Privacy Policy

This Privacy Policy explains what personal data Pokrit (the "Service") collects, why, and your rights over it. For the purposes of the GDPR, the operator of Pokrit is the data controller. Contact us at tanishpreet.official@gmail.com.

1. Data we collect

• Account data: your email address.
• Résumé data: the résumé file you upload and the text extracted from it (name, work history, education, skills, contact details it contains).
• Preferences: job titles, locations, industries, target country, and your digest delivery time.
• Usage data: basic technical logs needed to operate and secure the Service.

2. How we use your data

• to extract and analyse your résumé and match it against job listings;
• to generate fit explanations, near-miss roles, skill suggestions, and cover letters;
• to send your daily digest and account or billing emails;
• to provide, secure, and improve the Service.

3. Legal bases

We process your data to perform our contract with you (providing the Service), on the basis of your consent (which you give by uploading your résumé), and for our legitimate interests in operating and securing the Service. You may withdraw consent at any time by deleting your data or closing your account.

4. Service providers

We share data only with processors that help us run the Service:

• Anthropic — AI processing of your résumé and job text to produce matches and documents.
• Supabase — database, authentication, and résumé file storage.
• Microsoft Azure — backend processing and scheduled scans.
• Vercel — hosting of the web application.
• Google (Gmail SMTP) — sending transactional and digest emails.
• Paddle.com Market Limited — payment processing as merchant of record.

These providers process data on our behalf under their own terms and security measures. We do not sell your personal data.

5. Payments

Payments are handled by Paddle as the merchant of record. Pokrit never receives or stores your full card details — Paddle collects and processes payment information directly under their privacy policy. We receive only what we need to grant your subscription (e.g. a customer and subscription identifier and billing status).

6. Data retention

We keep your data for as long as your account is active. If you delete your account or ask us to erase your data, we remove your résumé, extracted text, and preferences, except where we must retain limited records to meet legal or accounting obligations.

7. Security

Data is encrypted in transit, access is restricted, and résumé files are stored in access-controlled storage. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a copy (portability) of your personal data, and object to or restrict certain processing. To exercise these rights, email tanishpreet.official@gmail.com. You also have the right to complain to your local data-protection authority.

9. International transfers

Some of our providers are located outside your country, including the United States. Where data is transferred internationally, it is done under appropriate safeguards such as the providers' standard contractual clauses.

10. Cookies

We use only the cookies necessary to keep you signed in and to operate the Service. We do not use advertising or third-party tracking cookies.

11. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy; the "last updated" date above reflects the latest version, and material changes will be notified where appropriate.

13. Contact

For any privacy question or request, email tanishpreet.official@gmail.com.