Privacy Policy

1. Personal data we collect

Account data when you sign in (via Google, GitHub or LinkedIn): your name, email address and profile photo. Usage data: the companies you search or add to a watchlist, and any company review you submit. Documents: if you use the Resume or Offer tools, the PDF you upload. Support data: any message and optional email you send via 'Report an issue'. Technical data: your IP address and browser, used transiently for security and rate-limiting.

2. What we deliberately DON'T store

Uploaded resume/offer PDFs are processed in memory and discarded immediately after analysis — we do not save the file or its contents. When we analyse third-party employee reviews we keep only aggregate statistics (e.g. "68% mention work-life balance positively") and discard the underlying review text. We never store card or bank details.

3. How we use your data

To provide the service (score companies, run your watchlist and alerts, analyse a resume/offer you submit); to operate accounts and Pro subscriptions; to prevent abuse; and to improve the product. We do not sell your personal data or use it for third-party advertising.

4. Legal basis & consent

We process your personal data with your consent (given when you sign in or submit data) and as necessary to provide a service you have requested. You may withdraw consent at any time (see 'Your rights'); withdrawal does not affect processing already carried out.

5. Processors we share data with

We use trusted third parties strictly to run the service: Google (sign-in, and AI analysis of resume/offer PDFs you upload), Razorpay (payments — they handle card/UPI details, not us), Resend (alert emails, if you opt in), RapidAPI/JSearch (job listings), and cloud hosting/database providers. Documents sent for AI analysis go to the provider's paid API, which does not use them to train models. We share data with these processors only to the extent needed for their function.

6. Company information (public data)

Company reports are compiled from public records — MCA corporate filings, employee-review platforms (aggregate numbers only), news, EPFO and job postings. This is public-record information about companies, not personal data about you. It is informational only and may be delayed or incomplete; if you believe something is wrong, use 'Report an issue' on the company's page.

7. Cookies & local storage

We use a signed session cookie to keep you logged in, and your browser's local storage to remember preferences (e.g. light/dark theme) and your recently-viewed companies. We do not use third-party advertising or cross-site tracking cookies.

8. Data retention

We keep account and usage data while your account is active and as needed for legal/operational reasons, then delete or anonymise it. Transient data (IP-based rate-limit counters) expires within hours. Uploaded documents are not retained at all.

9. Your rights (DPDP)

You have the right to access, correct, complete, update and erase your personal data, to withdraw consent, to nominate another person to exercise your rights, and to grievance redressal. To exercise any right, contact our Grievance Officer below and we will respond within the timelines required by law.

10. Children

CheckTheOrg is intended for users aged 18 and above. We do not knowingly collect personal data from children; if you believe a child has provided data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the product or the law evolves. Material changes will be reflected here with a new 'last updated' date.

12. Grievance Officer & contact

For any privacy question, request, or complaint, contact our Grievance Officer:

Grievance Officer, CloudMineLabs — privacy@cloudminelabs.in · www.cloudminelabs.in. You may also complain to the Data Protection Board of India if unsatisfied with our response.