1. About Karrivo
Karrivo ("we," "us," or "our") is an AI-powered job matching platform operated in India. We help job seekers find relevant employment opportunities by analyzing their uploaded resumes using artificial intelligence.
Registered jurisdiction: India
Contact for privacy matters: privacy@karrivo.com
We act as a Data Fiduciary under the Digital Personal Data Protection Act (DPDPA), 2023 with respect to the personal data you provide us.
2. Information We Collect
2.1 Information you provide directly
- Full name and email address (during account registration)
- Password (stored in encrypted form only — we never store plaintext passwords)
- Resume contents (including employment history, educational qualifications, skills, contact details, and any other information you include in your resume)
- Payment information (processed by Razorpay — we do not store card numbers or banking details on our servers)
2.2 Information collected automatically
- IP address and approximate location (city/state level only)
- Browser type, operating system, and device information
- Pages visited and time spent on pages
- Search queries and interactions within the platform
- Session identifiers and cookies (see our Cookie Policy)
2.3 Information from third parties
- If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google, subject to Google's privacy policy.
3. How We Use Your Information
We use your information solely for the following purposes:
- Providing the Karrivo service — parsing your resume and matching you with relevant job opportunities
- Account management — creating and maintaining your account, processing payments, and managing your credit balance
- AI processing — your resume text is processed by Karrivo AI Engine to extract structured data. This processing is necessary to deliver our core service.
- Job matching — your extracted profile is used to query job listing APIs (Adzuna, JSearch) to find relevant roles
- Communications — sending you search results, payment confirmations, and service updates via email
- Security — detecting fraud, abuse, and violations of our Terms of Service
- Legal compliance — meeting our obligations under applicable Indian law
We do NOT use your data for:
- Selling your information to third parties
- Advertising or marketing on behalf of third parties
- Training our own AI models on your resume content
- Profiling you for purposes unrelated to job matching
4. Legal Basis for Processing
Under the DPDPA 2023, we process your personal data on the following bases:
- Consent: You provide explicit consent when you create an account and accept these terms. You may withdraw consent at any time by deleting your account.
- Contract: Processing is necessary to provide the service you have purchased.
- Legal obligation: We retain certain transaction records as required by Indian tax and financial regulations.
- Legitimate interests: We process usage data to improve security and prevent fraud, in ways that do not override your privacy rights.
6. How Long We Keep Your Data
- Account data: Retained while your account is active, and for 90 days after account deletion (to enable recovery if deleted in error)
- Resume files: Deleted immediately upon your request or 90 days after account deletion
- Search results: Retained per your plan (7, 30, or 90 days as applicable)
- Transaction records: Retained for 7 years as required by the Income Tax Act, 1961 and GST regulations
- Usage logs: Anonymised and retained for up to 12 months for security and analytics purposes
7. Your Rights Under the DPDPA 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access: Request a copy of all personal data we hold about you
- Right to correction: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data ("right to be forgotten")
- Right to grievance redressal: File a complaint with our Grievance Officer
- Right to nominate: Nominate another individual to exercise your rights in the event of your death or incapacity
- Right to withdraw consent: Withdraw consent for data processing at any time (this will result in account deletion)
Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of our Grievance Officer are published on our Contact page. You may lodge a grievance by emailing grievance@karrivo.com. We will address your grievance within 30 days.
8. How We Protect Your Data
- All data is encrypted in transit using TLS 1.2 or higher (HTTPS)
- All data is encrypted at rest using AES-256 encryption
- Passwords are hashed using bcrypt — never stored in plaintext
- Resume files are stored in access-controlled private storage buckets
- We conduct periodic security reviews
- Access to production systems is restricted to authorised personnel only
Despite our best efforts, no security system is 100% infallible. In the event of a data breach that affects your rights, we will notify you and the relevant authorities as required by applicable law.
9. Minimum Age
Karrivo is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it immediately. If you believe a minor has used our service, please contact us at privacy@karrivo.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of Karrivo after the effective date of the revised policy constitutes your acceptance of the changes.
11. Contact Us
For any privacy-related questions or concerns:
Email: privacy@karrivo.com
Grievance: grievance@karrivo.com
Response time: Within 30 days