1. Introduction & Data Controller
This Privacy Policy explains how Montr AI Labs Pvt. Ltd. ("Company", "we", "us", or "our"), operating LoopResume AI across www.loopresumeai.com and app.loopresumeai.com, collects, uses, protects, and discloses your personal data.
This policy is designed to comply with applicable global and regional data protection regulations, including the Indian Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), the Digital Personal Data Protection Act, 2023 (DPDP Act), the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), and the California Consumer Privacy Act (CCPA/CPRA).
2. Information We Collect
We collect information in the following categories when you interact with our platform:
A. Information You Provide Directly
- Account Credentials: Name, email address, hashed passwords, and profile settings when registering an account.
- Career & Profile Content: Work history, job titles, employer names, employment dates, education history, skills, certifications, career summaries, and target job titles.
- Uploaded Documents: Existing resume files (PDF, DOCX, TXT) uploaded for parsing, ATS analysis, or formatting.
- Target Requisitions: Job descriptions pasted into the tool to calculate ATS keyword matches and rubric alignments.
- Customer Support Communications: Content of feedback forms, support emails, or chat inquiries.
B. Automatically Collected Technical Data
- Device & Network Information: IP address, operating system, browser type, device identifiers, and network connection characteristics.
- Usage Telemetry: Pages visited, features accessed, timestamps, interaction durations, referral URLs, and application performance metrics.
- Cookies & Local Storage: Session authentication tokens, theme preferences (light/dark mode), and cookie consent preferences stored locally in your browser.
C. Payment & Billing Information (Zero Raw Card Storage)
When you purchase a subscription (e.g., Starter Plan), payment transactions are handled entirely by certified third-party payment gateways:
- Razorpay Software Private Limited: For transactions processed in India in INR (₹) via UPI, RuPay, Net Banking, and Cards.
- Dodo Payments Inc. / Stripe Inc.: For international transactions processed in USD ($) and foreign currencies.
We do NOT collect, receive, or store full credit card numbers, debit card numbers, CVVs, or bank account PINs on our servers. All sensitive cardholder data is entered directly into PCI-DSS Level 1 compliant gateway modals. We receive only transaction reference identifiers, billing currency, subscription tier, and masked card identifiers (e.g., "Visa ending in 4242") for invoice generation.
3. Legal Bases for Processing (GDPR & DPDP Act)
We process your personal data under the following recognized legal grounds:
- Performance of Contract: To deliver the core resume builder, calculate ATS rubric scores, render documents, process subscription billing, and manage your account.
- Legitimate Interests: To detect and prevent fraud, safeguard platform security, troubleshoot technical bugs, and optimize user experience.
- Legal Compliance: To comply with applicable statutory requirements, tax accounting laws (such as GST compliance in India), and valid law enforcement requests.
- Consent: Where you have granted explicit consent, such as opting in to optional product updates or saving cookie settings.
4. How We Use Your Data
Your data is utilized exclusively for specific, legitimate business purposes:
- Generating, formatting, and rendering your resumes, cover letters, and web profiles;
- Executing deterministic keyword parsing to measure alignment against target job descriptions;
- Processing subscription payments, issuing tax invoices, and fulfilling digital service access;
- Providing responsive customer support and resolving technical inquiries; and
- Protecting the integrity of our platform against malicious attacks, scraping, and abuse.
5. AI Model Processing & Zero Training Guarantee
LoopResume AI integrates enterprise-grade Large Language Model (LLM) APIs (such as Google GenAI / Anthropic) to provide automated bullet rewriting, XYZ formula structuring, and cover letter drafts.
Mock interviews and voice: when you use the mock interview feature, the audio of each spoken answer is sent to Google's Gemini service to be transcribed and scored within that single request. We do not store the audio recording. We save only the transcript, scores and feedback to your account, and you can delete an interview at any time. If you share a scorecard, it is available only through a link you can revoke, and search engines are told not to index it.
Our Technical AI Privacy Guarantees:
- Zero Model Training: Your private resume contents, job history, and personal details are transmitted over encrypted API endpoints with explicit zero-data-retention/no-training agreements. Your data is never used to train, retrain, or improve foundational AI models.
- Ephemeral Processing: AI prompts are evaluated ephemerally to produce the requested draft or rewrite and are not stored by the AI provider.
- No Commercial Data Brokerage: We never sell, rent, or trade your career documents or personally identifiable information to advertisers, recruiters, or third-party data brokers without your affirmative direction.
6. Data Sharing & Third-Party Sub-Processors
We share data only with vetted service providers who assist in operating our platform under strict confidentiality agreements:
- Cloud Infrastructure: Amazon Web Services (AWS) for encrypted object storage and hosting; Cloudflare for global CDN and DDoS mitigation.
- Database Hosting: Managed PostgreSQL cloud instances featuring TLS 1.3 encryption in transit and AES-256 encryption at rest.
- Payment Processing: Razorpay Software Private Limited (India) and Dodo Payments / Stripe (International) for secure transaction execution.
- AI Inference APIs: Google GenAI and Anthropic under enterprise terms of service prohibiting model training on customer payloads.
- Legal Requirements: If required by court order, statutory subpoena, or regulatory audit under Indian or international law.
7. Data Security & Storage Practices
We implement industry-standard administrative, physical, and technical safeguards to protect your personal information:
- Encryption in Transit: All HTTP network traffic is enforced via HTTPS using Transport Layer Security (TLS 1.3).
- Encryption at Rest: Stored documents, databases, and configuration backups are encrypted using AES-256.
- Authentication: Secure session handling with salted password hashing (Argon2/bcrypt) and token expiration.
- Access Controls: Strict role-based access restrictions limiting operational database access exclusively to authorized personnel.
8. Retention & Account Deletion (Your Right to be Forgotten)
You maintain complete sovereignty over your data:
- Self-Service Deletion: You can edit, unpublish, or permanently delete individual resumes, cover letters, and master profile data directly inside your dashboard at any time.
- Account Purge: You may request full deletion of your entire account and all associated assets by emailing hi@loopresumeai.com. Once processed, your personal data is immediately removed from active databases and permanently erased from backup archives within thirty (30) days, except for statutory tax and financial billing records required by law.
9. User Rights (India, GDPR & California)
A. Rights Under India's DPDP Act, 2023
You have the right to access a summary of your personal data processed by us, seek correction of incomplete or inaccurate data, request erasure of personal data, nominate an individual to exercise your rights in the event of death or incapacity, and seek redressal through our Grievance Officer.
B. Rights Under the EU GDPR
European Economic Area (EEA) and UK residents possess the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability (exporting resumes in structured format), objection to processing, and lodging a complaint with your supervisory data protection authority.
C. Rights Under the California CCPA / CPRA
California residents have the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, and the right to non-discrimination. We confirm: LoopResume AI does not sell or share personal information as defined under California law.
10. Cookies & Tracking Technologies
We use strictly necessary cookies for user authentication, security, and theme preferences. We do not deploy invasive third-party cross-site tracking cookies. You may manage your cookie preferences at any time via our bottom cookie banner or directly within your browser settings.
11. Grievance Redressal & Data Protection Contact
In accordance with the Indian Information Technology Act, 2000, the SPDI Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020, we have designated a dedicated Grievance Redressal Officer to address any privacy concerns, complaints, or data protection queries:
Grievance Redressal Officer Details:
- Designation: Grievance Redressal Officer & Data Protection Lead
- Entity: Montr AI Labs Pvt. Ltd.
- Grievance Email: grievance@loopresumeai.com
- General Support Email: hi@loopresumeai.com
- Acknowledgement Timeline: Within forty-eight (48) hours of receipt
- Resolution Timeline: Within thirty (30) days of receipt
For questions regarding subscriptions, cancellations, or payments, please visit our Cancellation & Refund Policy or our Contact page.