Privacy Policy

Karthikeyan K, trading as JobFocus ("we", "us") provides a personal job-hunting platform that aggregates Indian job listings, scores and tailors your CV against roles, and helps you prepare to apply. Under the DPDP Act we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

Questions, requests or grievances about your data: privacy@jobfocus.co.in, or use the contact form on our site.

We collect only what we need to run the service for you:

• Account details — your name and email address, handled by our authentication provider (Clerk) when you sign up or sign in.
• Your CV — the file(s) you upload and the text and structured data we extract from them (work history, education, skills, contact details in the CV).
• Your profile — preferred job titles, keywords, locations, salary preferences, and digest settings.
• Activity in the app — roles you save, dismiss or mark as applied, tailored CVs and cover letters generated, interview practice sessions and their transcripts, and your career-roadmap requests.
• Usage and quota counters — to apply fair-use limits on AI features.
• Messages — anything you send us via the contact form.
• Technical data — IP address, device/browser information, and essential cookies, plus diagnostic/error telemetry.

Indian CVs often include personal details such as a date of birth, marital status, a photo or a parent's name. You decide what your CV contains. Whatever it holds, we process only to provide the service you have asked for, and it is sent to our AI providers solely to produce your results. If you would rather we did not process a particular detail, remove it from your CV before you upload it.

• To provide the core service — aggregate matching roles, score your CV, generate tailored CVs/cover letters, prepare interview Q&A and mock interviews, and build your career roadmap.
• To run AI processing — your CV text and the relevant job descriptions are sent to our AI providers to produce the scoring, tailoring and prep. We instruct the AI not to fabricate information.
• To send you the role digest at the frequency you choose (you can turn this off any time).
• To keep the service secure, debug problems, and enforce fair-use limits.

We do not sell your personal data, and we do not use your CV to train AI models.

• Consent — when you create an account and upload your CV, you consent to us processing your personal data for the purposes in this policy. You can withdraw that consent at any time, as easily as you gave it; withdrawal does not affect processing already carried out, and features that depend on the data stop working.
• Legitimate uses permitted by the DPDP Act — for example, data you have voluntarily given us for a specific purpose, or processing the law requires of us.

We use automated processing (AI) to score your CV, match it to roles, and generate tailored CVs, cover letters and interview prep. These are suggestions to support your decisions: you review them and decide what to use, and you can reach a human about any result by contacting us. We instruct our AI providers not to fabricate information, and they do not train their models on your content.

We use trusted processors to run the service, each handling only what their function needs:

• Authentication — Clerk (account identity and sign-in).
• Database & file storage — MongoDB Atlas (your profile and app data) and Cloudflare R2 (your uploaded CV files).
• AI processing — Microsoft Azure OpenAI, Anthropic and OpenAI process your CV and job-description text to produce scoring, tailoring, interview prep and your career roadmap. Microsoft Azure Speech provides the voice in mock interviews.
• Job sources — we query third-party job APIs (Adzuna, Careerjet, TheirStack) and public company careers sites (Greenhouse, Lever, Ashby, Workday, SmartRecruiters) to build your feed. They receive search terms at most, never your CV.
• Email & diagnostics — Resend (to send digests and account emails) and Microsoft Application Insights (diagnostics).
• Hosting — our cloud host runs the application.

We may also disclose data where required by law. We never auto-submit applications on your behalf, and we do not scrape LinkedIn or Indeed.

Your data is not currently stored in India. The providers listed above process it on servers outside India, including in the United States. The DPDP Act allows personal data to be processed outside India except in countries the Central Government restricts by notification, and we will not transfer your data to any such country.

We keep your account data for as long as your account is active. When you delete your account (or your data) we remove your profile, CVs, generated documents, interview sessions and related records straight away, and copies are purged from encrypted backups within 30 days. Limited security and diagnostic logs are kept for up to 90 days and then deleted. We retain only the minimum necessary for any legal or accounting obligation where the law requires it.

Under the DPDP Act you can:

• Ask for a summary of the personal data we process about you, the processing we carry out, and who we have shared it with.
• Have inaccurate or incomplete data corrected, completed or updated (you can edit most of it in the app).
• Have your data erased — use "Delete my account & data" in your profile, or contact us.
• Withdraw your consent at any time.
• Nominate another person to exercise these rights for you if you die or become unable to.
• Have a grievance about how we handle your data addressed by us.

To exercise these, use the in-app controls or email privacy@jobfocus.co.in. For a grievance, write to the same address with "Grievance" in the subject; we will acknowledge it and respond within the time the law requires. If you are not satisfied with our response, you can then complain to the Data Protection Board of India.

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or cross-site tracking cookies.

We use industry-standard measures — encrypted transport (HTTPS), access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, but we work to keep your information safe. If a personal data breach affects you, we will tell you and the Data Protection Board of India, as the DPDP Act requires.

JobFocus is intended for people aged 18 and over. The DPDP Act treats anyone under 18 as a child, whose data may only be processed with verifiable parental consent; we do not offer the service to children and do not knowingly collect their data.

We may update this policy as the service evolves. We will revise the "last updated" date and, for material changes, notify you in the app or by email.