Privacy Policy

The data controller responsible for processing your personal data is:

Munira Nandalpad
Brühlstr 15, 71034 Böblingen, Germany
Email: munira.nandalpad@job-lens.de

India DPDP Act notice:Job-Lens processes personal data of Indian data principals (users) as a “Data Fiduciary” under the Digital Personal Data Protection Act, 2023. You have the rights set out in Section 6 below, including the right to erasure of your data.

We process your personal data only to the extent necessary to provide our service.

a) Account and Authentication

When you register, we collect your email address and a password (stored encrypted). Legal basis: GDPR Art. 6(1)(b) — contract performance; DPDP Act S. 4 — lawful purpose.

b) CV Text (session only by default)

When you upload or paste a CV, the text content is held only for the duration of your browser session (sessionStorage) by default and transmitted to our AI processing partners (Anthropic) for analysis. The raw file is never stored on our servers unless you opt in to saved-CV storage — see (g) below. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

c) Kira AI Career Profile

If you consent to Kira's AI analysis, we extract structured career data (job title, skills, years of experience, target roles) and store it permanently in your account in our database (Supabase, EU-West region, Ireland). This data is used solely for personalised job recommendations and CV optimisation within the platform. Legal basis: GDPR Art. 6(1)(a) — consent; DPDP Act S. 6 — consent. You may delete this data at any time under Settings → Kira AI Profile Data.

d) Credits Usage Log

We store which AI actions you have performed (e.g., ATS scan, CV tailoring, cover letter) to manage the credits system. This log does not contain CV content. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

e) Payment Data

Payments are handled by Razorpay. We receive only a transaction confirmation and your contact details as provided to Razorpay. Card or bank details are never held by us. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

f) Voice Synthesis (Kira voice)

When you use Kira's voice feature, the text of Kira's response is sent to OpenAI's Text-to-Speech API to generate audio. This text is not linked to your personal identity. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

g) Saved CV (optional)

You may optionally save your full CV text permanently under Account → Saved CV so it auto-fills across Career Scan, CV Builder, Cover Letter, Job Case and other features instead of re-uploading each time. This only happens after your explicit consent (a checkbox shown at upload time), which is timestamped. The text is encrypted at the application level (AES-256-GCM) before it is stored — the encryption key never lives in the database. Legal basis: GDPR Art. 6(1)(a) / DPDP Act S. 6 — consent. You can withdraw consent at any time by removing the saved CV under Account → Saved CV → Remove, which deletes both the text and the consent record immediately.

We use the following service providers to operate Job-Lens India:

Data transfers to providers outside the EU/EEA are based on EU Standard Contractual Clauses (GDPR Art. 46). Data transfers to US providers are additionally covered by their Data Privacy Framework certifications where applicable.

Account data and the credits usage log are retained for the duration of your active account. Upon account deletion or on request, your data is fully deleted within 30 days, unless legal retention obligations apply. Your Kira AI career profile can be deleted at any time from your account settings without deleting your full account.

We use only technically necessary cookies (session management by Supabase). No analytics or advertising cookies are used. No third-party tracking occurs.

Under GDPR and the DPDP Act 2023, you have the following rights regarding your personal data:

To exercise your rights or export your data, use the self-service option in Account Settings → Export my data. You may also contact us at: privacy@job-lens.de. Under the DPDP Act 2023, you may also lodge a complaint with the Data Protection Board of India once it is operational.

If you have a complaint about how we process your personal data, you may raise a grievance:

1. Email privacy@job-lens.de with subject line "DPDP Grievance".
2. We will acknowledge receipt within 48 hours.
3. We will resolve or respond to your grievance within 30 days.
4. If unresolved, you may escalate your complaint to the Data Protection Board of India once it is operational.

Data Fiduciary: Munira Nandalpad, Job-Lens AI, Böblingen, Germany.

Job-Lens is intended for users who are 18 years of age or older. We do not knowingly collect personal data from persons under 18. If you believe a minor has registered, please contact us immediately at privacy@job-lens.de and we will delete the data promptly.

All data transmissions are encrypted via HTTPS/TLS. Passwords are hashed with bcrypt by Supabase and never stored in plain text. Your Kira AI career profile is stored with row-level security — only you can access your own data. Access to production data is restricted to authorised personnel.

We may update this policy as the service evolves. The current version is always available on this page. For material changes, registered users will be notified by email.