Privacy Policy

1. Who we are

FabCV is operated by Edgile HR Services LLP, Gurgaon, Haryana, India. In this policy, "we", "us" and "FabCV" mean Edgile HR Services LLP. "You" means anyone who creates an account or uses the service. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary for the personal data described here.

Our offices are listed in section 13. For any privacy question or request, write to us at help@fabcv.com.

2. What we collect

Information you give us

• Account details: your email address and a password. Passwords are hashed by our authentication provider and are never visible to us.
• If you choose Continue with Google: instead of a password, Google confirms who you are and shares your name, email address and a link to your Google profile picture with us, and we store these with your account. We never see your Google password, and we get no access to your Gmail, Google Drive, contacts or anything else in your Google account.
• Resume files: the PDF or Word resumes you upload to your library.
• Job descriptions: the text you paste in for a tailoring request.
• Additional context: any notes or instructions you type into the context box.
• Generated outputs: the tailored, improved and merged resumes and the scorecard reports the service produces for you.
• Billing details: when you buy credits, the name to print on your GST invoice (your own name, or your company's name if you give a GSTIN), your state, and your GSTIN if you choose to give one.

Information collected automatically

• Usage and credit records: when you generate something, which service you used, and how many credits it used, so we can keep your balance and history.
• Payment records: when you buy credits, we receive a confirmation from our payment provider with the amount, date and payment reference. We never receive your card, UPI or bank details.
• Technical data: standard server logs kept by our hosting provider, such as IP address and browser type, used for security and for diagnosing faults.

What we do not ask for

We do not ask for government ID numbers, caste, religion, health information or any other sensitive personal data. Some resumes still carry a date of birth, marital status, a parent's name or a photo. We do not ask for these, but if they are in a file you upload, they are processed like the rest of your resume, including being sent to the AI service described in section 4. If you do not want something processed, please remove it from the file before you upload it.

3. Why we use it

We process your data on the basis of your consent, which you give by ticking the box when you create your account with an email address, or by choosing Continue with Google after reading the notice shown with it, and because it is needed to deliver the service you asked for. You can withdraw your consent at any time by deleting your account (see sections 7 and 8).

4. How AI processing works

This section matters, so we are being specific about it.

When you request a generation, the contents of your selected resume, the job description, and any context notes are sent to the Claude API operated by Anthropic, which produces the output that is returned to you.

Anthropic and our other providers store and process data on servers outside India, including in the United States. By using FabCV you agree to this transfer, which is necessary for the service to work.

We do not read your resumes, except where that is needed to fix a fault you have reported or to investigate abuse of the service.

5. Who else can see your data

We do not sell your personal data. We do not share your resume with recruiters, employers, job boards or advertisers. Nobody buys access to your information.

We use a small number of service providers who process data only to run the service for us:

We may also disclose information if we are legally required to, for example under a valid court order or a lawful request from an authority.

6. Payments

Payments are handled by Razorpay. Your card, UPI or bank details are entered on Razorpay's systems and are never sent to, seen by, or stored on FabCV's servers. Apart from the billing details you type in at checkout (the name for your invoice, your state and any GSTIN), we receive only a confirmation that a payment succeeded, with the amount, date and payment reference. We keep these records to issue GST invoices and to meet tax and accounting law.

7. How long we keep things

• Resume files and generated outputs: kept until you delete them or delete your account. You can delete individual files from your library at any time.
• Account details: kept for as long as your account is open.
• Job descriptions and context notes: kept only as part of the generation record they belong to.
• Internal alerts: when you create an account or use a service, our team receives an alert with your email address and the name of the service. These alerts are deleted automatically within 24 hours.
• Payment, billing and GST records: kept as required by Indian tax and accounting law, currently eight years.
• If you delete your account: deletion takes effect 48 hours after you confirm it in the app, and you can cancel before then by signing back in. Once it runs, your sign-in, profile, stored resumes and generated outputs are permanently deleted, usually within 3 days of your request. Any unused credits are forfeited. We keep only the payment and GST records that the law requires.
• Inactive accounts: we do not currently delete accounts automatically for inactivity. If we introduce this, we will email you at least 48 hours before anything is deleted.

8. Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Erase your data. You can delete files yourself from your library, or delete your whole account from My Account in the app.
• Withdraw consent at any time, by deleting your account.
• Nominate another person to exercise these rights for you if you die or become incapacitated.
• Complain to us, and if you are not satisfied, to the Data Protection Board of India, as the law provides.

To exercise any right you cannot use yourself in the app, email help@fabcv.com. We will reply within 30 days.

9. Security

We take reasonable steps to protect your data:

• Data is encrypted in transit using HTTPS, and stored files are encrypted at rest by our storage provider.
• Files are stored with access controls that restrict each file to the account that owns it.
• Passwords are hashed by our authentication provider and are never stored in readable form.
• Our secret keys, including those for the AI service and payments, are held on our servers and are never placed in the pages your browser loads.
• Requests to the AI service need a signed-in account and are limited in size.
• Your card details never touch our systems.

No system is perfectly secure. If a breach puts your personal data at risk, we will tell you and the Data Protection Board of India promptly, and within the time the law sets.

10. Children

FabCV is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

11. Cookies and similar technologies

We use only what is needed to run the service. Your browser stores a session token so you stay signed in between visits. Our payment provider, Razorpay, loads its own script in the app and may set its own cookies or read device details to prevent fraud. Google loads its own sign-in script on our home page and in the app, to offer Continue with Google, and may set its own cookies to run it. We do not use advertising cookies, analytics profiling or third-party trackers of our own.

12. Changes to this policy

If we make a material change, we will update the date at the top of this page and tell you by email or through a notice in the app before the change takes effect. If you continue to use FabCV after that, you accept the updated policy.

13. Contact and grievances