Privacy policy

This policy explains what personal data ResumeKaro (legal entity name to be added) (“ResumeKaro”, “we”) collects when you use resumekaro.in and our browser extension, why, and the choices you have. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

• Account details — your email address and/or mobile number, and your name.
• Career information you give us — resumes and LinkedIn exports you upload, your profile (work history, education, skills, current and expected CTC, notice period, preferred locations), job descriptions you paste, and the resumes, letters, ATS reports and application records we create for you.
• Payment records — the plan you bought, amount and Razorpay order and payment IDs. Card, UPI and bank details are handled by Razorpay; we never see or store them.
• Usage and technical data — which features you use and how often (to apply plan limits), and standard server logs such as IP address and browser type, kept for security.
• Consent records — which version of these terms you accepted and when, and your email preferences.

If you use the free ATS checker without an account, the resume you upload is read once to score it and is not stored. We keep your IP address in memory for up to a day to limit how often the checker can be used. So that the same job is always scored the same way, we keep the list of skills and requirements read from each job description (never your resume or anything about you).

Why we use it

• To provide the service you ask for: building your profile, tailoring resumes, writing letters and messages, ATS checks and tracking applications.
• To sign you in with one-time codes, apply plan limits and process payments.
• To keep the service secure and prevent abuse.
• To answer your support requests and send service messages (not marketing, unless you opt in).

We rely on your consent, which you give on the consent screen when you first sign in — and again whenever this policy changes in a meaningful way. Marketing emails are a separate choice you can change at any time on the Account & privacy page. We do not sell your data, and we never share your resume with employers or recruiters.

AI processing

Our writing and analysis features use AI models provided by Anthropic. When you use such a feature, we send only what that task needs — for example, your work history and the job description. Contact details and salary figures are removed before tailoring resumes and writing letters. Anthropic processes this data on our behalf, may process it outside India, and does not use it to train its models under our commercial terms.

Browser extension

The ResumeKaro extension for Chrome works only while you are signed in to it, and only on the page in front of you:

• Reading a job post. On the job sites the extension supports, it reads the job title, company, location, salary and description when you open its side panel. It does not read other pages, your browsing history, or messages and profiles on those sites. It sends the job’s link to our servers to show whether the job is already in your tracker; the rest of the job details go to our servers only when you ask for something — a match score, a tailored resume, a letter, or saving the job to your tracker.
• Filling an application form. When you click “Fill this page” or choose “Fill this form with ResumeKaro” from the right-click menu, the extension fills empty fields on that page from your ResumeKaro profile and can attach your resume and cover letter. This happens in your browser; it never submits a form for you, and what you type into forms is not sent to us.
• What it stores. Its own sign-in token (in the extension’s storage, not a cookie), your preferred resume and letter style, and — until you close the browser — the results you made for recent jobs.

The extension never signs in to job sites for you and never collects your passwords for them. Data it handles is used only to provide the features above; we don’t sell it, use it for advertising or credit decisions, or let people read it except for security, legal reasons or when you ask us for help. Our use of this data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Disconnecting the extension signs it out; removing it deletes what it stored in your browser.

Who else processes your data

• Anthropic — AI processing, as above.
• DigitalOcean — hosting and encrypted file storage (Bengaluru region).
• Razorpay — payments.
• MSG91 and Resend — delivering sign-in codes by SMS/WhatsApp and email.
• Sentry — error reports, so we can fix crashes. Reports contain the error and the page or API path, not your IP address, form contents, resume or contact details.
• Plausible — privacy-friendly visit statistics (pages viewed and steps such as “signed up” or “ran an ATS check”). It uses no cookies and doesn’t identify you.

How we protect it

Data is encrypted in transit (HTTPS) and uploaded files, profiles, letters and notes are encrypted at rest. Access is limited to the account owner and to the few staff who need it to run the service.

How long we keep it

We keep your data while your account is active. When you delete your account (Account & privacy → Delete account), your profile, resumes, letters, ATS reports, applications and uploaded files are deleted immediately, and you’re signed out everywhere; copies in our encrypted backups are overwritten within 30 days.

We keep only what we must, linked to an anonymous ID with no name or contact details: payment records (Indian tax law), a log of AI feature usage without any content (for our costs), and your consent history (to show that you consented and later withdrew).

Your rights

Under the DPDP Act you can:

• get a summary of the personal data we hold about you and how it’s used — or a full copy, any time, from Account & privacy → Download my data;
• correct or update it (most of it you can edit directly in the app);
• withdraw consent and have your data erased by deleting your account;
• nominate someone to exercise these rights if you die or become incapacitated;
• raise a grievance with us, and then with the Data Protection Board of India.

Children

ResumeKaro is meant for people aged 18 and over. We don’t knowingly process data of children.

Cookies and local storage

We use your browser’s local storage (and the extension’s own storage) only to keep you signed in and remember your preferences. We don’t use advertising cookies.

Grievance officer

Name to be added · grievance@resumekaro.in · Registered address to be added. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

Changes

If we change this policy in a meaningful way, we’ll tell you by email or in the app before the change applies.