Privacy Policy, Data Processing Terms & Enterprise Terms of Service

Last Updated: 27 May 2026

1. Regulatory Compliance Commitment

We are committed to responsible data processing and comply with:

• The Information Technology Act, 2000
• The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Digital Personal Data Protection Act, 2023 (DPDP Act)

We apply internationally recognized data protection and security principles including purpose limitation, data minimization, access control, and accountability.

2. Scope of Services

The Service provides AI-assisted resume parsing, job description analysis, candidate ranking, and related analytical outputs intended to support recruitment workflows.

The Service is designed as a decision-support system and does not replace human judgment.

3. Roles & Data Processing Structure (Enterprise Customers)

Where a Customer uploads personal data relating to candidates, employees, or third parties:

• The Customer acts as Data Controller / Data Fiduciary.
• The Company acts as Data Processor, processing data solely on documented instructions for the purpose of delivering the Service.

We do not determine independent purposes for enterprise customer data.

4. Categories of Data Processed

We may process:

• Account details (name, email, role)
• Resume content and job descriptions
• AI-generated rankings and analytical outputs
• Usage logs and system interaction data
• Technical metadata (IP address, browser type, timestamps)
• Security logs

We do not intentionally collect sensitive personal data except where included within uploaded resumes.

5. Purpose Limitation

Enterprise data is processed strictly for:

• Resume analysis and matching
• System performance optimization
• Security and fraud prevention
• Legal compliance

We do not sell, rent, or monetize personal data.

Identifiable enterprise data is not used to train public AI models.

Anonymized and aggregated statistical insights may be used for system improvement.

6. Security & Technical Safeguards

We implement reasonable and industry-aligned technical and organizational measures including:

• TLS encryption for all data in transit
• Encryption at rest for stored data
• Secure credential hashing using Argon2
• Role-based access control
• Multi-layer authentication controls
• Account lockout and brute-force protection
• Infrastructure-level firewall protections
• Regular patching and vulnerability updates
• Activity logging and monitoring

Access to production systems is restricted to authorized personnel only.

7. Sub-Processors

We may engage vetted sub-processors (e.g., cloud hosting providers and AI API providers) to support the Service.

All sub-processors are contractually bound by confidentiality and security obligations.

A list of sub-processors may be provided upon written request.

8. Data Retention & Deletion

Unless otherwise agreed in writing:

• Data is retained while the Customer account remains active.
• Upon termination, data will be deleted within 30 days.
• Encrypted backups may retain residual data for up to 90 days.

Upon request, we may provide written confirmation of deletion.

9. Data Subject Rights Assistance

Where required under applicable law, we will provide reasonable assistance to enterprise customers in responding to:

• Access requests
• Rectification requests
• Erasure requests
• Data portability requests

Customers remain responsible for fulfilling legal obligations toward their data subjects.

10. AI Transparency & Responsible Use

The Service utilizes automated and machine learning models to generate analytical outputs.

Customers acknowledge:

• Outputs are probabilistic and not determinative.
• The Service does not guarantee hiring outcomes.
• Human oversight is required for employment decisions.

We do not intentionally design the system to discriminate based on protected characteristics such as race, religion, caste, gender, disability, or age.

Customers agree to use the Service in compliance with applicable employment, labor, and anti-discrimination laws.

11. Confidentiality

Each party agrees to maintain the confidentiality of non-public information disclosed in connection with the Service.

Confidential information shall not be disclosed to third parties except:

• To authorized personnel under confidentiality obligations
• Where required by law

12. Intellectual Property

All platform software, algorithms, documentation, branding, and system architecture remain the exclusive intellectual property of the Proprietor.

Customers retain ownership of uploaded content.

Customers grant the Company a limited, non-exclusive license to process such content solely for delivering the Service.

13. Acceptable Use

Customers shall not:

• Use the Service for unlawful discriminatory hiring practices
• Upload unlawful, infringing, or malicious content
• Attempt unauthorized access or reverse engineering
• Interfere with system security or performance

Violation may result in suspension or termination.

14. Fees & Commercial Terms

Enterprise fees, if applicable, shall be governed by a separate commercial agreement or order form.

Unless otherwise agreed:

• Fees are payable in advance.
• Payments are non-refundable except as required by law.

15. Disclaimer of Warranties

The Service is provided on an “AS IS” and “AS AVAILABLE” basis.

To the fullest extent permitted by law, we disclaim all warranties including:

• Accuracy or completeness of outputs
• Fitness for a particular purpose
• Uninterrupted or error-free operation

16. Limitation of Liability

To the maximum extent permitted under applicable law:

• We shall not be liable for employment decisions, hiring outcomes, regulatory penalties, or misuse of outputs.
• We shall not be liable for indirect, incidental, special, consequential, or punitive damages.

Total aggregate liability shall not exceed the total fees paid by the Customer in the preceding twelve (12) months.

If no fees were paid, liability shall not exceed INR 10,000.

17. Indemnification

The Customer agrees to indemnify and hold harmless the Proprietor, employees, contractors, and affiliates against claims, damages, penalties, or legal costs arising from:

• Customer misuse of the Service
• Violation of law
• Uploaded content
• Hiring decisions made using the Service

18. Sole Proprietorship Disclosure

Resumate is operated as a sole proprietorship.

All contractual obligations are undertaken by the Proprietor in their business capacity. No employee, contractor, or advisor shall have independent personal liability arising from the Service.

19. Dispute Resolution

Any dispute arising under this Agreement shall be resolved through binding arbitration under the Arbitration and Conciliation Act, 1996.

• Seat of Arbitration: Pune, Maharashtra
• Language: English
• Arbitrator: Sole arbitrator appointed mutually

Courts in Pune shall have jurisdiction for interim relief and enforcement.

20. Force Majeure

We shall not be liable for delay or failure caused by events beyond reasonable control, including natural disasters, cyber incidents, infrastructure outages, or governmental actions.

21. Amendments

We may update this Agreement from time to time. Continued use of the Service constitutes acceptance of the revised terms.