Privacy & Consent Settings

Who we are

Growmycareer.io is operated by SC Labs, an Indian proprietorship registered in Meerut, India. Contact: support@growmycareer.io.

What we collect and why

• Account data — your name and email from Google Sign-In. Used solely to identify your account.
• Career profile — role, skills, salary, experience you enter. Used to generate your Career Health Score, salary benchmarks, and skill gap analysis.
• Resume data — text extracted from uploaded files. Used for ATS analysis and health check. File bytes stored only with your consent.
• Usage data — pages visited, features used. Used to improve the product. No cross-site tracking.
• Payment data — processed entirely by Razorpay. We store only your subscription status, never card details.

AI processing

Career analysis is powered by large language models (Google Gemini). Your data is sent to the AI provider under a zero-retention data processing agreement — it is never used to train their models. All AI outputs are labelled AI-estimated in the product.

Authentication

We use Google Sign-In (OAuth 2.0). We receive a verified email and display name only. No passwords are stored by us. Your refresh token is stored in a secure HttpOnly cookie scoped to this domain.

Cookies and storage

We use one authentication cookie (HttpOnly, Secure, SameSite=Strict) for session management and browser sessionStorage for temporary UI state. We do not use advertising or third-party tracking cookies.

Data sharing

We do not sell your personal data. We share data only with: Google (auth and AI), Razorpay (payments), and our hosting infrastructure — all under data processing agreements. Aggregated, de-identified salary and skill data may be used for market benchmarks.

International users

Our servers are located in the EU (Google Cloud). If you access the platform from the EU, UK, US, or anywhere else, data transfer is covered under Google Cloud's Standard Contractual Clauses. Indian users are covered under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

Your rights

Under GDPR, UK GDPR, CCPA/CPRA, and India's DPDP Act you have the right to access, correct, export, and delete your data at any time. Use the controls below to manage your consent, or visit Account settings for data export and deletion.

Data retention

Account data is retained until you delete your account. Career profile snapshots are retained for up to 12 months for delta tracking. Resume files are deleted immediately on consent revocation. Aggregated benchmarking data has no personal identifiers and is retained indefinitely.