Consent Notice
Before you give consent, this notice tells you exactly what personal data we collect, why we collect it, how long we keep it, and how to exercise your rights — as required under Rule 3 of the Digital Personal Data Protection Act, 2023.
1. Data We Collect, Why, and How Long
The table below lists every category of personal data we process, its specific purpose, and how long we retain it.
| Category | Data Collected | Purpose | Retention |
|---|---|---|---|
| Account & Identity | Name, email address, hashed password, profile photo (if via Google OAuth) | Create and manage your account, authenticate logins | Until account deletion + 30 days |
| Resume Content | Work history, education, skills, projects, languages, job descriptions | Generate, store, and export resumes; run ATS scoring; provide AI-powered suggestions | Until account deletion + 30 days |
| AI Processing | Resume content and job descriptions sent to OpenAI, Google Gemini, Groq, SambaNova, OpenRouter | Generate AI resume suggestions and ATS compatibility scores | Not stored by ATS Resume Craft after processing; subject to each provider's retention policy |
| Usage & Analytics | Pages visited, features used, time spent, ATS scan queries | Improve product features, detect abuse, ensure security | Anonymised data retained indefinitely; identifiable data deleted with account |
| Payment | Order IDs, subscription status, plan tier (card details handled by Razorpay — never stored by us) | Process payments, manage subscriptions | 7 years (financial regulation compliance) |
| Cookies & Security | Session tokens, CSRF tokens, preference cookies | Keep you logged in, protect against attacks, remember settings | Session cookies: until browser close; persistent cookies: up to 1 year |
2. Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
Access
Request a copy of all personal data we hold about you
Correction
Fix inaccurate or incomplete personal data
Erasure
Delete your account and all associated personal data
Portability
Export your data in a machine-readable format (JSON)
Exercise these rights from Settings → Privacy in your dashboard, or email atsresumecraft@gmail.com. We respond within 30 days.
3. Withdrawing Consent
You may withdraw your consent at any time. Withdrawal is as easy as giving consent:
- Go to Settings → Privacy in your dashboard and toggle off data processing consent.
- Or email atsresumecraft@gmail.com with subject "Withdraw Consent".
- You may also delete your account entirely, which erases all personal data within 30 days.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. Filing a Grievance
If you have a grievance about how your personal data is processed, contact our Grievance Officer:
Akshay Ramteke
Grievance Officer, ATS Resume Craft
atsresumecraft@gmail.comWe acknowledge within 48 hours and resolve within 30 days of receiving your grievance. You may also use our online grievance form.
5. Complaint to Data Protection Board of India
If your grievance is not resolved to your satisfaction, you have the right to file a complaint with the Data Protection Board of India, established under Section 18 of the Digital Personal Data Protection Act, 2023.
The Board will hear your complaint and may direct us to take corrective action, including compensation. Details on how to file a complaint will be published by the Board on its official website once constituted.