Privacy Policy

Compliant with India's Digital Personal Data Protection Act, 2023 (DPDP Act) & Information Technology Act, 2000.

Effective Date: August 4, 2026 | Last Updated: September 15, 2026

Data Fiduciary Commitment

TryCareerLens Platform ("we", "our", or "us") operates as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). We are committed to protecting the privacy, confidentiality, and security of your personal data collected via trycareerlens.com and its subdomains.

1. Personal Data We Collect

In accordance with Section 6 of the DPDP Act 2023, we collect personal data strictly necessary to provide AI career mentorship, candidate skill validation, and recruitment matching services:

Identity & Contact Data: Full name, email address, phone number, city, and state of residence.
Resume & Education Profile: Uploaded PDF/Word resume files, extracted employment history, degree tier, and skill declarations.
GitHub Repository Data: Public & Private repository metadata, primary programming language frequencies, code commit structures, and deployment configuration files (fetched via GitHub OAuth).
Assessment & AI Interview Logs: Scenario responses, technical quiz scores, code comprehension metrics, integrity telemetry, and audio/text interview transcripts.
Transactional Data: Payment transaction reference numbers, order IDs, and subscription tiers (processed securely via Razorpay; we do not store full credit card numbers or banking passwords).

2. Purpose of Data Processing & Hire Success Analytics

Your personal data is processed solely for lawful purposes specified at the time of collection:

Synthesizing claimed vs. validated technical skills using AI models (Anthropic Claude).
Providing personalized, real-time AI Chat Mentor coaching and technical career roadmaps.
Enabling approved recruiters to discover verified software engineering talent based on empirical assessment scores.
Candidate Hire Success Analytics & Assessment Quality Optimization: We collect and analyze anonymized placement and hiring outcome metrics (such as engineering depth score correlation, time-to-hire, and interview feedback). This data is aggregated to continuously train and optimize our AI assessment engine, improve matching accuracy, and elevate assessment standards across the platform.
Preventing unauthorized platform access, fraud, or assessment integrity violations.

3. Data Principal Rights & Account Closure (Under DPDP Act 2023)

As a Data Principal under Indian law, you possess the following statutory rights:

Right to Access: View all stored personal profile details and assessment summaries anytime via your candidate dashboard.
Right to Correction & Complete Erasure (Account Closure): Request immediate correction of inaccurate profile data or execute complete account erasure via your account settings (`/account`). Account closure permanently deletes physical resume files from disk, anonymizes identity records, wipes AI transcripts, social links, and destroys all PII in full compliance with Section 12 of the DPDP Act 2023.
Right to Withdraw Consent: Each optional purpose (resume AI, GitHub analysis, assessments, voice audio, embeddings, recruiter discovery, mentor chat, autopsy, analytics) can be switched off from Account → Privacy. That is the same control as grant. Account-necessary processing ends only when you close the account.
Age: TryCareerLens does not onboard data principals under 18. We do not offer parental consent as an alternative.
Right to Grievance Redressal: Seek resolution for any privacy concerns through our designated Grievance Officer within 30 days.

4. Third-Party Data Processors & Security Standards

We share personal data only with the processors needed for a stated purpose. Infrastructure encryption at rest is as provided by those hosts; we require TLS in transit. Named processors:

Anthropic PBCAI for resume parse, assessments, mentor chat, autopsy, live interviewer, and batch evaluation.

Voyage AISkill embeddings for recruiter matching. Name, photo, pincode, and college-as-identity are not embedded.

Razorpay Software Pvt. Ltd.INR payments. PCI-DSS Level 1. We do not store card numbers.

Cloudflare R2Private object storage for resumes, avatars, and interview audio. Access is presigned, not a permanent public URL.

RailwayApplication and Postgres hosting (currently United States). SOC 2 Type II as published by Railway.

GitHub, Inc.OAuth for repository metadata you authorize. Access tokens are not stored in profile JSON.

Sarvam AI / ElevenLabsSpeech-to-text and text-to-speech for the voice interview.

ResendTransactional email (OTP, credentials).

Google Analytics (GA4)Optional product analytics, only after you accept analytics consent.

Groq / OpenRouterOptional alternate LLM routing when those keys are configured.

5. Statutory Grievance Redressal Officer

In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and Section 13 of the DPDP Act 2023, contact our Grievance Officer for privacy inquiries:

Grievance Officer: HS Hariprasad

Designation: CEO, TryCareerLens

Email: support@trycareerlens.com

Address: Will be mentioned

Response SLA: Within 30 days of receiving valid written grievance.

6. Cross-Border Data Transfer Disclosure

Your personal data is stored on servers located in the United States of America, hosted by Railway Corp. TryCareerLens is registered and operated in India; however, our cloud infrastructure is currently hosted outside India.

Under Section 16(1) of India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Central Government may restrict transfer of personal data to certain countries or territories. As of the Effective Date of this Policy (August 4, 2026), no such restricted country notification has been issued by the Government of India, making cross-border transfer to the United States currently permissible.

Same Standards Apply: Your data processed on foreign servers is subject to the exact same purpose limitations, consent requirements, retention windows, and security standards described in this Privacy Policy.
Infrastructure Security: Railway Corp. maintains SOC 2 Type II certification and enterprise-grade security controls on its US-based infrastructure.
Data Principal Rights Unaffected: Your rights to access, correction, erasure, and grievance redressal remain fully enforceable regardless of the physical server location.
Future Compliance: TryCareerLens will monitor DPDP Act notifications and comply with any data localization mandates issued by the Central Government within the prescribed timeline.

Note: If at any time the Government of India restricts data transfer to the United States, TryCareerLens commits to migrating infrastructure to an India-based or compliant data center within the regulatory timeline and notifying all users.