Privacy Policy

Your account: your name, email address, and how you sign in. If you use a password, it is held by our sign-in provider (Amazon Cognito) and never visible to us; if you use Google, we receive your name and verified email from Google.

What you give us: your onboarding answers (college, degree, goals and similar), the resumes you build, job descriptions you paste for tailoring, and settings you choose.

Payments: when you buy Sursum Career we keep an order reference, the amount, the status and the time. You pay on the UPI payment page; we never see your UPI PIN, your bank login or your bank balance.

Technical data: your IP address and basic device information in server logs, used to keep the service secure and to limit abuse. Your browser stores a sign-in token and preferences on your device.

We do not use advertising trackers or sell data to advertisers.

To run the product: save your resumes, build and export your PDFs, tailor a resume to a job, and give you the plan you paid for.

To keep it safe and fair: detect abuse, limit how much AI each account can use per day, and investigate payments that need checking.

To contact you about your account or a payment. We will only send you product news if you joined the waitlist or asked for it, and you can ask us to stop.

When you ask the AI to help, the relevant text (for example your resume and a job description) is sent to an AI provider such as Google (Gemini), Anthropic or OpenAI, which writes the response. If you add your own API key in Settings, your requests go to the provider under your own key and that provider's terms.

We do not sell your content, and we do not use it to train our own models. The AI providers handle what they receive under their own terms and privacy policies, which we do not control.

Other services that handle data for us: our database host (Supabase), our server host (Amazon Web Services), our sign-in provider (Amazon Cognito) and, for Sursum Career payments, our UPI payment gateway. Some of these may store or process data on servers outside India.

We may disclose information if the law requires it.

We keep your account and content until you delete your account. You can do that yourself in Profile → Delete account; it removes your profile, resumes, settings and saved keys from our systems straight away, and from backups as they expire (within 90 days).

Payment records are the exception. Accounting and tax law require us to keep them (currently up to 8 years). When you delete your account they are disconnected from you: what remains is an order reference, an amount and a date.

Waitlist emails are kept until you ask us to remove them.

You can ask to see what we hold about you, correct it, export it (Profile → Export data), or have it erased. Under India's Digital Personal Data Protection Act, 2023 you can also withdraw consent and nominate someone to exercise these rights for you.

Write to [email protected]. We aim to answer within 30 days. That address is also our grievance contact; if we don't resolve your concern you may complain to the Data Protection Board of India.

Sursum is for people aged 18 and over. If you are younger, please don't create an account; if we learn that we hold a younger person's data we will delete it.

If we change this policy in a way that matters we will say so in the app or by email before it takes effect. The date at the top shows when it was last updated.