Privacy Policy
Last updated: 2026-06-12 · Version v1.1
Kaamio takes your privacy seriously. This page explains what data we collect, how we use it, who we share it with, and the rights you have over it.
What we collect
- Account data: name, email, hashed password, locale.
- Profile data: headline, bio, skills, experience, education, links, location, salary expectations, work preferences.
- Career artifacts: resumes, cover letters, mock interview transcripts, test results.
- Activity: applications you track, jobs you view, interactions with the platform.
- Technical: IP address, user-agent, login attempts (for security), audit logs of sensitive actions.
How AI processes your data
We use Anthropic's AI API to score resumes, generate cover letters, conduct mock interviews, and produce career coaching content. When you trigger an AI action, the relevant inputs (e.g. your resume content + a job description) are sent to Anthropic for processing. Anthropic does not train on data submitted via their API. See AI disclosure for details.
Who we share with
- Recruiters: only if you opt in (default ON; toggle off in settings). They see your profile, resumes you mark public, and applications you submit.
- Service providers (sub-processors): the infrastructure and payment providers listed in the Sub-processors table below. Each receives only the data needed for its purpose.
- Legal: where required by law or to protect users.
- We do not sell your personal data to third parties.
Sub-processors
These are the third-party providers that process personal data on our behalf, what each does, and what data it receives:
| Provider | Purpose | Region | Data shared |
|---|---|---|---|
| Vercel | Web hosting & serverless compute | US / global edge network | All request data in transit (the app runs here) |
| Neon | Postgres database hosting | [confirm Neon project region, e.g. AWS ap-southeast-1 Singapore] | Account, profile, application, and assessment records at rest |
| Cloudflare | CDN & file storage (R2) | Global network | Uploaded files (resumes, cover letters); request metadata |
| Resend | Transactional email delivery | US / global | Your email address and the content of emails we send you |
| Razorpay | Payments (credits, boosts, plans) | India | Name, email, payment details (we never see your full card number) |
| Stripe | Subscription billing (where offered) | US / global | Name, email, payment details (we never see your full card number) |
| Anthropic / Google (Gemini) | AI processing (resume scoring, cover letters, mock interviews, coaching) | US / global | The inputs of the AI action you trigger (e.g. resume text + job description) |
Cross-border transfers. Some of these providers process data outside India. The DPDP Act, 2023 permits transfers of personal data outside India to any country the Central Government has not restricted (the "negative list" model). All of the destinations above are currently permitted. If the Government restricts a destination we use, we will migrate or stop the transfer and update this policy.
Data retention
- Account & profile data: kept while your account is active — until you delete your account or ask us to.
- Applications & assessment/test results: kept while your account is active, plus up to 12 months (so reports and application history keep working), then deleted.
- Security logs (login attempts, audit logs of sensitive actions): up to 24 months, for fraud and abuse prevention.
- After account deletion: a 30-day soft-delete grace period (in case you change your mind), then hard deletion from our systems. Some records may persist briefly in encrypted backups before those backups expire, and we may retain the minimum required where a law obliges us to (e.g. payment/tax records).
Your rights
Under the DPDP Act, 2023 you have the following rights, and each one has a real place in the app where you exercise it:
- Access & export: download a copy of everything we hold at /settings/data ("Download my data").
- Correction: edit your profile, resumes, and preferences directly in the app. For data you can't edit yourself (e.g. assessment results or derived data), request a correction via our Grievance Officer.
- Erasure: delete your account at /settings/data. We soft-delete for 30 days, then hard-delete (see Data retention above).
- Consent withdrawal: withdraw any consent — as easily as you gave it — at /settings/data (consents on file). You can also turn off optional AI features; mandatory features for the platform to function (like resume scoring) require AI consent at signup, and withdrawing it means closing your account.
- Visibility controls: control who can find you (recruiter visibility, blocked companies, hide-from-current-employer) at /settings/privacy.
- Grievance: raise any data-protection complaint with our Grievance Officer. We acknowledge within 7 working days and aim to resolve within 30 days; if unresolved, you can escalate to the Data Protection Board of India.
Children
Kaamio is a job platform for working professionals and job seekers. The service is intended only for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact our Grievance Officer and we will delete it.
Contact
For privacy questions, Contact support. For formal data-protection grievances, see our Grievance Redressal page.