We hold other people's documents. Here's exactly how.

Checking your resume (free tool)

What we process: the resume file you upload. Contact details are stripped, the text is split into phrases and compared against our index, and the result is returned to you. The index is made of resumes from openly licensed public datasets, reference resumes we generated, and real resumes that people have submitted and allowed us to include. Only phrase counts are used — no resume from the index is ever shown to anyone through the score.

What we keep: not the file, not its text, not its lines. We record only the outcome of the scan — the number of lines scored and matched, the percentage, a one-way hash of your IP address (for rate limiting and abuse prevention), the referring page, and whether you generated a share card.

Share card: to draw your card, your browser sends the lines back to us once; the image is generated and returned immediately and nothing is stored. Share links show only your count, never your resume.

Why: to give you the result you asked for (your consent, given by uploading), and to understand whether the tool works.

Resume submissions

What we collect: your resume; a screenshot or PDF of your offer (we ask you to hide salary); the company, role, year and whether you were a fresher; optionally your college and city; and your email address.

Two separate consents. Each is optional, unticked by default, and recorded on its own:

• Index consent — we may add the phrases of your anonymised resume to the index behind Twin Score. People see counts; nobody can read your resume through it.
• Public consent — we may show your anonymised resume to other job seekers, alongside company, role, year, level and college tier. This may be part of a paid library.

Anonymisation: before your resume is used in either way, we remove your name, phone number, email address, links, exact dates (years remain), photo, address, date of birth and family details. A person reviews every redaction before approval. Your college is shown only as a tier.

Offer proof is used only to verify that the offer is real. It is never published and is deleted once your submission is reviewed.

Retention: your original file and proof are deleted when your submission is approved or rejected. For rejected submissions we keep only the non-document details (company, role, year, status, reason) for our records. Approved anonymised resumes are kept until you withdraw consent or ask us to delete them. Your email is kept only so the deletion link can work and so we can reach you about your submission.

Waitlist and purchases

If you join the waitlist we store your email, the company you're aiming for (if you give one) and where you signed up, only to tell you when paid features open. One email; unsubscribe by replying.

If paid features are available and you buy one, payment is handled by Razorpay. We never see your card, UPI or bank details. We receive your email, the product, the amount and Razorpay's order and payment IDs, which we keep as required for tax and accounting records. There are no user accounts; your email and order ID are how we recognise a purchase.

Who else touches it

We use a small number of service providers (Data Processors) who process data only on our instructions:

• Vercel — hosting and running the website.
• Resend — sending the confirmation email with your deletion link.
• Razorpay — payments, if you buy something.

Some of these providers may process data outside India. We do not sell or rent personal data to anyone.

Your rights under the DPDP Act

• Access — ask what personal data we hold about you and how it's been used.
• Correction and completion — ask us to fix anything inaccurate.
• Erasure — ask us to delete your data (or use your deletion link).
• Withdraw consent — at any time, as easily as you gave it. Withdrawal doesn't affect processing that already happened, but we stop from then on.
• Grievance redressal — complain to us, and if you're not satisfied, to the Data Protection Board of India.
• Nominate — name someone to exercise these rights on your behalf in case of death or incapacity.

How to withdraw consent or delete

Fastest: open the deletion link from your confirmation email (it looks like getshortlisted.in/delete/…) and press the button. It immediately and permanently deletes your submission, your files, any published anonymised copy, and removes your resume's phrases from the score index.

Lost the link, or want to withdraw only one consent? Email privacy@getshortlisted.in from the address you submitted with, and tell us what you'd like. We'll act within 7 days and confirm by email.

Children

Get Shortlisted is meant for people aged 18 and over. We don't knowingly accept submissions from anyone younger. If you believe a child has submitted a resume, write to us and we'll delete it.

Security and breaches

Uploaded files are served only to our reviewer behind a password. IP addresses are stored only as one-way hashes. Resume text is never written to logs. If a personal data breach happens, we will inform affected people and the Data Protection Board as the DPDP Act requires.

Grievances and contact

Grievance Officer, Get Shortlisted — privacy@getshortlisted.in. We respond within 7 days. We'll post changes to this policy on this page and update the date at the top; if a change affects how we use a submission you've already made, we'll email you.

Back to submitting · Twin Score