 2 years
• Communication Records: 3 years for customer support purposes
• Financial Records: 7 years as required by Indian tax laws

We primarily store and process data within India. When we transfer data internationally, we ensure:

• Transfers are to countries with adequate data protection laws
• Appropriate safeguards like Standard Contractual Clauses are in place
• We obtain your explicit consent where required
• We comply with DPDP Act requirements for cross-border transfers

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Deliver relevant advertisements (with consent)

You can manage cookie preferences through your browser settings or our cookie consent manager.

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of the breach, as required by the DPDP Act.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our Service. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

PrepMyRes is committed to compliance with:

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000 and IT Rules
• Indian Contract Act, 1872
• Consumer Protection Act, 2019
• GDPR (for EU users)
• Other applicable Indian and international privacy laws