Privacy Policy

Last updated: 10 October 2026

JobRaah helps you find jobs, prepare applications and fill in application forms. To do that we have to handle personal data: your résumé, your contact details and the answers you save. This policy explains what we collect, why, who else sees it, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

JobRaah is run by [operator's legal name], [postal address] ("we", "us"). We are the Data Fiduciary for your personal data.

1. What we collect

Account details. Your email address. If you sign in with Google, we also get your name and profile photo from Google. If you use a password, it is stored only as a secure hash by our sign-in provider; we never see it.
Your résumé. The file you upload, and the facts we read from it (jobs, education, skills, projects). You review and edit these facts before we use them.
Saved answers. Things you choose to save so forms can be filled for you, for example phone number, location, notice period, expected salary, years of experience and profile links.
Applications. The jobs you queue or apply to, their status, and proof that an application went through (such as the confirmation message or page shown by the employer's site).
Recruiter replies. If you paste a recruiter's reply into the Tracker, we sort it (for example "interview" or "rejected") and save only that result. We do not store the message itself.
Payments. Payments are handled by Razorpay. We never see or store your card, UPI or bank details; we keep your plan, credit balance and order records.
Browser extension. The extension works only on supported job and hiring sites (such as Greenhouse, Lever, Workday and Ashby), and only on an application form you open. On any other site it does nothing unless you click "Fill this form" in the extension, and then only on that one tab. It reads that form's field labels to fill in your saved answers. When it doesn't recognise a field, it sends that field's label and options (not the rest of the page) to our server to find the matching saved answer. It does not read other websites, your browsing history, or messages.
Technical data. Our hosting providers log basic request data such as IP address, browser type and time of request, which we use for security and fixing problems. We do not use advertising or analytics trackers. The web app stores your sign-in session in your browser's local storage.

2. Why we use it

To run the service: match you with jobs, tailor your application to a job using only facts from your profile, fill in application forms, and track what happened.
To take payments, manage credits and prevent fraud or abuse.
To keep the service secure and to answer your support requests.
To meet our legal obligations.

We process your data because you consent to it when you create an account and use these features, and for the other purposes the DPDP Act allows (such as meeting legal requirements). We do not sell your personal data, and we do not use it for advertising.

3. Automated processing and AI

We use AI models to read your résumé, compare it with job descriptions, suggest how to present your experience, map form fields to your saved answers and sort recruiter replies. We design this so that nothing is added to your application that isn't in the facts you approved, but AI can make mistakes: always review what is prepared before you submit. Automated results never make a decision about you on their own; you decide what to send.

4. Who we share it with

We share personal data only with the following, and only as much as each needs:

Employers and their hiring sites, when you choose to apply for a job: the application you approved goes to that employer.
Service providers who process data on our behalf:
- Supabase: database, file storage and sign-in (data stored in Mumbai, India)
- Cloudflare: website hosting and AI processing
- Modal, Groq and DeepInfra: AI processing
- Google: "Continue with Google" sign-in
- Razorpay: payments
- Our email provider: account and service emails
Authorities, when the law requires it.

Some of these providers process data outside India (for example in the United States). We only transfer data to countries the Government of India has not restricted under the DPDP Act.

5. How long we keep it

We keep your data while your account is open. When you delete your account we delete your profile, résumé files, saved answers, applications and credit history. Razorpay keeps its own payment records for as long as Indian tax and payment laws require. Server logs are kept for a short time and then deleted. To give the one-time welcome credits only once per person, we keep a one-way fingerprint of the email address and phone number on your résumé after deletion. It can't be turned back into your email or number and isn't linked to anything else.

6. Your rights

Under the DPDP Act you can:

ask what personal data we hold about you and who we've shared it with;
correct or update it (you can edit your profile and saved answers in the app);
have it erased, by deleting your account yourself (Account → "Delete my account") or asking us to;
withdraw your consent at any time (this stops the service working for you, but doesn't affect what was done before);
nominate someone to exercise these rights if you die or become unable to; and
complain to us, and if you're not satisfied, to the Data Protection Board of India.

To use any of these rights, contact our Grievance Officer (section 9). We reply within 30 days.

7. Security

Data is encrypted in transit. Each person can read only their own records (enforced by the database itself), and résumé files are kept in private storage. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

8. Age

JobRaah is for people aged 18 or over. We do not knowingly collect data from anyone younger.

9. Contact and Grievance Officer

Grievance Officer: [name]
Email: [contact email]
Address: [postal address]

10. Changes

If we change this policy we will update the date above, and tell you in the app or by email before any change that affects how your data is used.