Privacy Policy

1. Overview

Spireix ("we," "us," or "our") operates the website at resume.spireix.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Spireix, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use of our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: Email address, full name, and password (stored as a secure hash via Supabase Auth).
• Profile Information: Optional profile photo and professional details.
• Resume Files: Documents you upload for ATS analysis (.pdf, .doc, .docx). These are processed in real-time and not stored unless you are a logged-in user with an active document saved in your dashboard.
• Payment Information: Billing details processed directly by Cashfree Payment Gateway. We do not store your card numbers or UPI credentials.
• Contact Form Submissions: Name, email, and message content when you contact support.

2.2 Information Collected Automatically

• Log Data: IP address, browser type, operating system, referring URL, pages visited, and time stamps.
• Usage Analytics: Aggregated data on which features are used and how long sessions last (via privacy-respecting analytics).
• Cookies and Local Storage: Session cookies for authentication and preferences (see Section 6).

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your email address, name, and profile picture from Google, subject to Google's Privacy Policy.
• Cashfree: Payment status and transaction identifiers (not card details).

3. How We Use Your Information

We use collected information to:

• Provide, operate, and improve our ATS Resume Checker and Career Suite services.
• Process your resume through Google Gemini AI for analysis (your resume content is sent to Google's API under our terms — not stored by Google for model training).
• Process subscription payments and manage billing through Cashfree.
• Send account-related transactional emails (e.g., subscription confirmations, payment receipts).
• Respond to your support requests and inquiries.
• Improve our AI analysis accuracy using aggregated, anonymized ATS score data.
• Enforce our Terms & Conditions and prevent fraud.
• Comply with legal obligations.

We do not sell, rent, or lease your personal data to third parties for marketing purposes.

4. Information Sharing

We share your information only in the following circumstances:

• Service Providers: Trusted third-party vendors that help operate our Service, including Supabase (authentication & database), Google Cloud (Gemini AI API), Cashfree (payments), and Cloudflare (hosting). Each is bound by data processing agreements.
• Legal Requirements: When required by applicable law, regulation, or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity subject to the same privacy protections.
• With Your Consent: In any other case where you explicitly authorize sharing.

5. Data Retention

• Anonymous ATS Checks: Resume content processed without login is discarded immediately after analysis. Only the anonymous scan score and timestamp are retained for aggregate analytics.
• Account Data: Retained for the duration of your account. You may delete your account at any time, which removes your profile, saved documents, and personal data within 30 days.
• Payment Records: Retained for 7 years as required by Indian tax and financial regulations.

6. Cookies

We use essential cookies to:

• Maintain your login session (Supabase authentication cookie).
• Remember your theme and language preferences.
• Prevent cross-site request forgery (CSRF protection).

We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this will prevent you from logging into your account.

7. Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted via HTTPS/TLS 1.3.
• Passwords are hashed using bcrypt (managed by Supabase).
• Database access is protected by Row Level Security (RLS) policies — users can only access their own data.
• Payment data is never stored on our servers; it is handled entirely by Cashfree's PCI-DSS compliant infrastructure.

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to using commercially reasonable protections.

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a machine-readable format.
• Opt-Out: Unsubscribe from marketing emails using the unsubscribe link in any email.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Spireix is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, notify registered users by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For privacy-related questions, requests, or concerns, please contact: