Privacy Policy

Last updated 21 October 2026

This policy explains how JobHuntrPro ("JobHuntrPro", "we", "us") collects and uses personal data when you use jobhuntr.pro and its subdomains (the "Service"), and the choices and rights you have. We are responsible for your personal data as the "data fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act), and the "controller" under the EU and UK General Data Protection Regulation (GDPR).

1. What we collect
2. How we use it
3. Legal bases
4. AI processing
5. Who we share it with
6. What's public
7. Other people's data you add
8. International transfers
9. How long we keep it
10. Security
11. Your rights
12. Cookies
13. Children
14. Changes to this policy
15. Contact and Grievance Officer

1. What we collect

You give us

• Account details: your name, email address and password (stored only as a secure hash).
• Resume content: work history, education, skills, contact details and anything else you write or import. If you upload a PDF or Word file, we read the text from it to build your resume and don't keep the file.
• Optional personal details some resume formats ask for: photo, date of birth, nationality, visa status, notice period and languages. Only add them if you want them on your resume; you can remove them at any time.
• Job search information: job descriptions you paste, applications you track, interview dates and notes, interview practice answers, and saved jobs.
• LinkedIn and outreach: profile text or the LinkedIn PDF you import (we read the text and don't keep the file), and the people and messages you add.
• Portfolio site: the content, projects and settings you choose to publish.
• Messages to us: what you send when you contact support.

Collected when you use the Service

• Country: worked out from your IP address when you visit, using the country header from Cloudflare or, if it's missing, a lookup with country.is or ipapi.co. We store the country on your account to show local prices and jobs; we don't store your IP address with it.
• Session and security data: IP address, browser type and the time of your last activity, kept with your login session and in server logs to keep your account secure and fix problems.
• Usage counts: for example how many PDFs you've downloaded, to apply plan limits.
• Portfolio visit statistics: when someone views your published portfolio we count it using a hashed visitor ID that changes daily. We never store visitors' raw IP addresses.

Payments

Payments are handled by Razorpay. We don't receive or store your card number, CVV, UPI PIN or bank login. We keep a record of each purchase: plan, amount, currency, date, Razorpay order, subscription and payment IDs, and when you accepted our Terms at checkout. Razorpay may share limited details with us, such as payment method type and status.

2. How we use it

• to create and run your account and provide the features you use: building, checking, tailoring and exporting resumes, matching jobs, tracking applications, interview prep, portfolio sites, and LinkedIn and outreach drafts;
• to take payments, apply your plan and its limits, and keep records required by tax and accounting law;
• to show prices in your currency and jobs in your country;
• to send service emails about your account, payments and important changes (we don't send marketing emails without your consent, and you can unsubscribe from any marketing email);
• to keep the Service secure, prevent fraud and abuse, and fix bugs;
• to answer your questions and complaints;
• to meet legal obligations and enforce our Terms.

We don't make decisions about you that have legal or similarly significant effects based only on automated processing. Match scores and ATS checks are suggestions for you, not decisions.

3. Legal bases

India (DPDP Act): we process your data with your consent, which you give when you sign up and use features, and for legitimate uses the Act allows, such as complying with law. You can withdraw consent at any time by deleting the data or your account; this doesn't affect processing already done.

EU and UK (GDPR):

4. AI processing

To write and improve resume bullets, import resumes, tailor resumes to jobs, give interview feedback, and draft LinkedIn content and messages, we send the relevant text to our AI provider, Anthropic, PBC (the Claude API). Under its commercial terms, Anthropic processes this data to provide the service to us and does not use it to train its models. We send only what the feature needs.

5. Who we share it with

We don't sell your personal data, and we don't share it for advertising. We share it only with:

• Service providers who process it for us under contract: our hosting provider (servers and database), Cloudflare (website delivery, security and country detection), Razorpay (payments), Anthropic (AI features), our email provider (account emails) and the IP country lookup services named above.
• The public, for content you choose to publish on your portfolio site (see section 6).
• Authorities, when the law requires it or to protect the rights, safety or property of our users, the public or us.
• A buyer or successor, if JobHuntrPro is reorganised, merged or sold. They must keep protecting your data under this policy.

We never send your resume to employers. You decide where to apply and what to send.

6. What's public

Your portfolio site is only public after you publish it, and only while you have a Monthly Pass. It shows what you've chosen in its settings. Anyone with the link can see it and search engines may index it. You can unpublish it at any time.

7. Other people's data you add

If you add details about other people, such as a hiring manager's name, job title, LinkedIn link or email in LinkedIn & outreach, or referees on a resume, we store them only so you can use them in your job search. We never contact these people. Please add only information you obtained lawfully and need. They can ask us to delete their details by emailing [email protected].

8. International transfers

Our service providers may process data in countries other than yours, including India, the United States and countries in the European Union. Where the law requires, we rely on safeguards such as the European Commission's standard contractual clauses. We'll follow any restrictions the Government of India places on transfers to particular countries under the DPDP Act.

9. How long we keep it

10. Security

We use encryption in transit (HTTPS), hashed passwords, access controls, private storage for photos, and limits on login attempts. No system is perfectly secure, so please use a strong, unique password. If a breach affects your data, we'll notify you and the authorities as the law requires, including the Data Protection Board of India.

11. Your rights

Depending on where you live, you can:

• access your data and get a summary of how it's processed and who it's shared with;
• correct or update it (most of it you can edit yourself in the app);
• delete it, including your whole account in Settings;
• export your resumes (download them as PDF) or ask us for a copy of your data in a portable format;
• withdraw consent or object to processing based on legitimate interests;
• nominate someone to exercise your rights if you die or can't act yourself (DPDP Act);
• complain to us first through our Grievance Officer, and then to the Data Protection Board of India, or your local data protection authority in the EU or UK.

California residents: you have the right to know, delete and correct personal information, and not to be discriminated against for using these rights. We don't sell or "share" personal information for cross-context behavioural advertising, and we don't use sensitive personal information to infer characteristics about you.

To use any right, email [email protected] from the address on your account. We may need to confirm your identity. We'll answer within 30 days, or sooner if the law requires.

12. Cookies

We use only cookies that the Service needs to work:

Razorpay's checkout window may set its own cookies to process payments and prevent fraud. We don't use analytics, advertising or social media tracking cookies. If we ever add any, we'll ask for your consent first.

13. Children

The Service is for adults aged 18 and over. We don't knowingly collect data from children. If you believe a child has created an account, contact us and we'll delete it.

14. Changes to this policy

We'll post any changes on this page and update the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

15. Contact and Grievance Officer

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.