Privacy Policy

1. Information We Collect

To provide AI-driven resume optimization and interview evaluation services, VayloAI collects and processes the following information:

• Account Information: Your full name, email address, profile avatar, and login credentials managed via Supabase Authentication.
• Career Materials: Uploaded resume content, text extracts, target job descriptions, work experience, and bullet points.
• AI Inputs & Outputs: Queries submitted to AI features, ATS match analysis results, cover letters, and STAR interview transcripts.
• Payment Information: Payment reference numbers (UTR), plan type, transaction timestamp, and optional payment proof screenshots. Raw credit card numbers are never stored on VayloAI servers.
• Usage Data: Log data including feature access timestamps, browser type, and diagnostic error reports.

2. How We Use Your Information

We process your information for the following legitimate business purposes:

• Generating ATS compatibility scores, keyword match analysis, and resume improvement suggestions.
• Powering AI features including Cover Letter generation, STAR Voice interview practice, and Recruiter eye-screen simulations.
• Managing subscription plan entitlements, usage limits, and account access controls.
• Dispatching essential transactional notifications and payment updates.

3. AI Processing via Google AI Services

AI processing on VayloAI occurs through our securely configured Google AI (Gemini) service integration. Resume text and job description content sent to the AI service are used solely for generating application recommendations during your active session.

4. Third-Party Service Providers

We rely on trusted third-party infrastructure providers to operate the platform securely:

• Supabase: For cloud database hosting, user authentication, and secure encrypted file storage.
• Google Cloud / Gemini AI: For automated language model inference and evidence matching.
• UPI & Razorpay Payment Networks: For secure payment transaction processing.

5. Data Security Measures

VayloAI implements strict technical and organizational security measures, including 256-bit SSL encryption in transit, Supabase Row Level Security (RLS) policies, and server-side authorization guards to prevent unauthorized access to your resume records.

6. Data Retention & Account Deletion

We retain your career materials as long as your account remains active. You have the right to request full account and resume data deletion at any time by contacting support or selecting account deletion in Settings.

7. Your Privacy Rights

Depending on your jurisdiction, you have the right to access, correct, download, or delete your personal data stored on VayloAI.