Privacy Policy

RIZZUME is operated by Varun Puri, based in Delhi, India. We act as the Data Controller (under GDPR) and Data Fiduciary (under DPDPA) for the information collected through our Services. For any privacy-related questions or to reach our Grievance Officer, see Section 11.

We collect information in three ways: what you give us directly, what we collect automatically, and what we receive from third parties.

2.1 Information you provide directly

• Contact details: name, email address, phone number, current location.
• Career information: resume/CV content, work history, job titles, education, skills, LinkedIn URL, and professional details.
• Equal Employment Opportunity (EEO) Demographic Data (SmartApply Extension): To enable the SmartApply extension to seamlessly auto-fill job applications on Applicant Tracking Systems (ATS) like Greenhouse, Lever, and Workable, you may choose to provide sensitive demographic data. This includes your Gender, Race/Ethnicity, Protected Veteran status, and Disability status. Providing this data is strictly voluntary and opt-in. We collect this solely to populate standard U.S. EEO voluntary self-identification forms (such as EEO-1, VEVRAA, and Section 503) during your application process. RIZZUME does not use this data to evaluate you, and you can erase it from your profile at any time.
• LinkedIn/Portfolio content: profile content you share with us for optimisation.
• Job search preferences: target roles, target companies, application criteria.
• Payment information: billing name and transaction details. Full payment card details are handled directly by providers (e.g., Razorpay, Stripe) and are not stored by us.

2.2 Information collected automatically

• IP address, browser type, device type, operating system.
• Pages visited, time spent, referring/exit pages.
• Cookies and similar tracking technologies.

2.3 Information from third parties

• Application status relayed to us by employers or recruiters as part of our outreach.

We use the information we collect to:

• Deliver the Services, including writing resumes, building portfolios, and submitting job applications.
• Operate the SmartApply Extension: Use your optional demographic and EEO data exclusively to auto-fill voluntary self-identification fields on third-party Applicant Tracking Systems (ATS).
• Communicate with you about deliverables and progress.
• Process payments and comply with legal/tax obligations.

Where data protection law requires a legal basis, we rely on:

• Explicit Consent: For processing special category data (e.g., EEO demographic and disability status for the extension) and for marketing emails. You may withdraw this consent at any time.
• Performance of a Contract: To deliver the core Job Search OS Services.
• Legitimate Interests: To improve our Services and protect our business against fraud.
• Legal Obligation: For tax and accounting records.

We do not sell your personal information. We share it only as needed:

• Prospective Employers (ATS Platforms): When you use the SmartApply extension, your stored application and EEO demographic data is transmitted directly into the employer's Applicant Tracking System (such as Greenhouse or Lever) to complete your application.
• Service Providers: Payment processors, portfolio hosting platforms, and workspace tools (e.g., Google Workspace) that are legally bound to protect your data.
• Legal Authorities: Where required by law or court order.

We retain personal information for as long as needed to deliver the Services. Sensitive plugin data (disability status) is deleted immediately upon uninstallation of the plugin or revocation of consent. Standard application trackers are retained for the duration of your engagement plus a limited administrative period, after which they are anonymised or deleted.

7.1 GDPR (European Economic Area & UK)

If you are located in the EEA or UK, you have the right to:

• Access, Rectify, or Erase: Request a copy of your data or ask us to delete it (the "right to be forgotten").
• Data Portability: Receive your data in a structured, machine-readable format.
• Restrict or Object: Object to processing based on legitimate interests.
• Withdraw Consent: Specifically regarding the disability data collected by our plugin.

7.2 CCPA / CPRA (California Residents)

Under the California Consumer Privacy Act (as amended by the CPRA), California residents have specific rights:

• Right to Know & Delete: Request details about the personal information we collect and request its deletion.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use your sensitive data (like disability status). We only use this data to perform the services reasonably expected by you when using the plugin.
• Do Not Sell or Share: We do not sell your personal information or share it for cross-context behavioural advertising.

7.3 DPDPA (India)

Under the Digital Personal Data Protection Act, 2023, Data Principals in India have the right to:

• Obtain information about their personal data and its processing.
• Request correction, completion, or erasure of their personal data.
• Withdraw consent at any time (via our Grievance Officer or Consent Managers).
• Access a readily available means of grievance redressal.

We implement strict technical and organisational measures to protect your information. Sensitive data (such as disability status) is encrypted at rest and in transit. Access is strictly limited on a need-to-know basis.

Our Services are intended for working professionals over 18. We do not knowingly collect personal information from minors.

Our Referrals feature helps job seekers reach the people who hire at companies that are hiring on RIZZUME. This section is for those people. If you are listed, you may not be a RIZZUME user, so here is what we hold about you and how to have it removed.

What we list: your name, job title, company, and work email address. Members see only your last name and job title until they choose to unlock your full name and work email. We do not list shared company inboxes such as careers@ addresses. We also link to public posts in which people offer referrals.

Where it comes from: public sources, such as company websites, careers pages and public professional profiles and posts, or a work address built from the company's verified email pattern. We check addresses with an email verification service and do not list personal email addresses.

Why: to help job seekers contact the right hiring team about a real open role. Our legal basis is legitimate interests (GDPR Article 6(1)(f)). We do not sell this information or use it for advertising.

Your choices: you can ask us to remove your details at any time, and you have the rights set out in Section 7. Use the Remove my details page, or email support@rizzume.app with the subject "Remove my details from Referrals". Once removed, your details are hidden from Referrals, and we keep only a suppression record (your email address and the date) so that they are not added again. We aim to act within 7 days.

To exercise any of your privacy rights, or to contact our Grievance Officer (as required under the DPDPA), please reach out to:

Varun Puri (Grievance Officer)
RIZZUME, Job Search OS
Delhi, India
Email: support@rizzume.app

We aim to acknowledge all requests within 48 hours and resolve them within the timelines mandated by your local data protection laws (e.g., 30 days for GDPR, 45 days for CCPA).