Privacy Policy
Last updated: 28 July 2026
AvasarAI helps India-based candidates find remote roles, and can tailor a resume and cover letter for a specific job. Doing that means handling some of your personal data — including your resume, which is sensitive. This page sets out exactly what we collect, why, who else sees it, how long we keep it, and what you can make us do about it.
For the purposes of India’s Digital Personal Data Protection Act, 2023, the Data Fiduciary is:
What we collect, and why
- Your name and email address, and your Google profile pictureTo create your account and sign you in. We get these from Google when you choose to sign in with Google.
- Your job preferences — categories, filters, searches, and the jobs you save, view or mark appliedTo show you relevant listings, keep your filters between visits, and tell you what's new since you last looked.
- Your resume file, and the text, skills, roles and summary we extract from itTo score how well you match a job, and to generate a tailored resume and cover letter when you ask for one.
- A record that a payment happened — order ID, amount, date and statusTo unlock your Sprint, to handle refunds, and to keep the accounting records the law requires.
- Your email address if you leave it on the Sprint waitlistTo tell you when paid features launch, and to understand how many people want them.
- Basic technical information in our server logs — IP address, browser type, and timestampsTo keep the service secure, diagnose faults, and detect abuse such as scraping.
We collect nothing beyond this. In particular we never ask for and never store your card number, UPI PIN, bank details, PAN, Aadhaar or any government ID, and we run no advertising or analytics trackers.
The basis we rely on
We process your data on your consent, which you give by a clear affirmative action — signing in, setting your preferences, uploading a resume, or asking for a tailored document. Each of those is a separate choice, and none of them is a condition of using the free parts of the site.
Where we keep records of a payment, we also rely on our legal obligation to maintain accounting records.
Withdrawing your consent
You can withdraw consent as easily as you gave it, at any time, with no explanation:
- Delete your uploaded resume from the Resume page. The file and everything we extracted from it go with it.
- Clear or change your job preferences in Settings.
- Ask us to delete your account and all associated data by emailing support@avasarai.com. We action it within 7 working days.
Withdrawing consent stops future processing. It doesn’t undo processing that already happened, and we may keep the minimum payment record that tax law requires us to keep.
Who else processes your data
We use a small number of service providers to run AvasarAI. They act on our instructions and only receive what a specific feature needs.
- SupabaseDatabase, authentication and file storage — your account, preferences and resume live here.Processes data on: Servers outside India
- GoogleGoogle Sign-In, and Firebase App Hosting, which serves this website.Processes data on: Servers outside India
- OpenRouterRoutes AI requests. Your resume text and the job description are sent here when you ask for a match score, tailored resume or cover letter. We have not allowed OpenRouter to use what we send it to improve its own product.Processes data on: United States
- Google (Gemini)The AI model OpenRouter routes those requests to, which actually generates the tailored text.Processes data on: Servers outside India
- RazorpayPayment processing. Your card, UPI and banking details go to Razorpay directly and never pass through us.Processes data on: India
- Meta (Facebook)Advertising measurement, and only if you agree to it. Tells us which ads bring people to AvasarAI. If you buy a Sprint we send Meta a one-way scrambled version of your email address so they can match the sale to the ad you clicked — they cannot read your email address from it. We never send your resume, your saved jobs or anything you have searched for.Processes data on: United States
- Google AnalyticsWebsite analytics, and only if you agree to it. Counts visits and shows which pages people use. Not connected to your resume or your account.Processes data on: Servers outside India
Your resume is not used to train anyone’s AI models. Every AI request we make carries an instruction that it may only be handled by providers who do not keep your text to train on it, and we have separately turned off every training and prompt-sharing option in our OpenRouter account. That is a setting on our side, not something you have to ask for.
We do not sell your data, and we never share your resume, your preferences or your job history with employers or recruiters. When you apply for a job you leave AvasarAI and deal with the employer directly on their own site, under their own privacy policy.
Data processed outside India
As the table above shows, several of our providers store or process data on servers outside India. By using AvasarAI you consent to that transfer. We only use providers that offer contractual data-protection commitments, and we transfer no more than the feature requires.
How long we keep things
- Account, preferences and activity — for as long as your account exists, then deleted within 30 days of a deletion request.
- Your resume and everything extracted from it — until you delete it or delete your account, whichever comes first.
- Generated resumes and cover letters — until you delete them or delete your account.
- Payment records — retained for as long as Indian tax and accounting law requires, even after account deletion. This is a legal obligation we can’t waive.
- Server logs — 90 days.
Your rights
Under the DPDP Act, 2023 you can ask us to:
- tell you what personal data of yours we hold and who we’ve shared it with;
- correct anything inaccurate, or complete anything missing;
- erase your data, where we’re not required by law to keep it;
- nominate someone to exercise these rights for you if you die or become incapacitated;
- hear from us about a grievance, through the officer below.
Email support@avasarai.com from your account address and we’ll respond within 30 days, usually much sooner. There’s no charge.
Keeping it safe
Data is encrypted in transit. Access to the database is restricted per-user by row-level security, so one account cannot read another’s resume or preferences, and our AI provider keys are held server-side and never reach your browser.
No system is perfectly secure, and we won’t pretend otherwise. If a breach affects your personal data we will notify you and the Data Protection Board of India as the law requires.
Cookies and measurement
Some cookies are needed to keep you signed in. Blocking those will stop you staying signed in, but browsing still works.
Separately, we ask whether you’ll let us measure how people find AvasarAI. The answer is yours and nothing is loaded until you give it. If you say no, no Meta or Google code runs on this site at all — we don’t load it and then hold it back, we simply never send it to your browser. Either way you see the same jobs, the same descriptions and the same prices.
If you say yes, Meta and Google can see which pages you visit here, and if you buy a Sprint we tell Meta a sale happened along with a one-way scrambled version of your email address, so they can connect it to the ad you clicked. That scrambling cannot be reversed to recover your address. We never send your resume, your saved jobs or your searches to either of them.
You can change your mind at any time in Settings → Email Settings → Privacy. Turning it off takes effect immediately. Declining also stops us asking again.
If you arrive from an ad or a search, we record which campaign sent you so we know which advertising is worth paying for. That note stays with us and is only ever shared as described above.
Children
AvasarAI is for adults looking for work and is not directed at anyone under 18. We don’t knowingly collect data from children. If you believe a child has given us data, tell us and we’ll delete it.
Changes to this policy
If we change what we collect or who processes it, we’ll update this page and the date at the top, and email anyone with an active account when the change is significant.
Questions or complaints
Any question about your data — or a complaint about how we’ve handled it — goes to our Grievance Officer. If you’re not satisfied with the outcome, you may complain to the Data Protection Board of India.
We acknowledge every complaint within 24 hours of receiving it and aim to resolve it within 15 days. Please include the email address on your account so we can find your records.