CareerCraft — Privacy Policy

Introduction

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal information by CareerCraft ("Company," "we," "us," or "our"), a digital resume-building platform operated and maintained in India. This Policy applies to all users ("you" or "User") who access or use CareerCraft's website, mobile application, and related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Policy, please discontinue use of the Platform immediately.

This Policy is published in compliance with applicable Indian laws, including the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and, to the extent applicable, the Digital Personal Data Protection Act, 2023 ("DPDPA").

1. Information We Collect

We collect information that you provide directly to us, information generated through your use of the Platform, and information from third-party services integrated with our Platform.

1.1 Personal Identification Information

• Full name
• Email address
• Mobile phone number
• Date of birth (if provided)
• Profile photograph (if uploaded)

1.2 Professional and Resume Data

• Educational qualifications, degrees, institutions, and dates of attendance
• Work history, employer names, job titles, responsibilities, and employment dates
• Skills, certifications, and professional achievements
• Resume documents and files uploaded to the Platform
• Career objectives and summary statements

1.3 Account and Authentication Information

• Username and encrypted password credentials
• Account preferences and settings
• Subscription plan and billing information (processed via Razorpay)

1.4 Technical and Usage Data

• IP address, browser type, device type, and operating system
• Pages visited, features accessed, and time spent on the Platform
• Clickstream data, session duration, and navigation paths
• Referral URLs and search terms used to find our Platform
• Log files and error reports

1.5 Communications Data

• Messages or queries submitted through our support channels
• Feedback, survey responses, and reviews provided voluntarily

2. How We Use Your Information

CareerCraft uses the personal information we collect for the following lawful purposes:

2.1 Platform Functionality and Service Delivery

• To create, manage, and authenticate your user account
• To enable you to build, edit, download, and share professional resumes
• To save your resume data and preferences securely
• To provide customer support and respond to your inquiries
• To process your subscription and billing transactions

2.2 Communications

• To send account-related transactional emails, including registration confirmations, password resets, and billing receipts
• To send service-related notifications, platform updates, and feature announcements
• To send periodic newsletters or promotional communications, where you have expressly opted in (you may opt out at any time)

2.3 Platform Improvement and Analytics

• To monitor, analyze, and improve the performance and usability of the Platform
• To conduct internal research, user behavior analysis, and feature development
• To diagnose technical issues, bugs, and performance anomalies

2.4 Legal and Compliance Obligations

• To comply with applicable laws, regulations, and legal processes
• To enforce our Terms of Service and other agreements
• To prevent fraud, unauthorized access, and misuse of the Platform
• To protect the rights, safety, and interests of CareerCraft and its users

3. Payment Processing

CareerCraft uses Razorpay, a third-party payment gateway service provided by Razorpay Software Private Limited, for processing all subscription payments and financial transactions on the Platform.

When you make a payment on CareerCraft, you are directed to Razorpay's secure payment interface. All payment information — including credit/debit card details, net banking credentials, UPI identifiers, and wallet information — is collected, processed, and stored directly by Razorpay and is subject to Razorpay's Privacy Policy and Terms of Service, available on their official website.

CareerCraft does not collect, store, or have access to your complete payment card information. We receive only transaction confirmation details such as a transaction reference ID, payment status, amount, and timestamp, which we store solely for billing, account management, and dispute resolution purposes.

Razorpay processes payment data in compliance with the Payment Card Industry Data Security Standard (PCI-DSS) and applicable RBI guidelines. By making a payment on our Platform, you also agree to Razorpay's terms and privacy practices. CareerCraft is not responsible for any data processed independently by Razorpay.

4. Data Sharing and Disclosure

CareerCraft does not sell, rent, trade, or otherwise commercially exploit your personal information to any third party.We may share your information only in the limited circumstances described below:

4.1 Service Providers and Vendors

We may share your information with carefully selected third-party service providers who assist us in operating the Platform. These providers are contractually obligated to process your data only on our behalf and in compliance with applicable data protection laws.

4.2 Legal Obligations and Enforcement

We may disclose your information to government authorities, law enforcement agencies, or other competent bodies if required by applicable law or court order.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving CareerCraft, your personal information may be transferred to the acquiring or successor entity.

5. Data Security

CareerCraft implements industry-standard technical, administrative, and physical safeguards to protect your personal information. Our security measures include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols
• Encryption of sensitive data at rest using AES-256 or equivalent standards
• Role-based access controls limiting data access to authorized personnel only
• Secure cloud infrastructure with regular security assessments and audits
• Multi-factor authentication for administrative access to systems
• Regular vulnerability scanning and penetration testing
• Incident response procedures for detecting and addressing security breaches

You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately at careercraft325@gmail.com if you become aware of any unauthorized access to your account.

6. Your Rights

Subject to applicable Indian law, you have the following rights with respect to your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request correction of inaccurate or outdated information.
• Right to Erasure: You may request deletion of your account and personal data by contacting us at careercraft325@gmail.com. Deletion will be processed within 30 days.
• Right to Withdraw Consent: You may withdraw consent at any time where processing is based on your consent.
• Right to Object to Marketing: You may opt out of promotional communications at any time.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: careercraft325@gmail.com

We will acknowledge all privacy-related inquiries within 48 hours of receipt and endeavour to resolve complaints within 30 days.

8. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts in India.