Privacy Policy

1. Information We Collect

We collect personal information necessary to deliver personalized job discovery services:

• Account Identification: Name, email address, and authentication identifiers provided via Google Authentication or Firebase Auth.
• Resume & Professional Profile Data: Resumes uploaded in PDF format, extracted work history, education, skills, projects, and portfolio links.
• Job Search Preferences: Target job titles, preferred work modes (Remote, Hybrid, Onsite), target cities, and salary expectations.
• Technical & Telemetry Data: IP address (redacted in logs), browser user-agent, error logs, and anonymized performance metrics.

2. How We Use Your Data

Your information is processed for the following legitimate purposes:

• Matching your candidate profile against aggregated job listings using local semantic embeddings.
• Providing AI-assisted resume bullet enhancements and tailored executive summaries via secure subprocessor APIs (NVIDIA NIM / OpenAI).
• Persisting your profile and application preferences in Supabase for cross-device access.
• Monitoring platform health, preventing denial-of-service abuse, and securing API endpoints.

3. Subprocessors & Data Transfers

We partner with enterprise cloud infrastructure providers under strict Data Processing Agreements:

• Supabase: Cloud PostgreSQL database for profile, preference, and job index persistence.
• Firebase / Google Cloud: User authentication and token verification.
• NVIDIA NIM / AI Inference APIs: Ephemeral processing of resume bullet suggestions (data is not retained for model training).

4. Your Rights (GDPR, CCPA & India DPDP Act 2023)

Depending on your jurisdiction, you possess specific statutory rights regarding your personal data:

• Right to Access & Portability: You can inspect and export your saved profile data at any time from your Profile settings.
• Right to Rectification: You can modify your skills, experience, and preferences directly via the getArole dashboard.
• Right to Erasure (Right to be Forgotten): You can trigger immediate, permanent deletion of your profile, preferences, and uploaded resume data via DELETE /api/user/account or within the Profile menu.
• Do Not Sell My Personal Information (CCPA): getArole does not sell or share consumer personal data.

5. Data Retention & Security

We apply defense-in-depth security measures including SHA-256 integrity hashing, HTTPS TLS 1.3 encryption in transit, least-privilege database row-level security (RLS), and rate-limited API firewalls. User data is retained only for the duration of an active user account.

6. Grievance Officer & Contact (India DPDP Act 2023)

In accordance with the Digital Personal Data Protection Act, 2023 and Information Technology Rules, the contact details of our Grievance Officer are:

• Designation: Data Protection & Grievance Redressal Officer
• Email: hemasaivattikuti2727@gmail.com
• Address: getArole Engineering Team, Bengaluru, Karnataka, India