Privacy Policy

Last Updated: June 30, 2026

Your Data, Explained Clearly

You trust Starthack.io with your resume, your voice, and your career data. We take that seriously. This Privacy Policy explains exactly what we collect, how we use it, who sees it, and what control you have — in clear language, with the legal rigour required.

Starthack.io ("we," "us," "our") is a product of Starthack.io Pvt Ltd, a company incorporated in India. This policy governs all data shared with us when you use our platform to evaluate your profile and prepare for interviews.

1. Information We Collect

1.1 Account & Authentication Data

Identity Information:Name, email address, profile picture (provided via Google or GitHub OAuth)
Authentication Tokens:OAuth session tokens for secure login — we never store third-party passwords

1.2 Evaluation Data

Resume Content:Full text extracted from your uploaded PDF — work history, skills, projects, education
Target Role:The job title or position you are evaluating yourself against
AI Reports:Generated scores, skill assessments, role alignment analysis, credibility findings

1.3 Interview Data

Audio Recordings:Your spoken responses during the AI voice interview
Transcripts:Auto-generated text from your interview audio
Performance Metrics:Scoring signals, response timing, topic coverage, and assessment results
Session Snapshots:Screen captures taken during the interview for integrity verification

1.4 Technical & Usage Data

Usage Patterns:Features used, pages visited, session timestamps, interaction events
Device Information:IP address, browser type, operating system, device identifiers
Payment Confirmation:Transaction ID and confirmation status from Razorpay — we never receive or store card details, UPI IDs, or banking credentials

2. How We Use Your Data

2.1 Delivering the Core Service

Parse, analyse, and evaluate your resume against your stated target role
Conduct the AI voice interview with resume-specific questions
Generate your evaluation report, scores, and preparation plan
Enable shareable report links when you choose to share
Enforce daily evaluation limits and prevent platform abuse

2.2 AI Model Training & Improvement

This provision is material to our agreement. Please read carefully.

All evaluation data generated through your use of Starthack.io — including resume content, AI analysis outputs, interview transcripts, scoring signals, and performance metrics — may be used to train, calibrate, and improve our AI models.

This data is used for:

Training resume evaluation and credibility detection models
Improving interview question generation quality
Calibrating scoring rubrics across roles and seniority levels
Benchmarking skill signals across technology stacks
Developing new evaluation capabilities

Anonymisation: Data is anonymised and de-identified before entering training pipelines. Your name, email, and direct personal identifiers are stripped. Technical and behavioural signals are what our models learn from.

By using Starthack.io, you provide informed consent to this use of your evaluation data.

2.3 Operations & Support

Responding to support inquiries
Diagnosing and resolving platform issues
Detecting and preventing fraud or misuse
Enforcing our Terms of Service

2.4 Legal Compliance

Complying with applicable Indian law and regulations
Responding to lawful government requests
Maintaining financial records as required by tax law

3. Data Sharing & Disclosure

We May Share With:

Infrastructure Providers: Cloud hosting, AI processing, and storage services — bound by contractual data protection obligations
Payment Processor (Razorpay): Transaction processing only — PCI-DSS compliant
Legal Authorities: When required by Indian law, court orders, or regulatory directives
Your Chosen Recipients: Only when you explicitly share your report link

We Do NOT Share With:

Employers or recruiters (unless you share your link)
Advertising or marketing networks
Data brokers or data resellers
Any third party without a direct operational necessity

Your report is yours. We generate a private link. We do not distribute your evaluation results to anyone without your explicit, voluntary action.

4. Data Retention

Data Type	Retention Period
Account & profile information	Duration of active account
Resume / CV content	12 months from last evaluation, or until deletion
Interview audio recordings	30 days, then permanently deleted
Interview transcripts & scores	12 months from evaluation date
Evaluation reports	12 months via your report link
Anonymised training data	Retained indefinitely for model improvement
Payment records	7 years (Indian tax law requirement)

Account deletion removes your personal information within ninety (90) days. Anonymised, de-identified training data derived from your evaluations may persist within our models as it cannot be individually extracted.

5. Data Security

All data encrypted in transit via HTTPS/TLS
Data encrypted at rest using industry-standard AES-256 encryption
Authentication via OAuth 2.0 — platform passwords are never stored
Interview audio stored in isolated, access-controlled environments
Regular security reviews and access auditing
Razorpay processes payments under PCI-DSS Level 1 compliance

While we implement commercially reasonable security measures, no system is impervious. We cannot guarantee absolute security but will promptly notify affected Users in the event of a data breach as required by applicable law.

6. Your Rights & Data Controls

You Have the Right To:

Access — Request a copy of all personal data we hold about you
Correction — Request correction of inaccurate account information
Deletion — Request deletion of your account and associated personal data
Download — Export your evaluation reports
Opt-Out — Unsubscribe from non-essential communications

Limitations:

You cannot opt out of anonymised evaluation data being used for model training. This is core to how the product functions and how we maintain service quality and affordability.
Certain data may be retained beyond deletion for legal compliance (e.g., payment records for 7 years under Indian tax law).

How to Exercise Your Rights — Account Deletion

To request account deletion or exercise any data rights, join our official Discord server and submit a deletion request to our moderators. This is currently the only supported channel for account deletion.

Join our Discord Server

We process deletion requests within fifteen (15) business days of verification.

7. Children's Privacy

Starthack.io is intended solely for Users aged eighteen (18) years and older. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has created an account, we will promptly delete the account and all associated data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

Material changes will be communicated via email or platform notification
Significant revisions will be announced at least thirty (30) days before taking effect
Continued use of Starthack.io after the effective date constitutes acceptance

9. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable IT regulations.

10. Contact Us

General: founders@starthack.io

Privacy: founders@starthack.io

Deletion Requests: Discord Server

Address: Dehradun, Uttarakhand, India

TL;DR

We collect your resume, interview responses, and evaluation data to deliver the service
Anonymised evaluation data is used to train our AI — this is how we stay accurate and affordable
We never sell your data or share your report without your explicit action
Interview audio is deleted after 30 days
Razorpay handles payments — we never touch your card or bank details
Account deletion is handled via our Discord server
Governed by Indian law (DPDP Act 2023)

This Privacy Policy is effective as of June 30, 2026 and supersedes all previous versions.