Privacy Policy

In short: We're Nitpeak Technologies Private Limited, the company legally responsible for your data on CareerARIA.

CareerARIA is an AI-powered career assistance platform operated by Nitpeak Technologies Private Limited. The platform helps job seekers analyze resumes, generate cover letters, optimize LinkedIn profiles, research companies, and prepare for interviews.

For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), Nitpeak Technologies Private Limited is the Data Fiduciary in respect of all personal data collected through CareerARIA.

When this policy says "we", "our", or "CareerARIA", it refers to Nitpeak Technologies Private Limited. When it says "you" or "user", it refers to anyone who creates an account and uses the platform.

In short: We process your data because you consented at signup and because it's needed to run the service you asked for.

We collect and process your personal data on the following lawful bases under Indian law:

• Consent: By creating an account and agreeing to these policies at signup, you provide free, specific, informed, and unambiguous consent to the collection and processing of your personal data as described in this policy. This is the primary basis under which we process all personal data including your resume content, usage data, and any career content you submit.
• Performance of contract: Processing your data is necessary to deliver the services you have signed up for. Without processing your resume and career content, we cannot provide the core functionality of CareerARIA.

Under the SPDI Rules 2011, your resume text, employment history, and career-related content may constitute sensitive personal data or information (SPDI). We handle all such data with the heightened care required by those rules, including obtaining your explicit prior consent before collection. Legitimate interest is not relied upon as a basis for processing sensitive personal data.

If you set your target market to the United States, we also treat your visa or immigration status (for example, F-1/OPT, CPT, H-1B, Green Card, or Citizen) as sensitive personal data. This field is entirely optional, is only ever asked of US-market accounts, and is used solely to tailor Company Intelligence sponsorship information and Interview Prep content to your situation. You can clear or change this value at any time from your account, and it is never shared with any third party except Google's AI model for the sole purpose of generating your requested results.

You have the right to withdraw your consent at any time by deleting your account. Withdrawal of consent will result in deletion of all your data and termination of your access to the service.

In short: We collect your account details and whatever career content you submit (resumes, job descriptions, chat messages) — nothing more.

3.1 Account Data

When you register, we collect:

• Your full name
• Your email address
• Your password (stored as a one-way encrypted hash; we never store or see your actual password)
• The date and time your account was created
• Your current plan tier (see our Pricing page for all available plans)
• Your target job market — India or the United States — which determines which country-specific content and features you see
• If you selected the United States as your target market: your visa or immigration status, only if you choose to provide it (see Section 2 for details)

If you register or log in using Google Sign-In, Google shares your name, email address, and a unique Google account identifier with us to create or match your account. We do not receive or store your Google password. We request your profile picture as part of Google's standard sign-in permissions but do not save it to your account. Google's handling of your account data is governed by the Google Privacy Policy and Google Terms of Service.

3.2 Content You Submit

The core function of CareerARIA requires you to submit career-related content. We store the following:

3.3 Usage Data

We log each time you use a module, recording which module was used, what action was taken, the number of AI tokens consumed, and the timestamp. This is used to enforce plan quotas and monitor system usage. The content of individual requests is not stored in this log.

3.4 IP Address

We record your IP address when you log in (tied to your account, for session security) and, separately, when you attempt to log in, sign up, reset your password, or join our waitlist (used only to detect and slow down abuse, such as repeated failed attempts). We may also use your IP address, without storing it, to determine your approximate country for currency and tax purposes. Your IP address is never used for advertising, tracking across other websites, or building a marketing profile.

3.5 Data We Do Not Collect

• We do not use third-party analytics (no Google Analytics, no Mixpanel)
• We do not collect device or browser fingerprints
• We do not run any advertising or tracking pixels
• We do not store your card, UPI, net banking, or wallet details. All payments are processed by Razorpay directly.

In short: Your data is used only to run the service and manage your account — never for ads or to train AI.

We use the data you provide for the following purposes only. Under the DPDP Act 2023, we process your data only for the specific purposes for which consent was given (purpose limitation):

• To deliver the service. Your resume, job descriptions, and other content are sent to our AI engine to produce the results you request.
• To manage your account. Your email and name are used for login, account identification, and transactional emails (email verification, password reset).
• To enforce plan limits. Usage logs track how many times you have used each module in the current billing period.
• To save your history. Analyses, cover letters, and chat sessions are saved so you can review them later within your account.
• To send administrative emails. We may send product updates or important service announcements. These are not marketing emails from advertisers.

We do not use your data for advertising. We do not build profiles to sell or share with any third party. We do not use your submitted content to train any AI model. We do not process your data for any purpose beyond what is described in this policy (data minimisation and purpose limitation as required by the DPDP Act 2023).

In short: Your submitted content is sent to Google's AI model to generate results; Razorpay handles payments. No one else touches your data.

5.1 AI Processing

CareerARIA uses Google's AI model to generate results across all modules. When you use any feature (resume analysis, cover letters, interview prep, or chat), the career content you type or upload is sent to Google's AI model to produce your results. Your account details (email, password, account ID) are never sent to Google — only the career content you actively submit is processed.

By creating an account and agreeing to this policy, you explicitly consent to this processing, as required under the SPDI Rules 2011, and to the transfer of that content outside India for the duration of each request — your stored data (account, resumes, history) otherwise remains hosted in India. Google does not use this data to train its models by default. Google's privacy terms are available at policies.google.com/privacy.

5.2 Additional Safety Checks for US-Market Accounts

If your target market is set to the United States, AI-generated Interview Prep content passes through an additional automated content-safety check before it is shown to you. This check screens out questions or content that improperly probes specific immigration filing dates or other sensitive visa details. This is an automated process and does not involve any additional data collection beyond what is described in this policy.

5.3 Payments and Billing

Payments are processed by Razorpay, and invoices are issued by Nitpeak Technologies Private Limited (GSTIN: 27AALCN8746L1ZM). All service obligations, refunds, and dispute resolution are the sole responsibility of Nitpeak Technologies Private Limited. We do not store your card, UPI, or banking details.

5.4 No Other Third-Party Data Sharing

Apart from Google (for AI processing) and Razorpay (for payments), we do not share your data with any other third party. We do not sell, rent, or trade your personal information. No data is shared with advertisers, data brokers, or any other service provider not described in this policy.

5.5 PDF Export

Cover letter and resume PDF exports are generated entirely in your browser. No data is sent to any external server for this operation.

In short: Your data lives on secure servers located in India and never leaves the country except briefly during AI processing.

6.1 Where Data Is Stored

All user data is stored in a database hosted on secure servers located in India. Resume files are stored in a private directory that is not publicly accessible and are protected against direct access. Your data does not leave India except when actively submitted for AI processing (see Section 5.1).

6.2 Security Measures

We implement industry-standard technical and organisational security measures as required under Rule 8 of the SPDI Rules 2011 and Section 43A of the Information Technology Act 2000, covering areas including password protection, secure session management, access controls, and protection of stored files.

We cannot recover or read your password once set. Specific implementation details of our security controls are not disclosed publicly in accordance with security best practices.

6.3 Data at Rest

All stored data is encrypted at rest at the infrastructure level, in accordance with our hosting provider's standard security practices. We do not apply an additional application-level encryption layer on top of this.

In short: We keep your data as long as your account is active and permanently delete it the moment you delete your account.

We retain your data for as long as your account is active. There is no automatic expiry on stored resumes, analyses, cover letters, or chat history.

Usage log entries (which record module usage for quota enforcement) may be automatically purged after a configurable number of days at the system administrator's discretion.

If you delete your account, all data associated with your account is permanently deleted. This includes your resumes, analyses, cover letters, LinkedIn data, company searches, interview sessions, chat history, and usage logs. This deletion is immediate and cannot be undone.

In the event of account suspension for violation of our Terms of Service, your data is retained for 30 days before permanent deletion, to allow for any dispute resolution.

In short: You can view, correct, export, or permanently delete your data at any time from your account.

Under the Digital Personal Data Protection Act 2023 and the SPDI Rules 2011, you have the following rights as a Data Principal:

Right of Access

You have the right to know what personal data we hold about you and how it is being processed. You can view all your stored content (resumes, cover letters, analyses, chat history) directly within your account. For a summary of all data associated with your account, contact us at support@careeraria.com.

Right to Correction

You can update your name and email address from account settings at any time. If you believe any other data we hold is inaccurate or incomplete, contact us and we will correct it.

Right to Erasure

You can delete specific content (individual resumes, cover letters, chat history) from within your account at any time. You can also permanently delete your entire account and all associated data from Settings. Upon confirmation, all your data is immediately and permanently erased from our database and file storage. This right may be exercised at any time without restriction.

Right to Withdraw Consent

You may withdraw your consent to data processing at any time by deleting your account. Withdrawal of consent means we can no longer provide the service to you, and all your data will be erased.

Right to Nominate

Under the DPDP Act 2023, you have the right to nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. To register a nomination, contact us at support@careeraria.com.

Right to Grievance Redressal

If you believe your data rights have not been respected, you may raise a grievance with our designated Grievance Officer. See Section 15 for contact details. We will respond to all grievances within 30 days of receipt.

Export Your Content

Cover letters can be downloaded as plain text or PDF at any time. Resumes can be downloaded in formatted templates. For a full export of all data associated with your account, contact us and we will assist within 15 business days.

In short: We use one login cookie — no tracking, no ads, no third-party cookies.

CareerARIA uses a single session cookie to keep you logged in. This cookie:

• Is active for the duration of your logged-in session and expires on logout or after a period of inactivity
• Is secured with appropriate flags to prevent unauthorised access
• Contains only a session identifier; no personal data is stored in the cookie itself

We do not use advertising cookies, tracking cookies, or any third-party cookies. There is no cookie consent banner because we only use one strictly necessary functional cookie. This cookie is required for the service to operate and cannot be disabled while you are logged in.

In short: Our admins can see account info like your plan and email — never the content of your resumes or chats.

Designated administrators at Nitpeak Technologies Private Limited have restricted access to account-level information (such as name, email, plan, and status) needed to manage the service and support users. Administrators cannot view the content of your resumes, cover letters, chat messages, LinkedIn data, or interview sessions through the admin interface, and cannot read or recover your password.

All administrator actions are logged with a timestamp, the admin's ID, and what action was taken, in compliance with audit requirements under the IT Act 2000.

In short: We only email you for account/service reasons — never marketing.

We send the following types of emails:

• Email verification: Sent when you register. Contains a one-time link valid for 24 hours to activate your account.
• Password reset: Sent when you request a password reset from the login page.
• Email change confirmation: Sent when you update your email address in settings.
• Service announcements: Occasional emails about important product changes, downtime notices, or policy updates.

We do not send promotional or marketing emails to sell third-party products or services. All emails are sent from our own domain. A log of sent emails (recipient, subject, status) is retained for troubleshooting purposes.

In short: CareerARIA is for adults 18+ only.

CareerARIA is intended for use by adults who are actively seeking employment or advancing their careers. Under the Indian Contract Act 1872, a valid contract requires the parties to be of the age of majority, which is 18 years in India.

By creating an account, you confirm that you are at least 18 years of age. We do not knowingly collect personal data from persons under 18. If we become aware that an account has been created by a minor, we will delete the account and all associated data promptly.

If you believe a minor has created an account, please contact our Grievance Officer immediately.

In short: If a data breach ever happens, we're legally required to notify regulators and you quickly.

In the event of a personal data breach that is likely to result in harm to you, we will:

• Take immediate steps to contain and investigate the breach
• Report the breach to CERT-In within 6 hours of becoming aware of it, as mandated by the CERT-In Directions 2022
• Notify the Data Protection Board of India without delay as required under Section 8(6) of the DPDP Act 2023
• Notify affected users as soon as reasonably practicable after containing the breach, with details of the nature of the breach, data involved, and steps being taken

Breach notifications to users will be sent to the email address registered to your account.

In short: If we materially change this policy, we'll tell you by email before it takes effect.

We may update this privacy policy as the product evolves or as Indian data protection law is updated (including when the DPDP Rules are finalised and notified). When we make material changes, we will update the effective date at the top of this page and notify you by email or through a notice in the application.

Continued use of CareerARIA after a policy update constitutes your acceptance of the revised policy. If you do not accept the revised policy, you may delete your account.

In short: Have a complaint about your data? Here's exactly who to contact and how fast we'll respond.

In accordance with Rule 5(9) of the Information Technology (SPDI) Rules 2011 and the Digital Personal Data Protection Act 2023, Nitpeak Technologies Private Limited has designated a Grievance Officer to address complaints and concerns regarding the processing of your personal data.

If you have a complaint about how your data has been handled, or if you wish to exercise any of your data rights listed in Section 8, you may contact the Grievance Officer. All grievances will be acknowledged within 5 business days and resolved within 30 days of receipt.

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India, which has been constituted under the DPDP Act 2023.

In short: How to reach us for privacy questions.

For general questions about this policy, data requests, or to request deletion of your data, contact us at: