Data Protection Notice (DPDP Act 2023)

For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the Data Fiduciary is the operator of SkillBridge, reachable at khandsiyahimanshu@gmail.com.

• Personal data contained in your resume PDF — name, contact details, education, work history, skills, projects.
• Free-text job description content you paste (which may or may not contain personal data of others).
• Technical metadata: IP address, timestamps, user-agent — collected in server logs for security.

We process your personal data only for the following specified purposes, with your consent given when you accept the Terms popup before using the analyzer:

• parsing your resume into structured skill data;
• comparing your profile against the job description and generating a gap report;
• generating a learning roadmap;
• keeping the Service available, secure, and free of abuse (legitimate use).

Your consent is free, specific, informed, unconditional, and unambiguous. You may withdraw it at any time — see Section 7.

SkillBridge is intended for users 18 years and above. We do not knowingly process the personal data of a child or of a person with disability who has a lawful guardian.

To produce your report we share your inputs with the following Data Processors, who process the data on our behalf under their terms:

• Groq, Inc. (United States) — primary LLM inference.
• Google LLC (United States) — Gemini API fallback.
• Vercel Inc. (United States) — application hosting.

By using SkillBridge you acknowledge that your inputs will be transferred outside India for processing by these providers. Such transfers are made consistent with Section 16 of the DPDP Act.

Resume PDFs are processed in memory and discarded after the response. Generated reports are not stored on our servers. Server access logs are retained for up to 30 days for security and abuse prevention, after which they are deleted.

Under the DPDP Act you have the right to:

• obtain a summary of the personal data being processed and the processing activities (right to access);
• request correction, completion, updating, or erasure of your personal data;
• nominate another individual to exercise your rights;
• withdraw your consent at any time, as easily as it was given;
• grievance redressal through the channel in Section 8 below before approaching the Data Protection Board of India.

Because we do not retain your resume after the request, an access or erasure request will typically only apply to server logs.

For any grievance regarding the processing of your personal data, contact our Grievance Officer:

• Name: Himanshu Prajapati
• Email: khandsiyahimanshu@gmail.com
• Response time: within 30 days of receipt.

Under Section 15 of the DPDP Act, you agree:

• not to impersonate another person while providing personal data;
• not to suppress material information when providing your data;
• not to register a false or frivolous grievance or complaint;
• to provide only verifiably authentic information when exercising your rights.

We use reasonable technical and organizational measures — HTTPS transport, in-memory processing, and minimal data retention — to protect personal data against unauthorized access, disclosure, or loss. In case of a personal-data breach, we will notify the Data Protection Board and affected Data Principals as required by the DPDP Act.

We may update this notice. The “last updated” date at the top reflects the current version.