Privacy Policy

We collect the following categories of information when you use SmartResumeATS:

**Account Information:** Your name, email address, and password when you register.

**Resume Content:** Work history, education, skills, contact details, and any other information you enter into the resume builder or upload for parsing.

**Usage Data:** Pages visited, features used, time spent on the platform, and interaction events — collected via anonymised analytics.

**Payment Data:** Subscription plan and billing status. We do not store card numbers or UPI credentials. All payment processing is handled by Razorpay under their own PCI-DSS compliance.

**Device & Technical Data:** Browser type, IP address, operating system, and referring URL — used for security monitoring and performance optimization.

We use the information we collect for the following purposes:

• To provide the service: Generating resumes, running ATS analysis, storing your drafts, and managing your subscription.

• To improve the product: Understanding which features are used, where users drop off, and how to make the platform better.

• To communicate with you: Sending account-related emails (password resets, billing receipts, plan updates). Marketing emails are opt-in only.

• To prevent fraud and abuse: Monitoring for suspicious activity, rate limiting, and enforcing our Terms of Service.

• To comply with legal obligations: Retaining records as required by Indian law, including the Information Technology Act, 2000.

Your data is stored on servers in AWS (ap-south-1 Mumbai region). We apply the following security measures:

• 256-bit SSL/TLS encryption for all data in transit

• AES-256 encryption for sensitive data at rest

• Role-based access control — only essential engineering staff can access production data

• Automated vulnerability scanning and dependency audits

• Regular third-party security reviews

No system is 100% secure. If we discover a breach that affects your data, we will notify you within 72 hours via email.

We do not sell your personal data. Period.

We share data only with:

**Service Providers:** AWS (hosting), Razorpay (payments), Resend (transactional email), Vercel (CDN). Each is bound by a Data Processing Agreement.

**Legal Requirements:** When required by Indian law, court order, or legitimate government authority — we will notify you before disclosing unless prohibited from doing so.

**Business Transfers:** If SmartResumeATS is acquired or merged, your data may transfer to the new entity. You will be notified and given the option to delete your account before any transfer completes.

We use the following types of cookies:

**Strictly Necessary:** Session tokens for authentication. Cannot be disabled without breaking login.

**Analytics:** Anonymised page-view and event tracking to understand how the product is used. You can opt out via your browser's Do Not Track setting.

**Preferences:** Remembering your last used template, theme setting, and UI preferences.

We do not use third-party advertising cookies. We do not share cookie data with ad networks.

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you.

• Correction: Update incorrect or incomplete data via Account Settings.

• Deletion: Permanently delete your account and all associated data from Account Settings → Delete Account. This is irreversible and processed within 30 days.

• Portability: Export your resume data in JSON format from Account Settings.

• Withdrawal of Consent: For marketing emails, unsubscribe at any time via the link in any email. ATS analysis and resume storage are core features — withdrawing consent for these requires account deletion.

To exercise these rights, email privacy@smartresumeats.com with your registered email address.

We retain your data as follows:

• Active accounts: For as long as your account exists.

• Deleted accounts: Data is purged within 30 days of account deletion request. Billing records are retained for 7 years as required by Indian tax law.

• Analytics data: Anonymised aggregate data is retained indefinitely. Individual event data is deleted after 24 months.

• Support emails: Retained for 3 years for quality assurance.

SmartResumeATS is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@smartresumeats.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to your registered address) and display a banner on the platform at least 7 days before changes take effect. Your continued use of the service after changes take effect constitutes your acceptance of the revised policy.

For privacy-related questions, requests, or complaints, contact our Privacy Officer:

**Email:** privacy@smartresumeats.com

**Post:** SmartResumeATS Technologies Pvt Ltd, Bengaluru, Karnataka 560001, India

**Response time:** Within 7 business days for all privacy requests.