Privacy Policy

1. Who we are

JinxApply is operated by Mindweave Technologies Private Limited(“we”, “us”, “Mindweave”), a company incorporated in India. We are the Data Fiduciary for personal data you provide while using jinxapply.com (the “Service”).

2. Personal data we collect

• Account data: name, email address, profile photo (if provided via Google OAuth).
• Resume content: work history, education, skills, certifications, contact details and any other information you upload in your resume.
• Job-search preferences: target roles, locations, expected compensation, employment type.
• Application history: jobs we match you with and applications submitted on your behalf, including submission timestamps and outcomes when known.
• Payment data: billing email, subscription tier, payment status. Card numbers and bank credentials are processed by Razorpay and never stored on JinxApply servers.
• Usage data: pages visited, features used, device type, IP address, approximate geographic location derived from IP. Collected via Google Analytics 4 and Microsoft Clarity.

3. Purpose and lawful basis

We process personal data only for the following enumerated purposes:

• Service delivery (contract): resume parsing, job matching, auto-applying to jobs you have explicitly authorised.
• Account management (contract): authentication, billing, support.
• Communications (consent): match notifications, account alerts, product updates. You may opt out of non-transactional emails at any time.
• Service improvement (legitimate use): aggregate, de-identified analytics to improve matching quality and platform reliability.
• Compliance (legal obligation): tax, fraud detection, response to lawful government requests.

4. Who we share data with

We do not sell personal data. We share it only with the following Data Processors, under contractual confidentiality:

• Supabase (database hosting, Singapore region) — stores account and resume data.
• Vercel (frontend hosting, global) — serves the web application.
• Anthropic (AI processing, USA) — performs resume parsing and skill extraction on transient payloads; payloads are not retained for training per Anthropic's API terms.
• Razorpay (payments, India) — processes subscription billing.
• SendGrid (email delivery, USA) — sends transactional and notification email.
• Google Analytics 4 / Microsoft Clarity — anonymised usage analytics.
• Greenhouse / Lever / Ashby / Workable — employers' Applicant Tracking Systems that receive your application on submission.

Cross-border transfers occur to the United States and Singapore. We rely on the recipient's data protection commitments and, where applicable, on the Government of India's notified country list under section 16 of the DPDP Act.

5. How long we keep your data

• Account and resume data: until you delete your account, then purged within 30 days.
• Payment records: retained for 7 years to meet Indian tax and accounting law.
• Application submission logs: 18 months, then anonymised.
• Backup snapshots: 30-day rolling window.

6. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Erase your personal data (subject to legal retention obligations on payment records).
• Withdraw consent for processing where consent is the lawful basis.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Grievance redressal via our Grievance Officer (see section 9).

Most rights can be exercised directly from the Settings page in your account. For anything else, email privacy@jinxapply.com. We respond within 30 days.

7. Security

We use industry-standard safeguards including TLS 1.2+ encryption in transit, AES-256 encryption at rest (via Supabase), role-based access control with least-privilege principles, multi-factor authentication on administrative accounts, and short-lived signed URLs for resume downloads. No system is perfectly secure; you accept residual risk inherent to internet services.

8. Cookies and trackers

We use first-party cookies for authentication and session management (Supabase Auth) and third-party cookies for analytics (Google Analytics 4, Microsoft Clarity). Analytics cookies are anonymised; we do not use advertising or remarketing trackers. You can disable cookies in your browser, but authentication will stop working.

9. Grievance Officer

In compliance with section 13 of the DPDP Act and rule 5(9) of the IT Rules, 2011:

10. Breach notification

In the event of a personal data breach likely to result in risk to your rights, we will notify the Data Protection Board of India and affected Data Principals without undue delay, in accordance with section 8(6) of the DPDP Act.

11. Children

JinxApply is not directed at individuals under 18. We do not knowingly collect data from children. If we learn we have collected such data, we will delete it.

12. Changes

We will notify registered users by email of material changes to this policy at least 30 days before they take effect.

13. Contact

General privacy queries: privacy@jinxapply.com
Grievances: grievance@jinxapply.com
See also: Terms of Service · Refund Policy