Privacy Policy

We collect only what we need to run the service. Each category below is collected for the stated purpose and is not used for anything else without your consent.

a. Account and sign-in data — your name, email address, profile photo and the identifier supplied by your sign-in provider. Purpose: to create and secure your account, sign you in, and contact you about your account.

b. Resume content — everything you type, paste or upload into AceDraft: your work history, education, skills, contact details on the resume itself, and any job description you paste in for analysis. Purpose: to generate, store, analyse, score and export your resumes. Please note this content is sent to third-party AI providers for processing — see section 3.

c. Payment data — the fact, amount, currency and status of your purchases, plus the reference our payment provider gives us. Purpose: to sell you credits, issue receipts, handle refunds and meet our accounting obligations. We never see or store your card, UPI or net-banking credentials — those go directly to our payment provider.

d. Payout data — if, and only if, you take part in our Referral or Creator programs and choose to be paid, the bank or transfer details you supply, your account holder name and country. Purpose: to pay you. These details are shared with our payments partner solely to make that payment. We may also need your tax identification (for example PAN) where the law requires us to deduct tax at source.

e. Creator program data — if you apply to the Creator Program, the channel or website address you submit and the public URLs you submit as proof of work. Purpose: to assess your application and verify your submissions. We fetch the public pages you submit, and re-fetch them periodically to confirm the content is still live, and we send the channel address to a third-party ranking service to assess it.

f. Usage and device data — pages viewed, features used, actions taken, approximate country, browser and device type, session timestamps, and IP address at the point of sign-in and of security checks. Purpose: to keep the service working and secure, to prevent abuse and fraud, and to understand which features are useful.

g. Support and communications — the content of support tickets, disputes and emails you send us. Purpose: to answer you and keep a record of the issue.

h. Marketing preferences — whether you have opted in to updates or waitlist emails. Purpose: to send only what you asked for. Marketing consent is always separate, unticked by default, and withdrawable.

We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

We process your data on the basis of the consent you give when you create an account and when you use a specific feature, and for the legitimate uses permitted by law — for example, providing the service you have asked for, complying with a legal obligation, and preventing fraud or misuse. Where we rely on consent, you can withdraw it at any time (see section 6).

We do not sell your personal data, and we do not share it for third-party advertising. We share it only with the service providers below, only to the extent each needs it to do its job, and under contract.

• OpenAI and Google (Gemini) — AI processing. The resume content and job descriptions you submit are sent to these providers to generate, rewrite, analyse and score your resume. Do not paste anything into AceDraft that you would not want processed by an external AI provider.
• Google — sign-in with Google (see section 4).
• Razorpay — payment processing and refunds.
• Wise — sending referral and creator payouts, where you have asked to be paid.
• Cloudflare — website delivery and the Turnstile bot check that protects our sign-up and forms.
• Zoho — product analytics (Zoho PageSense), transactional email, and workflow automation.
• OpenPageRank — assessing the public website or channel submitted in a Creator Program application.
• Font and script delivery networks used to load the page.
• Our auditors or professional advisers, where they need it to advise us.
• Government, regulatory or law-enforcement authorities, where we are legally required to disclose.

Some of these providers are located outside India and your data may be processed abroad, in accordance with applicable law.

1. When you sign in with Google we receive your email address, name, profile picture and a Google account identifier. We use these only to create and secure your AceDraft account, to identify you when you return, and to contact you about your account.
2. We store this data in our own database within the protected area of the application and protect it with the same safeguards as the rest of your account data.
3. AceDraft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
4. We do not sell Google user data, do not use it for advertising, and do not allow humans to read it except where you explicitly ask us to for support, where required by law, or for security purposes such as investigating abuse.
5. If we ever change how we use Google user data, we will tell you and ask for your consent before the new use begins.
6. You can disconnect AceDraft from your Google account at any time in your Google account settings, and you can ask us to delete the data we hold (see section 6).

We use cookies and browser storage to keep you signed in, to remember your preferences, to run the Turnstile bot check, and to measure how the product is used through Zoho PageSense. If you arrive through a referral link, the referral code is stored in your own browser's local storage so the referral can be attributed — it is not a server-set tracking cookie. You can block or clear cookies and storage in your browser, but parts of AceDraft will not work if you do. We do not run third-party advertising or retargeting pixels.

Subject to applicable law, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed.
• Correction and completion — have inaccurate or incomplete data corrected or completed. You can edit most of your data directly in the app.
• Erasure — ask us to delete your personal data where we are no longer required to keep it.
• Withdraw consent — withdraw consent at any time, as easily as you gave it. Withdrawing consent does not affect processing already carried out, and we may then be unable to continue providing the service.
• Nominate — nominate another person to exercise your rights in the event of your death or incapacity.
• Grievance redressal — complain to us about how we handle your data (see section 9).

To exercise any of these, email [email protected] from your registered address. We may need to verify your identity before we act. We are not responsible for the accuracy of data you supply to us.

• Account and resume content — for as long as your account is open. If you delete your account or withdraw consent, we erase it, except where we are required to keep something by law.
• Payment, refund and payout records — kept for as long as tax and accounting law requires, even after your account closes.
• Referral and creator program records — kept while the programs are running and for as long as needed to settle or audit any reward arising from them.
• Security and abuse records — kept for as long as needed to protect the service.
• Support correspondence — kept for as long as needed to resolve the matter and handle any follow-up.

We take reasonable technical and organisational measures to protect your data, including encrypted transport, access controls on our administrative tools, and audit logging of administrative actions. No system is completely secure, and we cannot guarantee absolute security.

If a personal data breach occurs, we will notify the affected users and the Data Protection Board of India as required by law, and tell you what happened and what you can do about it.

If you have a question, concern or complaint about this Policy or about how we handle your data, contact:

Grievance Officer, AceDraft
Email: [email protected]
Please put "Grievance" in the subject line.

We will acknowledge your complaint within 24 hours and resolve it within 15 days of receipt. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

See also our Terms & Conditions, Cancellation & Refund Policy, Referral Program Policy and Partner Program Terms.

This Policy is governed by the laws of India and is subject to the exclusive jurisdiction of the courts in BANGALORE NORTH, Karnataka.