Privacy Policy

The data controller responsible for processing your personal data is:

Munira Nandalpad
Brühlstr 15, 71034 Böblingen, Germany
Email: munira.nandalpad@job-lens.de

India DPDP Act notice:Job-Lens processes personal data of Indian data principals (users) as a “Data Fiduciary” under the Digital Personal Data Protection Act, 2023. You have the rights set out in Section 6 below, including the right to erasure of your data.

We process your personal data only to the extent necessary to provide our service.

a) Account and Authentication

When you register, we collect your email address and a password (stored encrypted). Legal basis: GDPR Art. 6(1)(b) — contract performance; DPDP Act S. 4 — lawful purpose.

b) CV Text (session only)

When you upload or paste a CV, the text content is held only for the duration of your browser session (sessionStorage) and transmitted to our AI processing partners (Anthropic) for analysis. The raw file is never stored on our servers. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

c) Kira AI Career Profile

If you consent to Kira's AI analysis, we extract structured career data (job title, skills, years of experience, target roles) and store it permanently in your account in our database (Supabase, EU-West region, Ireland). This data is used solely for personalised job recommendations and CV optimisation within the platform. Legal basis: GDPR Art. 6(1)(a) — consent; DPDP Act S. 6 — consent. You may delete this data at any time under Settings → Kira AI Profile Data.

d) Credits Usage Log

We store which AI actions you have performed (e.g., ATS scan, CV tailoring, cover letter) to manage the credits system. This log does not contain CV content. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

e) Payment Data

Payments are handled by Razorpay. We receive only a transaction confirmation and your contact details as provided to Razorpay. Card or bank details are never held by us. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

f) Voice Synthesis (Kira voice)

When you use Kira's voice feature, the text of Kira's response is sent to OpenAI's Text-to-Speech API to generate audio. This text is not linked to your personal identity. Legal basis: GDPR Art. 6(1)(b); DPDP Act S. 4.

We use the following service providers to operate Job-Lens India:

Data transfers to providers outside the EU/EEA are based on EU Standard Contractual Clauses (GDPR Art. 46). Data transfers to US providers are additionally covered by their Data Privacy Framework certifications where applicable.

Account data and the credits usage log are retained for the duration of your active account. Upon account deletion or on request, your data is fully deleted within 30 days, unless legal retention obligations apply. Your Kira AI career profile can be deleted at any time from your account settings without deleting your full account.

We use only technically necessary cookies (session management by Supabase). No analytics or advertising cookies are used. No third-party tracking occurs.

Under GDPR and the DPDP Act 2023, you have the following rights regarding your personal data:

To exercise your rights, contact us at: munira.nandalpad@job-lens.de. Under the DPDP Act 2023, you may also lodge a complaint with the Data Protection Board of India once it is operational.

All data transmissions are encrypted via HTTPS/TLS. Passwords are hashed with bcrypt by Supabase and never stored in plain text. Your Kira AI career profile is stored with row-level security — only you can access your own data. Access to production data is restricted to authorised personnel.

We may update this policy as the service evolves. The current version is always available on this page. For material changes, registered users will be notified by email.