Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Account details: full name, email address, phone number, password
• Resume / CV: work history, education, skills, certifications, salary information
• Profile data: headline, location, years of experience, SCM functions, tools
• Job postings (employers): company name, logo, job descriptions, requirements
• Communications: messages sent through the platform

1.2 Information collected automatically

• Log data: IP address, browser type, pages visited, timestamps
• Usage data: features used, search queries, job applications, click events
• Device information: operating system, screen resolution

1.3 Information from third parties

• LinkedIn OAuth: When you sign in via LinkedIn we receive your name, email address, and profile picture from LinkedIn's OpenID Connect service
• WhatsApp (when applicable): Phone number and resume PDF if you interact with our WhatsApp bot

2. How We Use Your Information

• Matching & recommendations: We use your resume, skills, and experience to match you with relevant job opportunities using AI-powered scoring
• Investability scoring: Our AI analyses your profile to generate a personalised SCM Investability Score — a measure of your market readiness
• Resume parsing: Uploaded PDFs are processed by Google Gemini AI to extract structured data (skills, experience, education). Raw text is not stored permanently
• Communications: We send application updates, job alerts, and platform notifications via email and (optionally) WhatsApp
• Platform improvement: Anonymised, aggregated usage data helps us improve features
• Security & fraud prevention: Log data is used to detect and prevent abuse

3. AI Processing

SCMJobs uses Google Gemini (gemini-1.5-flash) to parse resumes, generate profile summaries, analyse job descriptions, and power career recommendations. When your resume is processed:

• Resume text is sent to Google's Gemini API over an encrypted connection
• We use temperature=0 (deterministic) settings — your data is not used to train Google's models under our API agreement
• Parsed structured data is stored in our database; raw resume text is not retained after parsing

4. How We Share Your Information

We do not sell your personal data. We share it only in these cases:

• Employers on the platform: When you apply to a job, the employer sees your profile, resume, and match score
• Service providers: We use Hetzner (hosting), PostgreSQL (database), Google (AI processing), and Redis (caching). All are bound by data processing agreements
• Legal requirements: We may disclose data if required by law, court order, or to protect our rights
• Business transfer: In the event of a merger or acquisition, your data may transfer to the new entity under the same privacy commitments

5. Data Retention

• Active accounts: data retained while your account is active
• Deleted accounts: personal data purged within 30 days of account deletion request
• Application records: retained for 12 months after the application closes
• Log data: retained for 90 days
• Resume files: stored until you delete them or your account is closed

6. Your Rights

Under India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable law, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate data through your profile settings
• Erasure: Request deletion of your account and personal data
• Withdraw consent: Opt out of marketing communications at any time
• Data portability: Request your profile data in a machine-readable format
• Grievance redressal: Lodge a complaint with us or the Data Protection Board of India

To exercise these rights, email us at privacy@scmjobs.co.in. We will respond within 30 days.

7. Security

We protect your data using TLS/HTTPS encryption in transit, bcrypt password hashing, database access controls, and regular security monitoring. Our servers are hosted on Hetzner's ISO 27001-certified data centres. Despite these measures, no system is completely secure — please use a strong, unique password and notify us immediately if you suspect unauthorised access to your account.

8. Cookies

We use session cookies strictly necessary for authentication (JWT tokens stored in browser memory). We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

9. Children's Privacy

SCMJobs is intended for working professionals and is not directed at anyone under the age of 18. We do not knowingly collect data from minors. If we become aware that a minor has created an account, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify registered users by email if the changes are material. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related queries, data requests, or complaints: