Privacy Policy

1. Introduction

JobChariot is operated from Hyderabad, Telangana, India. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it. We comply with India's Digital Personal Data Protection Act 2023 (DPDPA).

JobChariot operates at jobchariot.ai (primary), jobchariot.com, and jobchariot.in. This policy applies to all of those domains.

2. Information We Collect

• Account Data: your email address (collected via Supabase authentication).
• Resume Data: your uploaded PDF, stored encrypted, plus structured fields (skills, experience, education) extracted by AI.
• Application Activity: jobs you click "Apply" on within JobChariot. We do NOT track your activity on the external company sites you are redirected to.
• Usage Data: login, upload, and search events used to enforce fair-use limits.
• Technical Data: IP address, browser type, and server logs used for security and debugging.
• Future: phone numbers may be collected in the future for SMS notifications, OTP verification, or account security. This policy will be updated when that feature launches and existing users will be notified before any phone number is collected.

3. How We Use Your Information

• AI matching of your resume to job postings.
• Resume tailoring for specific applications.
• Tracking applications you initiate through JobChariot.
• Enforcing fair-use limits (5 resume uploads per week, etc.).
• Improving service quality and detecting abuse.
• Communicating service updates via email.

4. Third-Party Services & AI Processing

JobChariot relies on the following third-party services:

• Supabase (Mumbai region, AWS) for database storage and authentication.
• Anthropic Claude API for AI matching and resume tailoring. Resume content is sent to Anthropic's servers in the United States for processing.
• Voyage AI for vector embeddings. Resume text is sent to Voyage's servers for processing.

Important: resume content leaves India for AI processing. Anthropic and Voyage have their own privacy policies which we encourage you to review.

5. Data Storage & Security

• Primary database in Mumbai region (Indian data residency).
• Resumes encrypted at rest.
• HTTPS for all transmissions.
• Access controls limit who at JobChariot can view user data.
• We are not 100% breach-proof. No system is. We will notify affected users in case of a security incident.

6. Your Rights Under DPDPA

Indian users have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Withdraw consent for data processing.
• Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email support@jobchariot.ai.

7. Data Retention

• Active accounts: data is kept while your account is active.
• Deleted accounts: data deleted within 90 days, except where required by law.
• Application history: retained for 1 year unless you request deletion.
• Backups: we may retain deleted data in backups for up to 30 additional days.

8. Cookies & Tracking

• Essential cookies: required for your login session.
• Analytics: we use minimal analytics to understand usage patterns. We do NOT use third-party advertising trackers.
• You can disable cookies in your browser, but the service may not work properly without them.

9. Children's Privacy

• JobChariot is intended for users aged 18 and above only.
• We do not knowingly collect data from anyone under 18.
• If we discover that a user is under 18, we will delete the account.

10. Job Listings Data

Important transparency note about the jobs shown on JobChariot:

• We aggregate job postings from public career sites of various companies.
• We are not affiliated with any of the companies whose jobs we list.
• Job descriptions, salaries, and other details come from those sites and may be inaccurate.
• When you click "Apply", you go to the company's own application page where their privacy policy applies.
• Companies may request removal of their listings by emailing support@jobchariot.ai.

11. International Users

• JobChariot is currently focused on Indian job seekers.
• If you access JobChariot from outside India, your data still flows through India and the United States (for AI processing).
• GDPR rights for EU users will be honored on a best-effort basis. Full GDPR compliance is on our roadmap as we expand globally.

12. Changes to This Policy

• We may update this policy as the service evolves.
• Material changes will be communicated via email.
• The last-updated date at the top of this page will be revised accordingly.

13. Contact

• support@jobchariot.ai for privacy questions, data requests, and takedowns.
• feedback@jobchariot.ai for general feedback.
• We aim to respond within 7 business days.