Privacy & Data Protection Policy

1. Ephemeral Audio Processing (Zero-Log Architecture)

The CareerJailbreak desktop application processes incoming system audio (WASAPI loopback) and microphone input strictly in dynamic volatile RAM (random-access memory) using ring buffers.

2. Information We Collect

We collect only the minimal data required to deliver high-performance copilot assistance and authenticate your account:

• Account Information: Name, email address, phone number (collected to identify your account and contact you regarding your job applications; never sold or shared), and hashed authentication tokens via Better Auth.
• Platform Credentials (Optional): If you subscribe to our managed application service, your login credentials and passwords for Naukri and Indeed are encrypted using authenticated encryption, used solely to apply on your behalf, never shared with third parties, and permanently deleted upon request or when your pass expires.
• Billing Information: Payment identifiers processed directly via encrypted PCI-DSS compliant gateways (Razorpay / Stripe). We never store raw credit card numbers.
• Resume Content (Optional): Resumes uploaded to the ATS Resume Builder are stored encrypted in your private candidate vault and can be permanently deleted at any time with one click.
• Technical Diagnostics: Anonymized latency metrics (e.g. sub-0.38s LLM roundtrip times) and crash logs to maintain uptime and performance.

3. Zero AI Model Training on Candidate Data

All inference requests for question analysis, coding blueprints, and behavioral STAR formatting are processed through enterprise API lines governed by strict Zero-Data-Retention policies.

Your interview questions, code submissions, system architecture designs, and resume keywords are never used to train, retrain, or improve foundational AI models.

4. Local Security & DPAPI Token Vault

On the desktop application, session tokens and user preferences are secured using Windows Data Protection API (DPAPI), ensuring that cryptographic keys are tied to your specific Windows user profile and cannot be extracted by unauthorized applications.

5. Candidate Rights (DPDP Act & GDPR)

Under the Digital Personal Data Protection (DPDP) Act 2023 and GDPR, you retain complete sovereignty over your data:

• Right to Access & Export: Download all your interview scorecard summaries and saved question blueprints directly from your dashboard.
• Right to Erasure (Forget Me): Request complete deletion of your account and all associated vault records by contacting privacy@careerjailbreak.com. Deletion is executed within 24 hours.

6. Cookies & Page View Analytics

We use essential HTTP-only cookies solely for secure session authentication and load balancing. We do not use third-party behavioral advertising trackers or sell candidate data to data brokers or prospective employers.

To understand how candidates use the platform, we record first-party analytics about each visit: the pages you open and when, the page you arrived from, your traffic source (including any campaign tag in the link you followed), your device type, browser and operating system, your approximate country and city, how far down each page you scroll, and how long each page is visible to you. We also record when you use a small number of named controls — for example opening checkout, starting a mock interview, or running the resume optimiser.

We assign a pseudonymous random identifier in a first-party cookie (cj_anon). On its own it identifies nobody. When you create or sign in to an account, earlier browsing on that device is linked to your profile so your history stays continuous. We do not use third-party behavioural advertising trackers, and we never sell candidate data to data brokers or to prospective employers.

In strict accordance with the Digital Personal Data Protection (DPDP) Act 2023, no IP address is stored or retained in our analytics database. Country and city are derived at our network edge and only the place name is kept — never the address itself.

How long we keep it. Analytics for visitors who never sign in are automatically deleted after 180 days. If you have an account, your visit history is kept as part of that account record for as long as the account exists, and is deleted along with it. You may request immediate deletion of all browsing logs associated with your account at any time by contacting our privacy team, and we will action it.

7. Contact Our Grievance & Privacy Officer

If you have any questions, privacy concerns, or wish to exercise your data rights, contact our Data Protection Officer at privacy@careerjailbreak.com or visit our Contact Page.