Privacy Policy

1. Who we are

CareerEzi (https://careerezi.com) is operated by Fynity Innovations, Chennai, Tamil Nadu, India ("we", "us"). For the processing described here we are the Data Fiduciary under the DPDP Act.

Your college (the "Institution") creates your account and decides to use CareerEzi for its training and placement activities. The Institution is separately responsible for the data it gives us and for how its own staff use the reports they can see on the platform. Where we act only on the Institution's instructions, we do so under a written agreement with it.

2. Personal data we collect

2.1 Provided by your Institution when your account is created

• Name, college email address, college, branch, section, roll number and year of passing out.
• Academic record used for placement eligibility: 10th and 12th percentage, CGPA, active backlogs, backlog history, gap years, placement status, admission category, and an emergency contact.

2.2 Provided by you

• Password (stored only as a one-way bcrypt hash; we cannot read it).
• Optional profile details: phone number, date of birth, gender, profile picture, LinkedIn and GitHub links, and a public username.
• Resume Builder content, which may include education, work history, projects and skills.
• Usernames for coding platforms you choose to connect (GitHub, LeetCode, HackerRank).
• Posts, comments and likes on your college feed; feedback you send us; off-campus offers and profile-correction requests you submit to your Institution; placement-drive registrations.
• Messages sent through the contact form on our website (name, email, phone, message), including from people who do not have an account.

2.3 Created as you use the platform

• Lesson progress, quiz (MCQ), assignment and aptitude attempts and scores, coding submissions and results, certificates earned.
• Points, streaks, level, leaderboard rank and active-time statistics.
• AI features ("Saarthi"): mock-interview transcripts, interview reports and scores, and personalised study plans, together with usage records (feature used, time, token count).
• Technical data: IP address, browser and device type, log-in times and security logs.

2.4 What we do not collect

• Camera: in the AI interview room the camera is a self-view on your own screen only. No video or image is sent to or stored by us.
• Microphone: voice answers are converted to text by your web browser's built-in speech-recognition feature, and only the text reaches us. Depending on your browser, the browser vendor (for example Google for Chrome or Microsoft for Edge) may process the audio on its own servers under its own privacy policy. If you prefer, type your answers instead.
• We do not collect payment card or bank details. Fees, where charged, are paid by Institutions under a separate contract.
• We do not sell personal data and do not use it for third-party advertising.

3. Why we use your data

We use automated scoring to grade assessments and AI to give interview feedback. These are practice aids; they are not used to make placement or hiring decisions about you without human review by your Institution.

4. Who we share data with

• Your Institution — its authorised administrators see your profile, academic record, progress, scores, placement activity and reports so they can run training and placements.
• Other students in your college — see your name, avatar, leaderboard position and anything you post on the college feed.
• The public — only if you switch on your public portfolio, and only what it displays. Certificates can be verified by anyone who has the certificate ID or QR code.
• Recruiters — only when your Institution shares your details for a placement drive you registered for.

We use the following service providers (Data Processors), bound by contract to use the data only to provide their service to us:

We may also disclose data where required by law, court order or a lawful request from a government authority, or to protect the rights and safety of users. If our business is merged or transferred, your data may move to the successor, which will be bound by this policy.

5. Transfers outside India

Some of our providers store or process data outside India, as listed above. Section 16 of the DPDP Act permits this except to countries the Central Government restricts by notification; we will stop or relocate any transfer that becomes restricted. We choose providers that apply security safeguards at least as strong as those described in section 7.

6. How long we keep data

• Account and learning data — while your account is active, and for up to 12 months after your Institution's contract ends or your account is deactivated, so that you can still obtain certificates and records. It is then erased or anonymised.
• Certificate records — the ID, name, course and date are kept for as long as verification is offered, so third parties can confirm a genuine certificate.
• AI interview transcripts — for as long as the account data above, or until you ask us to erase them (section 8).
• Contact-form messages — up to 12 months after the enquiry is closed.
• Security and access logs — at least one year, as required by the DPDP Rules, 2025, and then deleted.
• Data we are required to keep by law (for example, for tax or a legal dispute) is kept only for the period the law requires.

7. How we protect data

We follow reasonable security practices as required by section 8(5) of the DPDP Act and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including encryption in transit (HTTPS), hashed passwords, role-based access controls so that each Institution can see only its own students, short-lived access tokens, rate limiting and access logging. No system is perfectly secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India without delay, as the DPDP Rules require, and report to CERT-In where applicable.

8. Your rights

Under the DPDP Act you can:

• Access a summary of the personal data we hold about you and how it is used, and the identities of those we have shared it with.
• Correct or update inaccurate or incomplete data. You can edit most profile fields yourself; academic fields set by your Institution can be changed through a profile-correction request in the app.
• Erase data that is no longer needed for its purpose, unless the law requires us to keep it.
• Withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing already done. Some features, or the account itself, may stop working without the data they need.
• Nominate another person to exercise your rights if you die or become incapable.
• Raise a grievance with us, and then, if you are not satisfied, complain to the Data Protection Board of India.

To exercise any right, email privacy@careerezi.com from your registered email address. We may need to confirm your identity. We will respond within 90 days at most, and usually much sooner. If your Institution holds the data in its own systems, we will help you raise the request with it.

9. Children

CareerEzi is intended for college students aged 18 and over. If you are under 18, you may use it only with the verifiable consent of a parent or lawful guardian, obtained through your Institution as section 9 of the DPDP Act requires. We do not track the behaviour of, or target advertising to, users under 18. If we learn that we hold a minor's data without valid consent, we will delete it.

10. Changes to this policy

We will update this page when our practices change and revise the "Last updated" date. For material changes, we will notify you in the app or by email and, where the law requires, ask for your consent again before the change applies to you.

11. Contact us

For questions or complaints about this policy or how we handle your data, contact:

We acknowledge complaints within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.