Privacy Policy

1. Who Operates CVScan

CVScan is operated by TRIPSJAI TECHNOLOGIES, 3-B, Subramani Nagar Annexe, 1st Street, Puthagaram, Kolathur, Chennai, Tamil Nadu 600099, India. For privacy requests or grievances, contact help@cvscan.in.

2. Data We Collect

• -Resume file uploaded by you, including PDF, DOCX, image, or text submitted for analysis.
• -Information extracted from your resume, including name, email address, phone number, location, work experience, skills, education, qualifications, job history, portfolio links, and other details present in the document.
• -Personal details that you voluntarily include in your resume, such as date of birth, age, gender, address, photograph, or similar information.
• -Payment and order metadata, including Cashfree order ID, payment status, feature unlocked, amount paid, currency, refund status, and delivery status. CVScan does not store your card, bank, or UPI credentials.
• -Support and recovery information, including email address, order ID, portfolio link, WhatsApp support context, and messages you send us.
• -Technical and analytics data, including page path, device/browser information, referral source, approximate location, event names, session identifiers, and local browser storage used to keep the service working and measure funnel performance.

3. Why We Process Data

• -To parse your resume, calculate an ATS-style audit, identify missing keywords or formatting issues, and generate resume, portfolio, or outreach files requested by you.
• -To process one-time payments, deliver purchased files, send receipts, recover failed sessions, provide support, and prevent duplicate or failed delivery problems.
• -To maintain service security, detect abuse, debug technical failures, improve product quality, and measure anonymous or aggregated product performance.
• -To comply with applicable tax, accounting, payment, consumer protection, legal, and dispute-resolution obligations.

4. AI Processing and Service Providers

• -By uploading or submitting your resume, you consent to processing of your document by AI systems used by CVScan, including Google's Gemini model through the Google AI API, to produce resume parsing, scoring, rewrite, and audit outputs.
• -We use trusted service providers to operate CVScan, including Supabase for database/storage, Cashfree for payments, Resend for transactional email, Google Analytics/Google Tag Manager for product analytics, and Vercel or similar infrastructure providers for hosting and logs.
• -These providers process data only for service delivery, security, analytics, payment, communication, or legal compliance. We do not sell, rent, or disclose your personal data to employers, recruiters, advertisers, or unrelated third parties.

5. Storage, Retention, and Deletion

• -Extracted resume data may be stored to power your ATS audit, downloads, recovery flow, and public portfolio link if you unlock that feature.
• -Resume/profile data is retained for a maximum of 12 months from last access unless you request earlier deletion. We may delete inactive or unpaid records earlier.
• -Payment, tax, security, delivery, refund, and dispute records may be retained for the period required or reasonably needed under applicable law.
• -You may request deletion by emailing help@cvscan.in. We acknowledge deletion requests within 2 business days and aim to complete eligible deletion within 5 business days after verifying the request.

6. Cookies, Local Storage, and Analytics

• -We use localStorage/sessionStorage to maintain your session, remember recovery state, and keep the visual experience consistent during A/B testing.
• -We use Google Analytics and Google Tag Manager to understand page views, uploads, scans, checkout actions, purchases, and product performance. This analytics is used to operate and improve CVScan, not to sell personal profiles.
• -You can restrict analytics using browser privacy settings, but some essential service features may require local storage or session identifiers.

7. Security

We use HTTPS/TLS, restricted server-side credentials, database access controls, and operational safeguards to protect uploaded resumes and profile data. No online service can guarantee absolute security, but we apply reasonable technical and organizational measures appropriate for the sensitivity of resume and payment metadata.

8. Your DPDP Rights

• -You may request access to a summary of personal data processed by us, correction of inaccurate data, deletion of eligible data, withdrawal of consent where applicable, grievance redressal, and nomination of another person to exercise your rights where permitted by law.
• -To exercise these rights, email help@cvscan.in from the email address used with CVScan and include your order ID, portfolio link, or enough information for us to identify your record.
• -We may ask for reasonable verification before acting on privacy requests to prevent unauthorized access, deletion, or disclosure.

9. Children and Minors

CVScan is intended for job seekers who can lawfully use online services and make payment decisions. We do not knowingly target children. If a minor's personal data is submitted without valid parent or lawful guardian consent, contact us and we will delete eligible data.

10. Cross-Border Processing

Some service providers may process or store data outside India. Where this occurs, it is for service delivery, security, analytics, payment, communication, or support, and remains subject to applicable contractual, technical, and legal safeguards.

11. Grievance Redressal

For privacy questions, data requests, or grievances, email help@cvscan.in. We acknowledge privacy requests within 2 business days and aim to resolve grievances within 30 days. If you are not satisfied, you may use remedies available under applicable Indian law.