JobsMeteor Privacy Policy & Personal Data Protection

1. Scope & Who We Are

This Policy applies to all users of the JobsMeteor website and services globally, including users located in India, the European Economic Area (EEA), the United Kingdom (UK), the United States (California), and all other jurisdictions. We are the data controller for your personal information.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name and email address via Google OAuth sign-in. We do not collect or store your Google password.
• Job preferences: Target roles, preferred locations, salary range, remote/hybrid preference, tech stack keywords.
• Resume content: Text you submit to our AI Resume Analyzer or Resume Builder tools. This is processed in real-time and not permanently stored on our servers beyond 90 days.
• Profile information: Skills, work history, education, social links you add to your public career profile.
• Contact messages: Any messages you send through our contact form.

2.2 Information Collected Automatically

• Usage data: Pages visited, search queries typed, jobs viewed, jobs saved, features used, and session duration.
• Device and browser: Browser type and version, operating system, screen resolution, and language settings.
• IP address: Used for approximate geolocation (country/city level) for analytics and security purposes.
• Cookies & identifiers: Session tokens, preference flags, and analytics identifiers — described in Section 5.
• Log data: Server access logs including request timestamps, response codes, and error events.

2.3 Payment Information

We do not collect or store your payment card details. All payment processing (credit/debit cards, UPI, net banking, international cards) is handled entirely by Razorpay, our PCI-DSS Level 1 compliant payment gateway. We only receive transaction confirmation metadata (order ID, amount, status). See Section 6 for details.

2.4 Information from Third Parties

• Google provides your basic profile (name, email, profile photo URL) upon OAuth authentication.
• We do not purchase or import data about you from data brokers.

3. How We Use Your Information

• Service delivery: To provide personalized AI job matching, resume analysis, cover letter generation, and career insights.
• Account management: To authenticate you, manage your subscription plan, and apply plan limits.
• Saved preferences: To persist your job bookmarks, search filters, and preferences across devices and sessions.
• AI features: To power the Meteon AI Assistant, career insights, and match scoring. Queries are processed ephemerally — they are not used to train our models or shared with third parties for training.
• Communications: To send important service updates, payment confirmations, and (if opted in) feature announcements. We do not send unsolicited marketing email.
• Advertising: To serve relevant display ads via Google AdSense on Free-tier pages.
• Security: To detect and prevent fraud, abuse, scraping, and unauthorized access.
• Analytics: To understand how the platform is used and improve features.
• Legal compliance: To meet obligations under Indian law, tax requirements, and respond to lawful requests.

4. Legal Basis for Processing (Primarily for EEA/UK Users)

5. Cookies & Tracking Technologies

You can control cookies via your browser settings. Disabling essential cookies will prevent you from signing in.

6. Payment Processing & Razorpay

Paid features are available through our subscription plans (Pro, Pro+, Premium) and Day Passes. All monetary transactions are processed exclusively by Razorpay Software Pvt. Ltd., a PCI-DSS Level 1 certified payment gateway operating under RBI guidelines.

7. Third-Party Services & Sub-Processors

8. International Data Transfers

Our primary servers are located in India. Some sub-processors (Google, AI providers) operate globally, which means your data may be processed outside India. Where we transfer data to countries without an equivalent level of data protection, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The processor's own adequacy certifications (e.g., Google's ISO 27001)
• Your consent where required

Residents of the EEA/UK may contact us to request information about the specific safeguards in place for transfers affecting them.

9. Data Retention

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

11. Children's Privacy

JobsMeteor is not directed to children under 13 years of age (or 16 in the EEA where applicable). We do not knowingly collect personal information from minors. If you believe we have collected information from a child, please contact us immediately and we will delete it.

12. Security Measures

We implement industry-standard technical and organizational measures to protect your data:

• TLS/HTTPS encryption for all data in transit
• Encryption at rest for sensitive fields in our database
• Row-level security policies restricting data access to account owners
• Google OAuth for authentication (we never handle your password)
• Razorpay PCI-DSS Level 1 compliance for all payment data
• DDoS protection and web application firewall (WAF)
• Regular security reviews and dependency audits

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly via our contact page.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or new features. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email for significant changes
• Post a notice on the platform where appropriate

Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

14. Contact & Data Inquiries

For any privacy-related questions, data access requests, or complaints, please contact us:

EEA/UK users also have the right to lodge a complaint with their local data protection supervisory authority if they are unsatisfied with our response.