KRIZO Privacy Policy

1. Information We Collect

We may collect the following categories of information:

A. Account Information

When you register or sign in:

• Name
• Email address
• Login credentials
• Authentication provider details (such as Google login)

B. Profile Information

Information you choose to add to your profile, such as:

• Education details
• Skills
• Experience
• Career interests
• Projects
• Certifications

C. Resume & Document Data

When you upload resumes or documents:

• Resume files
• Parsed text extracted from files
• Career history voluntarily included by you
• Skills, education, and experience data derived from uploads

D. Usage Information

Information about how you use KRIZO, such as:

• Features used
• Job roles searched
• Tool interactions
• Session activity
• Device/browser metadata
• Approximate location based on IP

E. Payment Information

If you purchase plans or credits, payments may be processed by authorized third-party payment partners.

KRIZO does not store your full card, UPI, or banking credentials.

2. How We Use Your Information

We use your information to operate and improve KRIZO, including to:

• Create and manage your account
• Deliver Resume Builder and Job Pack services
• Generate ATS analysis and career recommendations
• Personalize learning and job guidance
• Process purchases and manage subscriptions
• Respond to support requests
• Improve platform reliability and performance
• Detect fraud, abuse, and security threats
• Communicate updates, announcements, and product improvements
• Grow a shared, de-identified Skill & Role Catalog and Market Intelligence packs that power recommendations for you and other students

Building a shared Skill & Role Catalog

When you type a skill into your profile, add a project, or upload a resume, the name of that skill or role may be added to a shared catalog used across the Platform — for search and autocomplete, for matching you against job and internship requirements, and for the market-intelligence features shown to you and other students. This catalog stores only the skill or role name itself; it does not record who added it, so it is unaffected by your account being deleted.

Your onboarding answers guide your own experience while your account is open. If your account is later deleted, the multiple-choice answers are kept afterwards as anonymised statistics — stored under a random identifier with no link back to you or your email — so we can understand trends across all students; anything you typed as free text is deleted outright, not kept.

3. AI Processing & Recommendations

KRIZO uses automated systems and AI-assisted tools to generate suggestions, scores, reports, and career insights.

This may include processing your:

• Resume content
• Profile data
• Job descriptions submitted by you
• Skills and experience information

These tools are intended to support decision-making, not replace human judgment.

We do not guarantee employment outcomes, interviews, admissions, or hiring success.

Who performs this processing

We do not train our own models. AI processing is performed by OpenAI (OpenAI, L.L.C.), acting as our processor under contract.

Content sent for processing includes the material you supply for that feature — most significantly, your resume file is sent in full. Where a resume is a scan or an image-based PDF, the page images themselves are sent so the text can be read. A resume normally contains your name, email address, phone number and location, so you should assume those are included.

We do not send AI providers your password, payment details, or the contents of other students' accounts.

OpenAI does not use data submitted through their business API to train their models.

Where this processing happens

Our AI provider processes data on infrastructure located outside India, principally in the United States. By using AI-assisted features you are sharing your information with a processor in another country. This is permitted under Section 16 of the DPDP Act, which allows transfer other than to countries the Government has specifically restricted.

If your institution requires that student data stay within India, tell us before onboarding — the AI-assisted features are the part that would need to be disabled for your cohort.

4. Marketing Communications

If you choose to receive updates, we may send:

• Product announcements
• Career tips
• Internship/job alerts
• New feature updates
• Promotional offers

You may unsubscribe at any time using the unsubscribe link in any marketing email, from Settings → Privacy & Data, or by contacting support@krizo.ai. Marketing emails are opt-in — enabling this preference never affects account emails like sign-in codes, password resets, or receipts.

5. Cookies & Sessions

We may use cookies, sessions, and similar technologies to:

• Keep you signed in
• Maintain security sessions
• Remember preferences
• Improve performance
• Understand product usage trends

You may control cookies through your browser settings, though some features may not function properly.

6. How We Share Information

We do not sell your personal information.

We may share limited data with trusted service providers who help us operate KRIZO, such as:

• OpenAI — AI processing (resume parsing, scoring, recommendations). United States.
• Cloudflare R2 — storage of uploaded files such as resumes and photos.
• SendGrid (Twilio) — transactional and (if you opted in) marketing email.
• Razorpay — payment processing. Card details go directly to them; we never receive or store them.
• Google — sign-in, if you choose to use it.
• Sentry — error monitoring, configured not to send personal data.
• Hosting and infrastructure providers.

This list is kept current. Several of these providers operate outside India — see section 3 for what that means for AI processing specifically.

These providers may process data only as necessary to deliver services to KRIZO.

We may also disclose information where required by law or to protect rights, users, or platform security.

7. University & College Programs

If your account is part of a university or college program, authorised staff of your own institution (placement cell, assigned mentors, administrators) can see your learning progress — readiness scores, projects, work journals, placement status — to support and place you.

• Your identity is visible only within your own institution. Other institutions and cross-college reports see aggregate numbers only, never your name, email, or records, unless your institution has explicitly enabled data sharing.
• Placement records are maintained by your institution's authorised staff.
• Job-market trend data used by the platform is anonymized and contains no student identity.

8. Data Protection in India (DPDP Act)

For users in India, we process personal data in line with the Digital Personal Data Protection Act, 2023:

• We process your data for the purposes you signed up for — career coaching, skill development, and (for institutional accounts) placement support.
• You may request access to, correction of, or erasure of your personal data at any time (see "Your Choices & Rights" below).
• Your data is stored on secured cloud infrastructure and is never sold.
• For grievances, contact our support team at support@krizo.ai. We aim to acknowledge grievances within 72 hours.

9. Data Retention

We retain information for as long as needed to:

• Maintain your account
• Provide services you request
• Improve security and fraud prevention
• Meet legal, tax, or regulatory obligations

How long we keep things

Closing your account

You can close your account yourself, any time, from Settings → Privacy & Data — no need to email us. We first send a one-time code to your registered email so we know it's really you (not just someone at your already-open browser session) confirming the closure. Once you enter that code:

• Immediately: your account is deactivated, you're logged out of every device and session, and nobody can sign back in to it.
• After a short recovery window (currently 7 days): your personal data is permanently erased — profile, resumes, projects, and every other record tied to your identity. This window exists only in case the closure wasn't really you (for example, a hijacked or still-logged-in session); contact support@krizo.ai before it elapses if you want the closure undone.

Where a record must be kept for a legal reason — a tax invoice, for example — we keep that record and remove the rest, rather than keeping your whole account.

To ask about a deletion request, or if you're not able to access your account to close it yourself, contact support@krizo.ai.

10. Security

We use reasonable technical and organizational safeguards to protect your information.

However, no online system can guarantee absolute security. You are also responsible for protecting your account credentials.

11. Your Choices & Rights

Depending on your region and circumstances, you may request to:

• Access your account information
• Correct inaccurate data
• Delete your account or profile data
• Opt out of marketing emails
• Request support regarding your information

To make requests, contact support@krizo.ai

12. Children / Minors

KRIZO is an 18+ service for anyone who signs up directly. Under the DPDP Act a "Child" is anyone under 18 years of age, and processing a child's personal data requires verifiable parental or guardian consent. We do not knowingly collect or process the personal data of a child who signs up directly, and we do not offer the Platform to them.

Students enrolled through a partner university or institution are an exception. Where a university or institution has a partnership agreement with KRIZO and enrolls a student who is 16 or 17 years of age under that agreement, the institution is responsible for obtaining and holding any parental or guardian consent required under the DPDP Act as part of its own enrollment process. KRIZO relies on that institutional relationship rather than collecting guardian consent itself for these students.

We collect your date of birth at sign-up, or the first time you sign in if it was not collected at sign-up, and may ask you to confirm it before you continue, solely to verify that you meet the age requirement that applies to your account. If we learn that an account belongs to someone under that requirement, we deactivate it and delete the associated personal data.

If you believe a child has created an account outside of an institutional enrollment, contact us at support@krizo.ai and we will act on it.

13. Third-Party Links

KRIZO may link to external websites or resources. We are not responsible for the privacy practices of third-party sites.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Updated versions will be posted on the Platform with a revised “Last Updated” date. Continued use of KRIZO after updates means you accept the revised policy.

15. Contact Us

For privacy-related questions or requests:

KRIZO Support
support@krizo.ai