Privacy Policy

Welcome to JobChef (the "App", "Service", "We", "Us", or "Our"). We are committed to protecting your personal data and ensuring transparency in how we collect, process, and store your information. This Privacy Policy details our compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Digital Personal Data Protection Act, 2023 (Indian DPDP Act).

By accessing or using JobChef, you agree to the terms of this Privacy Policy. If you do not agree with any terms of this policy, please do not use the application.

1. Information We Collect

To provide our services, including resume evaluation, applicant tracking system (ATS) matching, and personalized cold email generation, we collect the following categories of data:

• Account Information: If you register or authenticate using Google Sign-In, we collect your name, email address, profile picture, and a unique user identifier (UID). If you use the app as a guest, we generate an anonymous UID.
• Professional Data (Resumes & CVs): We collect user-uploaded resume documents (specifically in PDF format). This includes all content embedded within the file, such as work experience, education, skills, and contact details.
• Job Information (Job Descriptions): We process the text of Job Descriptions (JDs) that you copy, paste, or input into the Service.
• Generated Outputs & Logs: We store the emails drafted by our AI, applicant tracking history, mock interview transcripts, token credit transaction history, and configuration preferences.
• Usage & Device Data: We collect technical details such as your IP address, browser type, API transaction volume, and basic usage logs to secure and improve the platform.

2. How We Process Your Data (Google Gemini API & AI Disclosures)

We leverage advanced artificial intelligence technologies to assist you in aligning your career materials with potential employers. Here is how your data is processed by our AI components:

Under Google's developer terms, data sent to the Gemini API is processed transiently and is not used to train Google's foundational AI models. Your resume data is never sold, shared, or distributed to third-party data brokers or marketing platforms.

3. Where We Store Your Data (Firebase Firestore)

All data collected and generated by the App is securely synchronized and stored in Google Firebase Firestore. Your uploaded resumes, parsed profile data, generated email drafts, mock interview records, and token credits are bound directly to your user account (UID) and saved in Firestore.

This synchronization allows you to access your career materials seamlessly across devices while ensuring that data remains encrypted at rest and in transit using SSL/TLS protocols.

4. Data Retention and Deletion

We believe in the "Right to be Forgotten" and respect your complete ownership over your data. We retain your personal data only as long as your account remains active or as needed to provide our services.

You can request or perform complete deletion of your data at any time:

• In-App Deletion: You can delete specific resumes, job matching records, or email drafts directly within the App's user interface.
• Account Purge Request: You can permanently request the deletion of your account and all associated documents in Firebase by visiting our dedicated Account Deletion Request Page. Upon submitting your email, our systems will queue your profile, resumes in storage, and Firestore documents for complete, irreversible erasure.

5. Compliance with Global Privacy Frameworks

A. GDPR Compliance (EEA/UK Users)

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), your rights include:

• The right to access, update, or delete the information we have on you.
• The right of rectification (correcting inaccurate data).
• The right to object to or restrict processing of your personal data.
• The right to data portability.
• The right to withdraw consent at any time where processing is based on consent.

Our legal basis for processing your data is your explicit consent (e.g., when you upload a resume or link a Google account) and the performance of a contract (providing you with the AI generation service).

B. CCPA/CPRA Compliance (California Residents)

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we collect, the right to request deletion of your information, and the right to non-discrimination for exercising your rights. JobChef does not "sell" or "share" personal data as defined under the CCPA.

C. Indian DPDP Act, 2023 Compliance (Indian Users)

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), we act as the Data Fiduciary for your information. We process your data based on your consent, which is requested at the time of account creation or file upload. You have the right to withdraw consent, the right to seek correction or deletion of personal data, and access to grievance redressal.

6. Security Measures

We implement a robust suite of technical and organizational security measures to protect your data, including end-to-end encryption in transit (HTTPS/TLS) and secure token-based authentication. However, no electronic transmission or storage method is 100% secure, and we cannot guarantee absolute security.

7. Contact & Grievance Redressal

If you have questions about this Privacy Policy, your data rights, or want to register a compliance complaint, please contact us:

Email: jobchef.ai@gmail.com

Under the Indian DPDP Act, if you wish to contact our Grievance Officer, please direct your correspondence to the email above with the subject line "DPDP Grievance Request".