Privacy Policy

This policy explains how Admin (“we”) processes personal data when you use KaryvoNext, in line with India’s Digital Personal Data Protection Act, 2023 and its Rules.

1. Data we collect

• Résumé text and job descriptions you submit, and results we generate from them.
• We do not ask for your email address or phone number. There are no accounts, and your purchases and results are tied to a cookie in your browser rather than to you. Razorpay collects whatever contact details it needs to take a payment, under its own privacy policy.
• Payment references from Razorpay (never your card, UPI PIN, or bank credentials).
• Technical data for security and abuse prevention, such as a hashed IP address and a session cookie.

Uploaded files are read in memory and never stored. We do not ask for photos, date of birth, religion, caste, or other sensitive details, and our AI is instructed not to infer them.

2. Why we use it

• To provide the scores, reports, rewrites, and tools you request.
• To process payments, prevent fraud and abuse, and keep the Service secure.
• To meet legal obligations, such as keeping payment records.

We do not sell your data, and your résumé content is never used to train AI models or for advertising.

3. Who processes it for us

• Our AI service provider (servers in the USA) — generates your AI results from the text you submit, under a data-processing agreement that prohibits using your content to train models.
• Razorpay (India) — payments.
• Hostinger — hosts our server and database, located in Mumbai, India.
• Email and error-monitoring providers, without your résumé content.

4. How long we keep it

Uploaded résumé files are never stored: they are read in memory and discarded straight away. Only the text you submit is kept, as below.

• Free score inputs: 24 hours, unless you buy something.
• Guest purchases: 30 days after the purchase expires, or earlier if you delete them.
• Accounts: until you delete your account, or after 24 months of inactivity (with notice).
• Payment records: as required by Indian law, without résumé content.
• Security data (a one-way hashed IP address and request timestamps used for rate limiting): up to 48 hours.
• Consent records (which notice you agreed to, when, and for what purpose, never your résumé): for as long as the law requires us to prove consent.

Operational backups. We take a daily backup of our database so we can recover from a failure. Because a backup is a snapshot of everything at one moment, text that has already been deleted from the live service can still exist in a backup until that backup ages out, which takes up to 15 days. We do not restore individual records from backups, and backups are kept only for recovery — nothing reads them in the course of running the service.

5. Your rights

We process résumé content only with your consent, which you give by ticking the box before your free check. Withdrawing consent is as easy as giving it, and stops further processing. You can access, correct, export, and erase your data, withdraw consent, and raise a grievance. Use the in-app controls where available or email support@karyvonext.in. Grievance Officer: Admin, grievance@karyvonext.in. You may also approach the Data Protection Board of India.

6. Cookies

The app uses only strictly necessary cookies (session and security). Public content pages may use analytics and show ads only after you consent; none are active today. You can accept or reject in the cookie banner and change your choice any time with “Cookie settings” in the footer; rejecting never limits the tools.

7. Usage statistics

We keep simple daily counts so we can tell whether the Service is working and worth running: how many pages were viewed, how many checks were run, how many purchases were made and what they cost us. These are totals only. They contain no identifier, no IP address and no part of your résumé or job description, they cannot be traced back to you or to any device, and they set no cookie. Where a visit came from is recorded only as a broad label such as “google”, “linkedin” or “direct”.

Because these counts hold no personal data, they are not deleted when your personal data is deleted under section 4.

8. Children

The Service is not intended for anyone under 18 without verifiable parental or guardian consent.