How we handle your data.
A clear, honest explanation of what we collect, why, and what you control — written for people, not lawyers.
Last updated: July 2026
Your data stays yours
We never sell your personal data. We never share it with advertisers. We use it only to power your career guidance.
We collect only what's needed
Your name, email, career goals, skills, and preferences — nothing more. No Aadhaar, no financial data, no biometrics.
You control your data
Access, correct, or delete your personal data at any time. Email privacy@visintiq.com and we respond within 30 days.
Industry-standard security
HTTPS encryption, hashed passwords, row-level security on every database table, and a full AI audit trail.
Grievance Officer
Founder, Visintiq — grievance@visintiq.com. We acknowledge within 24 hours and resolve within 15 days.
Complete privacy policy
Who we are
Visintiq ("we", "us", "our") is a career intelligence platform operated from India. This Privacy Policy explains how we collect, use, store, protect, and share your personal data when you use visintiq.com and related services (the "Platform"). This policy is written in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), and the Information Technology Act, 2000 and its associated rules.
Contact: privacy@visintiq.com · info@visintiq.com · Grievance Officer: see Section 12.
1. What personal data we collect
Data you provide directly
| Data | When collected | Purpose |
|---|---|---|
| Full name | Signup | To identify your account |
| Email address | Signup | Account authentication & communications |
| Password (hashed) | Signup | Secure access |
| Career goals and interests | Onboarding / Quick Match | To personalize career recommendations |
| Education background | Onboarding / profile | To match relevant career paths |
| Skills (self-reported) | Onboarding / profile | To assess readiness |
| Work experience | Profile | To tailor career direction |
| Geographic location (city/state) | Onboarding | To surface locally relevant opportunities |
| Preferred language | Settings | To serve content in your language |
| Learning preferences | Onboarding | To optimize resource recommendations |
Data generated through your use
| Data | Source | Purpose |
|---|---|---|
| Mission completions and evidence | Your actions | To update readiness score |
| Recommendation interactions (accepts / dismisses) | Your actions | To improve recommendation quality |
| AI Mentor conversation history | Your conversations | To provide contextual guidance |
| Readiness scores | Computed from profile and actions | To show career preparedness |
| Session and authentication tokens | Automatically on login | To keep session secure |
| Analytics events (page views / feature usage) | Automatically during use | To improve the Platform |
We do NOT collect:
- Aadhaar number, PAN, or government-issued ID numbers
- Financial information
- Biometric data
- Caste, religion, or political affiliation
- Health or medical data
2. How we use your data
- Providing the service — Digital Twin, recommendations, readiness scoring, roadmaps, and the AI Mentor.
- Improving recommendations — learning from your interactions to refine what we surface next.
- Platform improvement — aggregate, anonymized usage patterns.
- Communications — service-related messages; marketing only with a separate opt-in.
- Safety and security — detecting abuse, protecting accounts, preventing fraud.
We do NOT sell your personal data. We do NOT share it with advertisers. We do NOT use your data for automated decision-making with legal effects without your knowledge.
3. Legal basis for processing
We rely on your consent for most data collection, obtained at signup and onboarding. We also rely on legitimate usesunder the DPDP Act for service delivery and session security (for example, keeping you signed in and preventing abuse).
4. How we store and protect your data
- Hosted on the Lovable platform and Supabase Postgres. Servers may be located outside India.
- All traffic is encrypted in transit via HTTPS / TLS.
- Passwords are hashed — we never store them in plaintext.
- Row-Level Security is enforced on every table containing user data.
- An AI audit trail records governance-relevant events.
- Secrets and keys are stored in a managed vault, not in code.
5. Cookies and tracking technologies
| Cookie / Storage | Type | Purpose | Duration |
|---|---|---|---|
| Authentication session token | Essential | Keeps you logged in | Session |
| Language preference | Essential | Remembers your chosen language | Persistent |
| Analytics events | Functional | Tracks anonymized usage | Session |
No third-party advertising cookies. No cross-site tracking. See our Cookie Policy for details.
6. Who we share data with
| Category | Data shared | Purpose |
|---|---|---|
| Cloud hosting provider | Platform and account data | Infrastructure and content delivery |
| Database and authentication provider | Account and application data | Secure data storage and login |
| OAuth provider (if you choose social login) | Email address | Account authentication |
| AI model provider | Anonymized conversation context | AI-powered career guidance |
We share data only with service providers who are necessary to operate the Platform. We do not share data with data brokers, advertisers, or unrelated third parties. If we change providers, the categories above remain the same.
7. Data retention
| Data type | Retention |
|---|---|
| Account data | Until you delete your account |
| Career profile and Digital Twin | Until you delete your account |
| AI Mentor history | Until you delete your account |
| Mission completions | Until you delete your account |
| Analytics events | 24 months, then anonymized |
| Authentication logs | 180 days |
On account deletion, personal data is deleted from active systems within 30 days. Backups are purged within 90 days.
8. Your rights as a Data Principal
Under the DPDP Act, 2023 you have the following rights:
- Right to access — request a copy of the personal data we hold about you.
- Right to correction — via your profile settings or by contacting us.
- Right to erasure — request deletion of your account and personal data (within 30 days).
- Right to withdraw consent — at any time.
- Right to grievance redressal — via our Grievance Officer (Section 12).
- Right to nominate — designate a person to exercise your rights in the event of death or incapacity.
To exercise any right, email privacy@visintiq.com. We respond within 30 days.
9. Children's data
The Platform is intended for users 18 years or older. We do not knowingly collect data from individuals under 18. If we discover such data, it will be deleted promptly.
10. Cross-border data transfers
Your data may be processed outside India by our hosting and AI partners. We ensure such processing complies with the DPDP Act. We will comply with any restricted-territory notifications issued by the Government of India under Section 16 of the DPDP Act.
11. Changes to this policy
When this policy changes, we update the "Last updated" date and, for material changes, notify you by email or a prominent notice on the Platform.
12. Grievance Officer
- Name: Founder, Visintiq
- Email: grievance@visintiq.com
- Response: Acknowledge within 24 hours, resolve within 15 days.
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.
13. Contact us
- privacy@visintiq.com — privacy questions and rights requests
- info@visintiq.com — general inquiries
- grievance@visintiq.com — grievances and escalations
This Privacy Policy is governed by the laws of India.