Privacy Policy

1. Introduction

Trainetic Resume Builder ("Trainetic", "we", "us") provides an online resume-building service. This policy explains what personal data we collect, why we collect it, and how you can control it.

2. Information We Collect

• Account information: name, email address, and authentication data when you sign up (including via Google or GitHub OAuth).
• Resume content: anything you type into the resume editor — work history, education, contact details, and any photo you upload — is stored so you can return to and edit your resumes.
• Payment information: subscription purchases are processed by Razorpay. We do not store your card, UPI, or bank details ourselves — Razorpay handles that directly and shares with us only the confirmation needed to activate your plan.
• Usage & diagnostic data: basic technical logs (error messages, browser/URL context, IP address) used to diagnose bugs, and AI-assist usage counts used to enforce fair-use limits.

3. How We Use Your Information

We use your data to: provide and improve the resume editor and PDF export; process payments and manage your subscription; send you account-related and (if you opt in) product emails; detect, investigate, and prevent abuse or security incidents; and comply with legal obligations.

4. AI Features & Privacy Protections

When you use Trainetic's AI bullet-rewriting, job-match scanning, or ATS audit features, the specific text snippets you submit are transmitted securely via encrypted API endpoints to our enterprise AI service providers (Anthropic, PBC and OpenAI, LLC). This transmission occurs solely to generate real-time suggestions and analysis for you. We enforce zero-training data policies: your resume text, work history, and personal information are never used to train, retrain, or fine-tune public AI foundation models.

5. Sub-Processors & Data Sharing

We do not sell, rent, or monetize your personal data. We share data only with verified third-party sub-processors essential to operating the Service:

• Supabase, Inc.: Encrypted cloud database hosting, user authentication, and data storage with row-level security.
• Razorpay Software Private Limited: PCI-DSS compliant payment processing for access passes and token recharges.
• Anthropic, PBC & OpenAI, LLC: Enterprise API providers for automated resume bullet suggestions and text enhancement under commercial zero-training agreements.

6. Data Retention & Right to Erasure

You maintain full control over your data. Resumes you delete are soft-deleted immediately and permanently purged on a routine schedule thereafter. You have the absolute right to request full account closure, data export, or permanent data erasure at any time by contacting our Privacy and Grievance Officer.

7. Regulatory Compliance (DPDP Act 2023, GDPR & CCPA)

We adhere to applicable data protection frameworks globally, including the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (GDPR, EU), and the California Consumer Privacy Act (CCPA/CPRA, USA). Depending on your jurisdiction, you have the right to access, rectify, restrict processing of, export, or erase your personal data.

8. Technical & Operational Security

We implement robust administrative, technical, and physical safeguards — including end-to-end TLS 1.3 encryption in transit, AES-256 encryption at rest, isolated database row-level security (RLS) policies, and least-privilege credential access controls — to prevent unauthorized data access or disclosure.

9. Grievance Redressal & Privacy Contact

For any data protection inquiries, rights requests, or grievances under the DPDP Act or GDPR, contact our designated Grievance Officer at privacy@traineticresume.com or support@traineticresume.com. We aim to acknowledge and address all inquiries within 30 days.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.