Privacy Policy

1. What We Collect

When you sign in, we collect your email address or phone number. If you choose to add a name, we store it so we can greet you. If you answer the optional profile questions, we store your answers (for example, the kinds of roles and locations you're interested in). If you track roles in your Journey while signed in, we store the role details, the stage you set for each one (for example Discovery or Applied), and any outcome, follow-up date or notes you add. If you upload a resume, we store the file along with the name, role tag and version details you give it. If you use the AI features, the text you provide — such as resume text, job descriptions, chat messages and transcribed interview answers — is sent to our AI provider to generate a response. In the AI chat you can also choose to include a short summary of your Journey (role titles, companies and stages, never your notes); this is on by default and you can switch it off in the chat. We also store when you accepted our terms and, if you opt in to optional alerts, your choices (email and WhatsApp, reminders and updates, each separately), the WhatsApp number you give us, and a record of each time you turn an alert on or off — what changed, when, and where in the app.

Voice practice in Mock Interview uses your browser's built-in speech recognition. Depending on your browser (for example, Chrome), that audio may be processed by the browser's vendor. Interview reports you download are created in your browser and are not saved on our servers.

If you report a job listing, we store which listing it was, the reason you chose and the time. A report is anonymous: it is not linked to your name or account.

2. How We Use Your Data

We use your information to operate your account, let you track job applications, provide AI-generated career assistance (resume feedback, ATS analysis, mock interview practice, visa and relocation information), keep the Service secure, and — where you've given consent — send you optional reminders and updates by email and/or WhatsApp.

3. Third-Party Services We Use

We rely on the following processors to operate KiVolve. Each handles a limited slice of your data as needed to provide their service:

• Supabase — database, authentication, your Journey and private resume storage.
• Vercel — hosts the website and the server functions that call our AI and search providers.
• Cloudflare (Turnstile) — a security check on the sign-in window that helps block automated sign-ups. To run the check, Cloudflare receives technical information such as your IP address and browser details, under Cloudflare's own privacy policy.
• Twilio — delivers SMS sign-in codes to the number you provide, and WhatsApp alerts once that feature is live and only if you've opted in.
• Resend — delivers emails such as sign-in codes.
• Google Gemini — powers the AI assistant. Text you submit to AI features (including the optional Journey summary described above) is sent to Google's Gemini API and handled under Google's terms for that API.
• Tavily — web search used to ground visa and relocation answers. The text of your question may be sent to Tavily.
• RapidAPI (JSearch) — supplies the job listings shown in Opportunities. When you use "Search live job sites", the words you typed are sent to this provider from our server; they are not linked to your name or account. We may keep that search text, without any identity attached, for up to 24 hours so the same search is not repeated.
• Google AdSense — we plan to show ads on free-tier pages. Ads are not currently enabled; if they are, Google may use cookies or device data under its own advertising privacy policy.

To stop automated abuse of free features such as the AI chat, we keep short-lived counters tied to a scrambled (hashed) form of your IP address rather than the address itself.

4. Resume & Document Storage

Resumes you upload are stored in a private storage location accessible only to your account. We do not share your resume with any employer or third party except where you explicitly click through to an external application page. If you choose to use a resume with an AI feature, its text is sent to our AI provider as described above.

5. Optional Alerts & Consent

Sign-in codes and account security messages are always sent; they are not marketing and cannot be turned off. Everything else is optional and off until you choose it. You can opt in separately for email and for WhatsApp, and separately for two kinds of message: application reminders (follow-ups and interview preparation), and job matches and KiVolve updates.

We have not started sending these alerts yet. Your choices are saved for when we do, and WhatsApp alerts will not be sent before that feature is live. We store your choices, the WhatsApp number you give us (we do not verify it yet) and a log of each change. You can change or withdraw any choice at any time in the app (Account → Notifications), by emailing career@kivolve.in, or, once WhatsApp alerts are live, by replying STOP to a WhatsApp alert. Withdrawing consent does not affect your ability to use KiVolve.

6. Data Retention & Deleting Your Account

We retain your account data for as long as your account is active. You can delete your account yourself in the app (Account → Privacy & data → Delete my account). This permanently removes your account, profile, tracked roles and their history, resume records, uploaded resume files and your alert-choice history. You can also ask us to delete your account by emailing career@kivolve.in from the email address or phone number registered to your account.

Short-lived technical records, such as abuse-prevention counters, cached job-search results and anonymous listing reports, are kept only as long as needed for their purpose and are not tied to your name.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent you have given. You can download a copy of the data we store for your account in the app (Account → Privacy & data → Download my data), and you can change your name there too. For anything else, contact us at career@kivolve.in to exercise these rights.

8. Cookies & Local Storage

We use essential cookies and your browser's local storage to keep you signed in and remember your preferences (like theme). If you use Journey while signed out, your tracked roles stay in your browser's local storage on your device, so clearing your browser data removes them. When you sign in, your Journey is stored in your account so it is available on your other devices, and any roles previously saved in your browser are moved into your account; a short-lived backup of that older browser data may remain in your browser for up to 30 days.

We also keep a few small items in your browser: whether you skipped the profile questions, which job listings you have reported (so we can hide them for you), your choice about sharing a Journey summary with the AI chat, and your current chat conversation, which is cleared when you close the tab or sign out. If you install KiVolve as an app, your device keeps a saved copy of the site's files so it loads faster. If ads are enabled in future, Google AdSense may set its own advertising cookies on free-tier pages.

9. Children

KiVolve is meant for people aged 18 and over, or the age of legal majority where they live. We do not knowingly collect personal data from anyone younger. If you believe a child has created an account, email career@kivolve.in and we will delete it.

10. Where Your Data Is Processed

KiVolve is operated from India. The service providers listed in Section 3 may process your data on servers outside India, under their own security and privacy terms.

11. Questions & Complaints

If you have a question or complaint about how your data is handled, email career@kivolve.in. We aim to respond within 2–3 business days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of KiVolve after changes constitutes acceptance of the revised policy.

13. Governing Law

This Policy is governed by the laws of India. Any disputes arising from this Policy are subject to the exclusive jurisdiction of the courts in Bangalore, Karnataka, India.