1. Data we collect
- Account data: email, name, hashed password, optional profile fields (avatar, bio, locale, website).
- Authentication data: session tokens, two-factor secrets you choose to enrol, and IP/User-Agent metadata for security logs.
- Content data: resumes, files, prompts and AI inputs you submit; tool outputs we store at your request.
- Usage data: feature events, tool runs, AI credit ledger entries, error reports.
- Billing data: plan, billing period, last payment status. Card details are handled by our payment processor; we never see or store them.
- Communications: messages you send us through the contact form or support email.
2. How we use your data
- Provide and operate the Service, including AI features you request.
- Authenticate you, enforce quotas, and prevent abuse.
- Bill paid plans and maintain the AI-credit ledger and refund records.
- Improve product reliability via aggregated, non-identifying telemetry.
- Respond to your support enquiries and legal requests.
3. Legal bases
We process personal data to perform our contract with you (delivering the Service), to comply with legal obligations (tax, accounting), with your consent (e.g. marketing email opt-in), and for our legitimate interests in keeping the Service safe and improving it.
4. AI processing and sub-processors
When you use AI features, the relevant input is sent to a trusted AI provider on your behalf:
- Google Cloud (Vertex AI – Gemini): resume generation, ATS scoring, drafting, prompt repair.
- Deepgram: speech-to-text for the Speak-to-Resume feature.
- Supabase: managed Postgres database, authentication, file storage, realtime.
- Cloudflare: edge hosting and request routing.
- Razorpay (Razorpay Software Private Limited): secure payment processing for paid plans and AI credit top-ups.
We do not allow these providers to use Your Content to train their models. We do not sell personal data.
5. Cookies and similar technologies
We use strictly-necessary cookies to keep you signed in and to protect against CSRF/abuse. We do not run third-party advertising cookies. Optional analytics may be enabled with notice; you can clear cookies in your browser at any time.
6. Data retention
- Account data: until you delete your account, then up to 30 days in encrypted backups.
- Resumes & uploads: kept while your account is active; you can delete them at any time.
- Audit and billing records: up to 7 years where required by Indian tax/accounting law.
- Contact-form messages: up to 24 months from the last interaction.
7. Your rights
You can access, correct, export, or delete your personal data from your profile page, or by emailing support@freemium.tools. Where applicable, you have the right to object to processing, restrict processing, or lodge a complaint with your local data-protection authority.
8. Security
We use TLS in transit, encryption at rest for managed databases and storage, role-based access controls, row-level security on the database, and audit logs for admin actions. No system is perfectly secure; please report vulnerabilities to support@freemium.tools.
9. International transfers
Our sub-processors may process data outside India. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
10. Children
The Service is not intended for users under 13. We do not knowingly collect data from children.
11. Changes
We will announce material changes to this policy in-product or by email at least 14 days before they take effect.
12. Contact
Grievance Officer: Akshar Mohan, AlfaBuildCore.
Email: support@freemium.tools. We respond within 30 days.