Privacy

Privacy Policy

Effective date: .

Short version: We store your name, email, and resume content so the site works. We send your resume's structured text to leading third-party AI Models to generate analysis. We don't sell your data. AI Mock Interview audio is kept for up to 90 days then deleted. You can email us to delete your account.

1. Who we are

This privacy notice covers ResumeATS, the service at godlogic.in, operated by Rohini Narsan Nadarge, registered at FLAT NO 710, H3 APARTMENT, IVY NIA, IVY ESTATE, WAGHOLI, Pune, Maharashtra, India - 412207. Contact: privacy@godlogic.in.

2. What we collect, and why

CategoryWhatWhy
Account Your Google name, email address, and avatar URL (received via Google Sign-In). To identify your account, attach your purchases and reports to you, and send transactional emails.
Resume content The text we extract from the PDF/DOCX you upload (the raw uploaded file is parsed in memory and deleted before the response is returned). A structured model of your resume (headings, bullets, dates, skills) and the computed score. To produce the ATS score and the AI suggestions / rewrite you paid for, and to let you reopen the report later.
AI output The AI-generated suggestions, rewritten bullets, summary, skills lists, and interview evaluation reports. To render the paid report and let you reopen / download it.
Mock Interview transcripts Per-turn text transcripts (yours and the AI interviewer's), code submissions you save, and whiteboard sketches if any. To produce the post-session evaluation report and to let you re-open it later.
Mock Interview audio A combined recording of your microphone + the AI voice, stored as a single .webm file at uploads/interviews/<your-id>/<interview-id>.webm. So you can replay the session from the report page. Retained 90 days, then deleted.
Payment metadata Razorpay order ID, payment ID, signature, amount, currency, status, timestamps. Card / UPI / netbanking details never reach us. To verify the payment, unlock the purchased service, and produce a paper trail for accounting.
Technical A session cookie (HttpOnly, SameSite=Lax) that identifies your signed-in session. Standard server access logs (IP, request path, status, user-agent) for security and debugging. To keep you signed in across pages and to investigate abuse or errors.

We do not use advertising trackers, social-media pixels, or third-party analytics that profile you across the web. We do not load any third-party cookies for marketing.

3. AI Models — what gets sent where

To produce AI features, we send the relevant inputs to leading third-party AI Models. The active model is configured server-side and may change over time as the field evolves. For the live voice interview, your microphone audio connects directly from your browser to a third-party realtime voice AI Model; your audio does not pass through our servers in real time. We issue a short-lived access token on our side so the browser can establish that direct connection without exposing any long-lived credentials.

  • The text transcript of your live interview is saved to our database for later analysis and report rendering.
  • Post-session analysis (scoring, strengths/weaknesses, the improvement roadmap) sends the text transcript + any code submissions to the configured text AI Model.
  • We never send your audio file to any AI Model for analysis — only the text transcript is used.
  • The AI Models process this data under their own terms; data may be transmitted outside India for processing. We use commercial-tier API providers that, under their own published terms as of the effective date, do not train their default models on API-submitted data.

4. Who else sees your data

  • Razorpay — for payments. Razorpay sees the amount, your name, and your email, plus the card / UPI details you enter at their widget. We don't see those.
  • Google — when you sign in. Google verifies you and gives us your name, email, and avatar URL.
  • Our hosting provider — standard infrastructure access (server logs, backups). Our hosting provider does not have an analytics or AI relationship with your data.
  • Legal authorities — only if compelled by valid Indian legal process (court order, summons, etc.) and only the specific records demanded.

We do not sell, rent, or trade your data, and we do not share it with employers, recruiters, ad networks, or data brokers.

5. Retention

  • Uploaded resume files (the .pdf/.docx) — deleted in memory at the end of the request; never written to disk.
  • Extracted resume text + scores + AI suggestions — kept while your account exists, so you can re-open reports. Deleted on account deletion.
  • Mock Interview audio — automatically deleted 90 days after the session ends.
  • Mock Interview transcripts + evaluation reports — kept while your account exists; transcripts contain no card data and are deleted on account deletion.
  • Payment records — retained for at least 7 years to meet accounting / tax obligations (Indian Income Tax Act, GST).
  • Server logs — typically rotated after 30 days.

6. Security

  • HTTPS / TLS on every page that handles signed-in or paid content.
  • Uploaded files are served only via auth-gated PHP endpoints; the uploads directory has a directory-level deny rule so the audio can't be downloaded by guessing the URL.
  • Passwords are not stored — sign-in uses Google Identity Services and we receive only a verified ID token.
  • We use prepared statements and parameter binding for every database query.
  • Production secrets (AI keys, Razorpay keys) are stored only in the server's configuration file with restricted file permissions.
  • No system is perfectly secure; you should not upload resumes that contain government-issued identifiers (Aadhaar, PAN, passport numbers) that you wouldn't routinely share in a job application.

7. Your rights

You can:

  • Access — see most of what we hold by re-opening your reports and dashboard. Email us for a full export.
  • Correct — update name/email by changing it in your Google account, or email us to update what we hold.
  • Delete — email privacy@godlogic.in from your account email; we'll delete your account and associated resume / transcript / audio data within 30 days. Payment records may be retained as required by law.
  • Withdraw consent — stop using the Site at any time.
  • Object to processing or complain — contact us first; if unresolved you can complain to the relevant data-protection authority once India's Digital Personal Data Protection Act, 2023, is in force for our category.

8. Children

The Site is intended for adults (18+). We do not knowingly process personal data of children. If you believe a minor's data has been submitted, email us and we'll delete it.

9. International transfers

Some processing happens outside India (notably AI Model inference at our third-party providers' data centres, which are typically located in the United States or the European Union). By using the AI features you consent to the transfer of the inputs described in §3 to those providers for the limited purpose of generating your output.

10. Changes

We may update this policy. The "Effective date" above will change when we do. Significant changes will be highlighted on the Site.

11. Contact

For any privacy question, email privacy@godlogic.in. For everything else, see the Contact page.