Privacy Policy

EFFECTIVE 28 JUNE 2026 · CONTACT support@carigma.in

This policy explains what we collect, why, and your choices. It is written with India's Digital Personal Data Protection Act, 2023 (DPDPA) in mind.

1. What we collect

• Account data: email and authentication info.
• Profile data you provide: name, role, skills, experience, education, target roles, LinkedIn headline/About, anything in a resume/LinkedIn PDF you upload, and an optional headshot.
• Generated results: posts, job matches, profile scores, interview prep, CVs.
• Usage data: which features you use, basic product analytics, and error logs.

2. Why we use it

To run the service — generate AI output tailored to you, save your work, meter credits, secure accounts, and improve the product. We process your data on the basis of your consent and to provide the service you request.

3. AI processing

To generate output, relevant profile data is sent to our AI provider (Anthropic) for processing. We do not sell your data.

4. Sub-processors

We rely on Supabase (database, auth, storage), Render (hosting), Anthropic (AI), PostHog (product analytics), and Razorpay (payments). Each processes data only to provide their service.

5. Storage & security

Data is stored in Supabase with per-user row-level security, so you can only access your own records. We use industry-standard safeguards, but no system is perfectly secure.

6. Retention & your rights (DPDPA)

We keep your data while your account is active. You can access, correct, or delete your personal data, withdraw consent, and raise a grievance. Email support@carigma.in and we'll respond within a reasonable time.

7. Children

Carigma is not intended for anyone under 18.

Questions? support@carigma.in