Privacy Policy

1. Who we are

Recroo ("we", "us", "our") is an AI-powered résumé scoring service available at recroo.in. For privacy-related questions, contact us at hello@recroo.in.

This policy is governed by the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

2. Information we collect

• Account information: Your name and email address when you sign up via Google OAuth or email magic link.
• Résumé text: Text extracted from your uploaded résumé file. It is sent to Anthropic's API to generate your ATS score (see Section 4). If you are signed in, the extracted text is also saved to your Recroo account as part of that scan's record, so your scan history, re-downloads, and Fix Mode work when you come back or switch devices. You can permanently delete any saved scan from your dashboard. If you are not signed in, nothing is saved to our servers. The original uploaded file itself is never sent to our servers in either case — only the extracted text.
• Job description text: The job description you paste into the tool. Handled the same way as résumé text — sent to Anthropic for analysis, and saved alongside the scan record in your account if you are signed in.
• Usage data: Pages visited, features used, and scan counts — used to improve the service and enforce plan limits.
• IP address: Used to enforce scan limits and prevent abuse of the free tier. Stored transiently by our rate-limiting provider (see Section 5) against a rolling daily and monthly counter, and not used to build a profile of you.
• Payment information: Handled directly by Razorpay. We do not store card numbers or banking details.

3. How we use your information

• To generate your ATS match score and personalised improvement suggestions.
• To create and manage your account and subscription.
• To send transactional emails (sign-in links, payment receipts). We will not send marketing emails without your explicit consent.
• To enforce usage limits and prevent abuse of the free tier.
• To improve our product — using only anonymised, aggregated data. Never identifiable résumé content.

4. AI processing and Anthropic

Recroo uses Anthropic's Claude AI to analyse résumés. When you run a scan, your résumé text and job description are sent to Anthropic's API for processing. This is subject to Anthropic's Privacy Policy.

We do not use your résumé data to train AI models. Anthropic's API processes data transiently — it is not retained by Anthropic beyond the API call.

5. Data sharing and third parties

We do not sell, rent, or trade your personal information. We share data only with the following service providers to operate the service:

• Anthropic — AI processing of résumé and job description text.
• Supabase — Secure database and authentication (hosted in Mumbai, India).
• Vercel — Web hosting and serverless functions.
• Upstash — Rate limiting. Stores a short-lived record of your account identifier and IP address to enforce daily and monthly scan limits and prevent abuse.
• Razorpay — Payment processing for paid subscriptions.

All providers are contractually bound to use your data only for the purposes we specify.

6. Data retention

• Account data (name, email) is retained until you delete your account.
• Résumé and scan data (signed in): Each scan — the extracted résumé text, the job description, and the results — is stored against your account until you delete it. Deleting a scan from your dashboard permanently removes that record, including its stored résumé and job description text, from our database.
• Résumé and scan data (not signed in): Nothing is stored on our servers. The scan exists only in your browser's local storage on your own device (see Section 8).
• On account deletion, all personal data — including every saved scan and its résumé text — is permanently removed within 30 days.

7. Your rights under DPDPA 2023

As a data principal under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Erase your personal data (right to erasure).
• Withdraw consent at any time, which results in account deletion.
• Grievance redressal — raise a complaint with our Data Protection Officer.

To exercise any right, email hello@recroo.in. We will respond within 30 days.

8. Cookies and local storage

We use browser localStorage (not tracking cookies) to remember your theme preference and to keep your most recent résumé — including the original uploaded file, the extracted text, the job description, and your scan history — available on your device so features like Fix Mode, the cover letter generator, and interview prep don't need you to re-upload each time. It persists until you clear your browser data, sign out (which clears your cached plan status), or it's overwritten by a newer scan.

Two things are stored only here and never sent to us: your theme preference, and the original uploaded résumé file. The extracted résumé text and job description are a separate matter — those are sent to Anthropic for analysis and, if you are signed in, also saved to your account (see Sections 2 and 6).

We do not use advertising cookies or third-party tracking pixels.

9. Security

• HTTPS encryption for all data in transit.
• Supabase row-level security ensures users can only access their own data.
• API keys stored as server-side environment variables — never in frontend code.

In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by law.

10. Children's privacy

Recroo is not directed at anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with data, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email (if you have an account) or by posting a notice on the site. Continued use of the service constitutes acceptance of the updated policy.

12. Contact us