Privacy Policy

1. Introduction

Zitlee ("Zitlee", "we", "us", or "our") is an interview intelligence and job discovery platform operated by Techdcrypt Services Private Limited, a company incorporated in India with its registered office at C/O Dinesh Prasad Srivastava, Sadhu Chowk, Sareya, Gopalganj, Bihar 841420, India. Techdcrypt Services Private Limited is the data controller (or, where applicable, the data fiduciary) responsible for the personal information described in this policy.

Zitlee is available worldwide. This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it, wherever you are located. It applies to zitlee.com, our sub-domains, and all related services (together, the "Services").

This policy should be read together with our Terms of Service and Cookie Policy. If you do not agree with this policy, please do not use the Services.

Information you provide to us

• Account information: your name, email address and profile picture, received from Google when you sign in with Google Sign-In or Google One Tap
• Profile and professional information: job titles, target roles, companies of interest, skills, experience level and location preferences you choose to provide
• Resume and CV files: PDF or DOCX files you upload for job matching, and the text and structured data extracted from them (work history, education, skills, contact details contained in the document)
• Content you submit: interview experiences and reports, questions, answers, code written in the in-browser editor, mock interview responses, feedback and survey replies
• Saved activity: bookmarks, saved companies and roles, and viewing history within the Services
• Communications: messages you send to support, and your email and notification preferences

Information collected automatically

• IP address and approximate location derived from it (country/city level)
• Browser type and version, device type, operating system and screen settings
• Pages viewed, search queries, features used, referring URLs and time spent
• Log data, error reports and diagnostic information
• Cookies and similar technologies, as described in our Cookie Policy

Information from other sources

We compile company, role and hiring information from publicly available professional sources and from interview reports contributed by our community. We obtain this information lawfully and do not bypass logins, paywalls or technical access controls to collect it. If information about you appears in the Services and you want it removed, contact us at support@zitlee.com.

Information we do not want

We do not ask for special category or sensitive personal data such as race, ethnicity, religion, health, biometric data, government identification numbers, or trade union membership. Please do not include such details in resumes, interview reports or other content you submit. If you do include them, you consent to our processing them as part of that content, and you may ask us to delete them at any time.

• To create and administer your account and authenticate you
• To deliver core features: interview research and company pages, AI search over interview reports, resume-to-role matching, mock interviews, the code editor, bookmarks and job discovery
• To personalise the content, companies and roles we surface to you
• To respond to support requests and communicate about your account
• To send product updates, newsletters and marketing, where you have consented or where permitted by law. You can opt out at any time
• To analyse usage, measure performance and improve the accuracy and usefulness of the Services
• To detect, investigate and prevent fraud, abuse, scraping and security incidents
• To enforce our Terms of Service and comply with legal obligations

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under US state privacy laws.

Several parts of Zitlee are powered by artificial intelligence, including AI search over interview reports, resume-to-role matching, mock interview generation and feedback, and company or role summaries.

• What is processed: the content you submit to those features, such as your search query, resume text or mock interview answers, together with relevant interview reports from our archive
• Who processes it: we use third-party AI service providers and cloud infrastructure providers to run these models on our behalf, under contracts that restrict them to processing data only for our instructions
• Model training: we do not permit our AI service providers to use your personal information to train their general-purpose models
• Accuracy: AI output can be incomplete or wrong. It is informational only, and is not career, legal or financial advice
• No automated decisions with legal effect: we do not use AI to make hiring decisions about you, and no feature of Zitlee produces a decision with legal or similarly significant effects within the meaning of Article 22 GDPR. Match scores and recommendations are suggestions for your own use

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:

• Performance of a contract: to provide the Services you have asked for, including account access, resume matching and mock interviews
• Consent: for marketing emails, non-essential cookies and any optional information you choose to provide. You may withdraw consent at any time
• Legitimate interests: to secure the platform, prevent fraud and abuse, understand how the Services are used, and improve them, balanced against your rights and freedoms
• Legal obligation: to comply with laws, court orders and lawful requests from authorities
• Vital interests: in rare cases, to protect someone from serious harm

If you are in India, we process personal data under India's Digital Personal Data Protection Act, 2023, on the basis of your consent or for legitimate uses permitted by that Act. If you are in Canada, we rely on your express or implied consent, subject to the exceptions permitted under applicable law.

We do not sell, rent or trade your personal information. We share it only in the following circumstances:

• Service providers: vendors who process data on our behalf under written contracts, including cloud hosting and storage, authentication (Google Sign-In), analytics (Google Analytics), AI and machine learning providers, email delivery, error monitoring, and, when paid plans are offered, payment processors
• Within our corporate group: with Techdcrypt Services Private Limited and its affiliates, for the purposes described in this policy
• When you choose to share: content you post publicly, such as an interview report, is visible to other users. You control whether to post it and whether to include identifying details
• Employers and recruiters: we share your resume or profile with an employer only when you apply, opt in to being contacted, or otherwise direct us to do so
• Legal and safety: where required by law or where we believe disclosure is reasonably necessary to protect rights, safety or property, or to investigate fraud or abuse
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply

Zitlee is operated from India and uses cloud infrastructure and service providers located in India, the United States, the European Union and other countries. Using the Services means your information may be transferred to, stored in and processed in countries other than your own, where data protection laws may differ from those in your country.

Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary technical and organisational measures where required.

You may request a copy of the safeguards we use by writing to support@zitlee.com.

We keep personal information only for as long as it is needed for the purposes set out in this policy. In practice:

• Account and profile data: retained while your account is active, and for no longer than twelve (12) months after your account is terminated
• Resume files: retained while your account is active so you can re-run matching, and deleted on request or when your account is deleted
• Usage and analytics data: retained in aggregated or de-identified form, which is no longer linked to you
• Content you posted publicly: may remain visible in anonymised form after account deletion, since other users rely on it

We may retain information for longer where a law, tax or accounting requirement, or an ongoing legal claim requires it. When retention ends, we delete the information or irreversibly anonymise it.

We use technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or destruction, including:

• Encryption of data in transit (TLS) and at rest
• Access controls limiting personal data to staff who need it
• Federated authentication through Google, so we never store your password
• Regular review of our infrastructure, dependencies and access logs

No transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your own device and Google account secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulator where the law requires.

Depending on where you live, you may have some or all of the following rights:

• Access: obtain a copy of the personal information we hold about you
• Correction: have inaccurate or incomplete information corrected
• Deletion: ask us to erase your personal information
• Portability: receive your data in a structured, machine-readable format
• Restriction and objection: limit or object to certain processing, including processing based on legitimate interests
• Withdraw consent: at any time, without affecting processing already carried out
• Opt out of marketing: using the unsubscribe link in any marketing email
• Complain: to your local data protection authority

EEA, UK and Switzerland

You may exercise the rights above under the GDPR or UK GDPR, and you may lodge a complaint with your national supervisory authority or, in the UK, with the Information Commissioner's Office.

United States (California and other states)

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you have the right to know what personal information we collect, to access, correct and delete it, to opt out of targeted advertising, sale or profiling with legal effects, and to limit the use of sensitive personal information.

The categories we collect are: identifiers; customer records; commercial information; internet and network activity; approximate geolocation; professional and employment information; education information; and inferences drawn from the above. We collect these for the purposes in Section 3, and we do not sell or share them for cross-context behavioural advertising.

We will not discriminate against you for exercising these rights. If we deny your request, you may appeal by replying to our decision at support@zitlee.com.

India

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to access a summary of your personal data, to correction and erasure, to nominate another person to exercise your rights, and to grievance redressal. Our Grievance Officer can be reached at support@zitlee.com and at the registered address above, and will respond within the timelines prescribed by law.

How to make a request

Email support@zitlee.com from the address associated with your account. We may ask for information to verify your identity. We respond within 30 days, or within the shorter period your local law requires, and will tell you if we need more time. You may also use an authorised agent where the law permits.

11. Cookies, Analytics and Do Not Track

We use cookies and similar technologies for authentication, preferences, security and analytics. We use Google Analytics to understand aggregate usage. Full detail, including how to control cookies in your browser, is in our Cookie Policy.

There is no common industry standard for responding to browser "Do Not Track" signals, and we do not currently respond to them. Where the law requires it, we honour Global Privacy Control (GPC) signals as a valid opt-out request.

12. Google Sign-In Data

When you sign in with Google, we receive only your basic profile information: name, email address, profile picture and Google account identifier. We use it solely to create and authenticate your account.

Zitlee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not request access to your Gmail, Drive, Calendar or Contacts, we do not use Google user data for advertising, and we do not use it to train machine learning models. You can revoke Zitlee's access at any time from your Google account permissions page.

13. Third-Party Sites and Job Listings

The Services link to third-party websites, employer career pages and job listings that we do not operate. When you follow such a link or apply through it, that third party's privacy policy governs the information you provide. We have no control over and accept no responsibility for their content or practices. We encourage you to read the privacy policy of every site you visit.

14. Children's Privacy

The Services are intended for people seeking or preparing for professional employment and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you are between 16 and 18, you may use the Services only with the consent and supervision of a parent or legal guardian. If we learn that we have collected personal information from a child below the applicable age, we will delete the account and the data. Contact support@zitlee.com if you believe this has happened.

15. Changes to This Policy

We may update this Privacy Policy as our Services and legal obligations evolve. We will post the revised version on this page and update the "Last updated" date. If the change is material, we will give you prominent notice in the Services or by email before it takes effect, and, where the law requires, ask for your consent. Continuing to use the Services after a change takes effect means you accept the updated policy.