1. Who we are
Sopanio (“Sopanio”, “we”, “us”) is a free service that helps freshers in India find entry-level tech jobs and keep track of their job search. It is run by Nikhil Kumar Rajak, Jamshedpur, India.
For the personal data described in this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it. This policy is also our privacy policy under the Information Technology Act, 2000 and the rules made under it.
You can reach us about anything in this policy at nikhilrajak.dev@gmail.com.
2. What we collect, and why
| What | Why we need it | Where it comes from |
|---|---|---|
| Your name, email address, profile photo link and Google account ID | To create your account, sign you in and show your name and photo | Google, when you choose “Continue with Google” |
| Your profile: degree, branch, graduation year, where you are in your career, the roles, cities and kinds of job you want, and whether you're open to remote work or relocating | To filter and rank jobs for you | You, in the welcome steps and Settings |
| Resume details: skills, degree, field, graduation year, years of experience and a few short highlights | To show whether each job is a Match, Maybe or Ruled out for you | You, from a resume you upload or paste, or skills you pick |
| Your job search: jobs you save, apply to or hide, with notes, dates and stages; your goals; companies you ask us to add | To run your tracker, goals and dashboard | You |
| People you add to Contacts: names, roles, companies, notes and follow-up dates, and any email or link you add | So you can keep track of who to follow up with (see section 9) | You |
| Technical data: sign-in session cookies; basic request logs kept by our hosting providers (such as IP address, browser and time); the time of each AI resume read | To keep you signed in, keep the service secure and working, and limit AI use fairly | Automatically, when you use Sopanio |
We do not collect your password (Google handles sign-in), phone number, postal address, government ID, financial, health or biometric data, or your device's location. We don't collect “sensitive personal data or information” as defined in the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
We don't show ads, use advertising or analytics trackers, sell or rent personal data, or use it to decide anything about you except which jobs to show you.
3. Your resume and AI
Adding a resume is optional. You can pick your skills by hand instead.
When you upload or paste a resume, we read its text in memory. Before sending it to our AI provider (NVIDIA, through its API), we automatically remove email addresses, phone numbers and web links. Other text in the resume, such as your name, college or address if you included them, may still be sent. The AI sends back a structured summary of your skills and facts. We store only that summary, which you can see, edit and delete in Settings. We don't store the resume file or its full text.
We don't use your data to train AI models. Our AI provider processes the text to return the summary, under its own terms for API customers.
Match, Maybe and Ruled out are worked out from that summary and the job's requirements, by rules that run in your browser. They are estimates to help you decide where to apply, not decisions about you.
4. Why we're allowed to use it: your consent
We process your personal data on the basis of your consent under Section 6 of the DPDP Act. You give it by signing in after being shown this policy, and separately each time you choose to add a resume. Where a law requires us to keep or disclose data, we may also rely on the “legitimate uses” allowed by Section 7 of the DPDP Act.
You can withdraw consent at any time, as easily as you gave it: delete a resume or any other item, change your details in Settings, or delete your account in Settings → Delete my account. Withdrawing doesn't affect what was done before. Because an account can't work without its basic details, withdrawing consent for those means deleting the account.
6. Where your data is stored
Our providers may store and process data on servers outside India. Section 16 of the DPDP Act allows this, except to countries the Government of India restricts by notification. We will follow any such restriction.
7. How long we keep it
We keep your data while your account is open, and only as long as it's needed for the purposes above.
- Deleting an item (a resume, a note, a contact, a goal) deletes it straight away.
- Deleting your account deletes it and everything linked to it (profile, resume details, tracker, goals, contacts, requests and AI usage records) from our database straight away.
- Copies may remain for a short time in our providers' backups and security logs until they are overwritten, or longer only where a law requires us to keep them.
8. Your rights
Under the DPDP Act you have the right to:
- Access a summary of your personal data and how we process it (Section 11). Most of it is on your screens already, and Settings → Your data lets you download it.
- Correct, complete, update or erase your personal data (Section 12). You can do most of this yourself in the app, or ask us.
- Grievance redressal (Section 13): complain to us and get an answer (see section 13 below).
- Nominate someone to use these rights for you if you die or become unable to (Section 14): email us with their name and contact details.
To use a right, use the app or write to nikhilrajak.dev@gmail.com from the email address on your account. We may ask you to confirm who you are. We aim to reply within 24 hours and to finish within 15 days, and always within the time the law allows.
If you're not satisfied after using our grievance process, you can complain to the Data Protection Board of India.
The DPDP Act also asks you to give accurate information, not to impersonate anyone, and not to make false or frivolous complaints (Section 15).
9. Information about other people
If you add details about other people, such as a senior's name or email in Contacts, add only what you need and make sure you're allowed to keep it. We store it only to show it back to you. We never contact those people or share their details. If someone asks us to remove their details, we will remove them or ask you to.
10. Children
Sopanio is only for people aged 18 or over. Under the DPDP Act, anyone under 18 is a child, and we don't knowingly process children's personal data. If you're under 18, please don't use Sopanio. If we learn that an account belongs to a child, we will delete it.
11. How we protect it
We take reasonable security safeguards, as Section 8(5) of the DPDP Act requires, including: encryption in transit (HTTPS); database rules that let each account read and change only its own data; separate keys with the least access they need, with secret keys kept out of the website; no stored passwords; and limits on automated use.
No system is perfectly secure. If a personal data breach happens, we will act to contain it and tell the affected users and the Data Protection Board of India, as the DPDP Act and its rules require.
13. Grievance Officer and contact
For questions, requests or complaints about your personal data, contact our Grievance Officer:
- Name: Nikhil Kumar Rajak
- Email: nikhilrajak.dev@gmail.com
We acknowledge complaints within 24 hours and resolve them within 15 days.
14. Changes to this policy
We'll update this page and its effective date when our practices change. For important changes, we'll tell you in the app or by email before they take effect, and ask for your consent again where the law requires. If you don't agree with a change, you can delete your account.
This page is written in plain English so it's easy to read. If anything here is unclear, write to nikhilrajak.dev@gmail.com and we'll explain.