Skip to content

Privacy Policy

How Jiffy CV handles your resume, account information, and other personal data.

Last updated September 17, 2026

1. Who We Are

Jiffy CV is operated by Tivara Technologies. Under the Indian Digital Personal Data Protection (DPDP) Act, we are the Data Fiduciary (the company that manages your data) and you are the Data Principal (the owner of your data).

2. The Golden Rule: No AI Training

Let's get the most important thing out of the way. We do not use your personal data or your resume to train AI models. We process your data exclusively to deliver your optimized resume, and nothing else. We never sell your data to recruiters, job boards, or advertisers.

3. What We Collect

We only collect what is strictly necessary to run the Jiffy CV engine.

  • What you give us: Your account details (name and email), your base resume PDF, and the job descriptions you paste into our app.
  • What we generate: Your ATS match scores, the rewritten resume text, missing keyword suggestions, and basic records of when you ran a scan.
  • What happens automatically (if you consent): We use essential session cookies to keep you logged in. If—and only if—you click "Accept" on our cookie banner, we load Google Analytics to understand how visitors use Jiffy CV and which marketing campaigns brought them to us.

4. Who Processes Your Data

We use a small, trusted group of third-party tools to make Jiffy CV work. Each company only receives the exact data they need to do their job.

  • Supabase: Provides our database, user authentication, and secure file storage. It processes your account information, uploaded resumes, job descriptions, scans, and plan records.
  • Vercel: Hosts the Jiffy CV website and provides basic website usage analytics. It processes the technical request and page-visit information needed to serve and measure the website.
  • OpenAI & Google Gemini: Our AI engine providers that analyse and rewrite your resume. They only receive the resume and job description required to provide the service. Provider-side retention and training controls follow our configured business API terms.
  • Google Analytics: If—and only if—you accept analytics cookies, it processes information about how you use the website, such as pages viewed and actions taken. For signed-in users, we may associate this activity with an internal account ID, not your name or email.
  • Cloudflare Turnstile: Helps us prevent bots and abuse on account and upload forms. It processes technical browser, device, and network signals needed to assess whether a request is legitimate.
  • Sentry: Receives limited technical error information when important server operations fail. We send fixed error labels and do not send resumes, job descriptions, email contents, or account details.
  • our authorized payment gateway: Processes your payments and the billing information needed for the transaction. We never see, touch, or store your credit card details.
  • ZeptoMail (by Zoho): Delivers our emails, such as your welcome email, scan results, purchase receipts and account reminders. They receive your email address, your first name and the content of those emails.

Note: Because our AI providers are global, some of your text data may be processed on secure servers outside of India.

5. How Long We Keep Your Data

  • Resumes & Scans: We keep your generated files in your dashboard so you can redownload them anytime. They stay there until you ask us to delete your account.
  • Abandoned Scans: If you upload a file but don't finish the process, we auto-delete that file periodically.
  • Invoices: We are required by Indian tax law to keep basic purchase records (without payment details) even if you delete your account.

6. Your Rights Under the DPDP Act

You own your data. At any time, you can ask us to:

  • Access: Give you a complete copy of the data we hold about you.
  • Correct: Fix any incorrect information on your account.
  • Erase (The Right to be Forgotten): Permanently delete your account, your uploaded resumes, and all generated scans from our servers.
  • Withdraw Consent: Change your mind about analytics cookies by clearing them in your browser.

To request an account deletion, email support@jiffycv.ai from the address associated with your account. We will execute the wipe and confirm it with you within 30 days (usually much faster).

7. Security

Your data is transmitted over encrypted HTTPS connections. We use strict database rules (row-level security) which acts like a digital wall—ensuring that your account can only ever view your own files. No system is 100% impenetrable, but if a data breach ever occurs, we will notify you immediately in accordance with Indian law.

8. Age Restrictions

Jiffy CV is built for professionals seeking employment. We do not knowingly collect data from anyone under 18. If a minor has created an account, please contact us for immediate deletion.

9. Grievance Officer & Dispute Resolution

If you have a complaint about how your personal data is handled, please contact our Grievance Team using the details below.

  • Contact: grievance@jiffycv.ai
  • Physical Address: Mentioned on the Contact Us page
  • Our Promise: We will acknowledge all complaints within 24 hours and resolve them within 15 days.