Privacy Policy

Account data: Name, email address, and password (or Google OAuth token) collected at registration.

Profile data (candidates): Resume file, parsed work history, education, skills, current and expected salary, notice period, work preferences, phone number, LinkedIn/GitHub URLs, and profile photo if provided.

Profile data (recruiters): Company name, company description, Calendly booking URL, and job postings you create.

Usage data: Pages visited, features used, session duration, device type, browser, operating system, and IP address. Collected via cookies and our analytics provider (PostHog).

Communications: Messages sent between candidates and recruiters through the in-platform messaging feature.

We use your data to:

• Operate and improve the platform
• Parse your resume and build your candidate profile
• Calculate AI-based match scores for job applications
• Show your profile to recruiters when you apply to their jobs
• Send transactional emails (application updates, interview invitations)
• Provide customer support
• Detect fraud and enforce our Terms of Service
• Comply with legal obligations under Indian law

We do not use your data for advertising, and we do not sell your personal data to third parties.

Your resume and profile data are processed by AI models to extract structured information (skills, experience, education) and to generate match scores against job descriptions posted by recruiters.

AI scores are shared only with the recruiter who posted the relevant job. Candidates do not see their own score. Scores are advisory and do not constitute automated decision-making that produces legal effects — a human recruiter makes the final hiring decision.

We do not use your personal data to train our AI models. Resume processing is performed by third-party AI providers (currently OpenAI) under data processing agreements that prohibit use of your data for model training.

We share your data only in the following circumstances:

• Recruiters: When you apply to a job, the recruiter sees your profile, resume, and AI match score for that application.
• Service providers: We use Firebase (Google) for authentication and file storage, Neon/Postgres for database hosting, OpenAI for AI processing, and PostHog for analytics. All providers are bound by data processing agreements.
• Legal requirements: We may disclose data if required by law, court order, or government authority in India.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We retain your account and profile data for as long as your account is active. If you delete your account, your profile is removed from recruiter searches within 7 days, and personal data is permanently deleted within 30 days, except where we are required to retain it by law.

Application records (the fact that you applied to a job and the outcome) may be retained for up to 12 months for dispute resolution purposes, after which they are anonymised.

Resume files are deleted from storage immediately upon account deletion.

Under the DPDP Act, 2023, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data. Available directly in Account Settings.
• Data portability: Export your profile data as JSON from Account Settings.
• Withdraw consent: Withdraw consent for data processing at any time, which will result in account deletion.
• Grievance: Lodge a complaint with our Grievance Officer (see below).

To exercise any of these rights, visit Account Settings or contact our Grievance Officer. We will respond within 30 days.

We use a session cookie (HTTP-only, secure) to keep you signed in. This cookie does not track you across other websites and is deleted when you sign out or after 7 days of inactivity.

We use PostHog for product analytics to understand how the platform is used. PostHog data is pseudonymous — it is associated with a randomly generated ID, not your name or email. You can opt out of analytics tracking in Account Settings.

Resume files are stored in Firebase Storage with per-user access controls — only you and recruiters you have applied to can access your files. Profile and application data is stored in a Postgres database with row-level security. All data is transmitted over HTTPS/TLS.

We do not store payment card details. Subscription payments are processed by our payment partner, which is PCI-DSS compliant.

Despite these measures, no system is perfectly secure. In the event of a data breach that is likely to result in risk to your rights, we will notify you within 72 hours as required by law.

The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by a notice on the platform at least 7 days before the change takes effect.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, we have designated a Grievance Officer to address complaints related to data processing:

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act.

For general privacy questions: hello@switchly.in