Privacy Policy

1. Introduction

This Privacy Policy applies to CVPRO, an AI-Powered Hiring Intelligence Platform operated by Talpro India Pvt Ltd, registered in Hyderabad, India.

We are committed to protecting your personal data and respecting your privacy. This policy describes:

• What personal data we collect
• How we use your data
• How we process data using AI
• How we protect your data
• Your rights under DPDPA
• How to contact us

2. Information We Collect

We collect personal data that you voluntarily provide to us when using CVPRO. This includes:

Personal Information

• Name and Email Address: Provided during account registration
• Phone Number: For account verification and communication
• Company Details: Organization name and role information

Candidate Data

• Resume/CV: Document files uploaded for analysis
• LinkedIn URL: Professional profile links shared for screening
• Interview Responses: Answers and responses collected during hiring assessments
• Contact Information: Phone numbers and email addresses of candidates

Technical Data

• Usage Analytics: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, device identifiers
• IP Address: For security, fraud prevention, and service improvement

Important: We do not collect sensitive personal data (as defined under DPDPA) unless explicitly necessary and with your clear consent. All data collection is transparent and limited to what is required for CVPRO's core functionality.

3. How We Use Your Information

We use your personal data for the following purposes:

Service Delivery

• Creating and maintaining your CVPRO account
• Processing candidate CVs and interview data
• Providing hiring intelligence and candidate evaluation
• Enabling communication between recruiters and candidates

Legitimate Business Operations

• Fraud detection and security purposes
• Compliance with legal obligations
• Platform improvement and optimization
• Customer support and troubleshooting

Communications

• Sending account notifications and updates
• Responding to your inquiries
• Notifying you of policy changes

We will not use your data for marketing or promotional purposes without your explicit consent. You can opt out of non-essential communications at any time.

4. AI Processing and Data Handling

CVPRO uses Artificial Intelligence, specifically Claude (developed by Anthropic), to provide candidate evaluation and hiring intelligence services. Here's how your data is handled:

AI Processing Method

• Your CVs, interview responses, and candidate data are sent to Claude API for analysis
• Claude processes this data to generate hiring recommendations and candidate insights
• Processing occurs in real-time as you request evaluations

Important: Training Data Policy

YOUR DATA IS NOT USED FOR AI TRAINING

• Your personal data, CVs, and interview responses will never be used to train or improve Claude or any other AI models
• Anthropic, our AI provider, maintains strict data handling policies that exclude our data from training datasets
• Data retention by Anthropic follows their standard API usage policy (30 days)
• You can request deletion of your data at any time

Your Control Over AI Processing

• You explicitly trigger AI processing by requesting candidate evaluations
• You can view exactly what data is being processed before submission
• You retain full control over whether and how your data is processed

5. Data Storage and Security

Data Storage Location

• All personal data collected in CVPRO is stored on India-hosted PostgreSQL databases
• We comply with data residency requirements under DPDPA
• Your data remains within Indian jurisdiction unless you explicitly consent otherwise

Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: Data is encrypted in transit (TLS 1.2+) and at rest
• Access Controls: Only authorized personnel have access to personal data
• Authentication: Strong password requirements and session management
• Regular Audits: Security assessments and penetration testing
• Monitoring: Continuous monitoring for unauthorized access attempts
• Backup: Regular encrypted backups for data recovery

While we implement industry-standard security practices, no system is completely secure. We encourage users to maintain strong passwords and report any suspected security issues immediately.

6. Data Sharing and Third Parties

Who We Share Data With

We share your data only in the following circumstances:

• Service Providers: Third parties who help us operate CVPRO (hosting, analytics, payment processors) under strict data processing agreements
• Anthropic (Claude API): For AI-powered candidate evaluation as described in Section 4
• Legal Compliance: When required by law, court orders, or government authorities

No Data Selling

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. Your data is exclusively used for providing CVPRO services and the specific purposes outlined in this policy.

Data Processing Agreements

All third-party service providers are bound by Data Processing Agreements (DPAs) that ensure compliance with DPDPA. We verify that our processors maintain adequate security and confidentiality measures.

7. Your Rights Under DPDPA

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access

You can request access to all personal data we hold about you. We will provide this information within 30 days of your request.

Right to Correction

You can request correction of inaccurate, incomplete, or misleading personal data. We will update your information within 30 days.

Right to Erasure

You can request deletion of your personal data under certain circumstances, including when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent
• You exercise your right to erasure

We may retain data if required by law or for legitimate operational purposes (e.g., audit trails for 7 years for compliance).

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, and machine-readable format. We will provide this within 30 days of your request.

Right to Withdraw Consent

For any processing based on your consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing based on your prior consent.

Right to Lodge a Complaint

If you believe your rights under DPDPA have been violated, you can lodge a complaint with the Data Protection Board of India.

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@cvpro.in with:

• Your full name and registered email address
• A clear description of your request
• Any supporting documentation

We will respond to your request within 30 days and provide necessary assistance.

8. Cookie Policy

CVPRO uses minimal cookies to enhance your experience. Here's what you should know:

Essential Cookies

• Session Authentication: Maintains your login session securely
• Security Tokens: Prevents cross-site request forgery (CSRF)
• User Preferences: Remembers your language and display settings

No Tracking Cookies

• We do not use third-party tracking cookies
• We do not track you across other websites
• We do not share cookie data with advertisers

Managing Cookies

You can disable cookies in your browser settings. However, this may affect your ability to use certain CVPRO features, particularly authentication and session management.

9. Children's Privacy

CVPRO is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take immediate steps to delete such information and terminate the child's account.

If you believe we have collected data from a child, please contact us immediately at privacy@cvpro.in.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Notify you via email (to the address associated with your account)
• Provide notice through the CVPRO platform
• Require your consent if required by law

Your continued use of CVPRO after such notifications constitutes your acceptance of the updated Privacy Policy. Please review this policy periodically to stay informed about how we protect your data.

11. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 (§13(3)), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (Rule 3(2)), and the Consumer Protection Act, 2019 (§14), we have designated a Grievance Officer to address concerns related to personal data and this Privacy Policy.

When contacting the Grievance Officer, please include (a) your name and registered email, (b) a clear description of the concern, (c) the specific right under DPDPA you are exercising (if applicable), and (d) any supporting information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us: