Privacy Policy

Last updated: 19 May 2026

1. Who we are

AxelHired is a job-application automation product operated by Sharpe Holdings Private Limited, a company incorporated under the Companies Act, 2013 (registered office in India; CIN on request). We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP) and process personal data of users (Data Principals) who sign up to use our service.

2. Data we collect

• Identifiers you provide: name, email, phone, LinkedIn URL.
• Profile data: resume PDF, current and expected CTC, notice period, work eligibility, location.
• Job-board credentials (Naukri, LinkedIn, etc.) you choose to add to the Vault — encrypted at rest using AES-256-GCM with a master key stored outside the database.
• Application history: jobs you applied to, status, screenshots of the confirmation page.
• Operational telemetry: error logs and request traces, scrubbed of personal identifiers where possible.

3. Purpose and lawful basis

We process the data above with your explicit consent, for the sole purpose of operating the application-automation service you signed up for. We do not sell your data, share it with advertisers, or use it to train machine-learning models that operate outside your account.

4. Where your data is stored

All personal data lives in Supabase Mumbai (ap-south-1). Backups remain within the same region. Worker compute that drives the browser submissions runs on Hetzner cloud servers.

5. Third-party processors

• Firebase Authentication — sign-in identity.
• Razorpay — payment processing.
• Google Cloud (Gmail API) — only with your OAuth grant, only to read OTP emails during apply.
• Vercel AI Gateway — large-language-model calls for resume tailoring and screening-question answers. Inputs are subject to provider zero-data-retention agreements.

6. Chrome extension

Our optional Chrome extension activates only on job-board domains you visit (LinkedIn, Naukri, Workday-hosted career sites, Greenhouse, Lever, Ashby, etc.). It reads the page DOM to detect "Apply" buttons and the job description, and posts that to axelhired.com over HTTPS using your authenticated session — never to a third party. It does not read content on unrelated sites, does not log your browsing history, and does not have access to your cookies or passwords on the sites it activates on. You can disable or uninstall the extension at any time from chrome://extensions; doing so does not affect your account.

7. Your rights (DPDP §11)

• Access — see every piece of data we hold about you at /dashboard/settings/account.
• Correction — edit profile fields any time from settings.
• Erasure — delete your account from settings; we purge personal data within 7 days.
• Grievance — write to privacy@axelhired.com within 30 days for any DPDP complaint.
• Nominate a Consent Manager — supported when one is operational under the DPDP framework.

8. Retention

Active accounts: data retained as long as the account exists. Inactive accounts (no login for 18 months): we email you 30 days before purging. Deleted accounts: personal data purged within 7 days; aggregated analytics (no PII) may be retained.

9. Security

Row-level security on every PII table, AES-256-GCM envelope encryption for credentials, audited service-role access for system writes only, TLS in transit, and per-incident postmortems published when appropriate. We commit to notifying you within 72 hours of any confirmed personal-data breach affecting your account.

10. Children

AxelHired is intended for users 18 years or older. We do not knowingly process data of children below 18.

11. Changes to this policy

We will email registered users 14 days before any material change to this policy.

12. Contact

Grievance Officer — privacy@axelhired.com. Postal address — see Terms.