1. Data We Collect

To run your Job Seeker Agent, we collect and process the following information:

• Account Details: Name, email address, password hash, and institution verification info.
• Preferences: Preferred job titles, locations, compensation ranges, and resume attachments.
• OAuth Credentials: Google OAuth tokens (if you link your Gmail) to automate cold outreach and capture responses from recruiters.

2. How We Use Your Data

We use your information strictly to operate the IITIIMJobAssistant services:

• Automating job searches, matching roles, and submitting job applications on your behalf.
• Drafting and sending tailored cold emails to recruiters.
• Maintaining your live activity feed and dashboard statistics.

3. Data Retention & Safety

We secure your data using industry-standard measures: AES-256 encryption for credentials and secure tokens, and SSL/TLS encryption for all data in transit. We retain your data only for as long as your account is active. You can request complete deletion of your account and associated data from your dashboard settings at any time.

4. Third-Party Integrations

Our agent integrates with external platforms like Google (for email outreach) and LinkedIn (for profile management). We do not share your credentials directly with third parties. Payments are handled securely via Razorpay, and we do not store credit card numbers on our servers.

1. Acceptance of Terms

By creating an account or using IITIIMJobAssistant, you agree to comply with and be bound by these Terms of Service. If you do not agree, please do not use the application.

2. Eligibility & Verification

This service is strictly restricted to current students and alumni of the Indian Institutes of Technology (IIT) and Indian Institutes of Management (IIM). We reserve the right to verify credentials and suspend accounts that do not meet these criteria.

3. Automation & Platform Limits

Our agents automate actions on platforms like LinkedIn and job boards on your behalf. While we build in throttles and safety guidelines, you acknowledge that using automation may carry risks of rate limits or account suspension by these platforms. We hold no liability for actions taken by third-party sites against your account.

4. Subscriptions & Billing

Subscriptions are billed in advance on a recurring monthly basis. Long-term plans (3-month and 6-month) are discounted. You may cancel at any time, and your plan will remain active until the end of the current billing cycle. Refunds are pro-rated and subject to our refund guidelines.

5. Limitation of Liability

The platform is provided "as-is" and "as-available". We do not guarantee job placement, recruiter response rates, or uninterrupted service. We are not liable for any direct or indirect damages resulting from your use of the platform.

1. Data Encryption

All sensitive information is encrypted both in transit and at rest:

• In Transit: All connections are protected using TLS 1.3 with strong cipher suites.
• At Rest: Sensitive user data, resume databases, and credentials are encrypted using AES-256 GCM. Passwords are hashed using bcrypt with a high work factor.

2. Token Isolation & Revocability

Your Google and LinkedIn OAuth tokens are stored in an isolated credentials store. We request only the minimal scopes required to perform actions (sending/reading emails for cold outreach). You can revoke our access at any time directly from your Google/LinkedIn settings.

3. AWS Infrastructure

Our applications run in secure Virtual Private Clouds (VPCs) hosted on Amazon Web Services (AWS). Database access is restricted to application instances, with automated hourly backups and active DDoS protection through AWS Shield.

4. Access Controls & Audits

Internal access to user databases is strictly limited to authorized personnel and is monitored through audit logs. We run regular automated vulnerability scans and plan yearly external penetration testing to ensure maximum defense.

1. Scope & Applicability

This DPA applies where IITIIMJobAssistant processes personal data on behalf of the customer while providing the automated job search agent services. It is incorporated into and forms part of the Terms of Service.

2. Processing of Personal Data

Roles: The User acts as the Data Controller, and IITIIMJobAssistant acts as the Data Processor. We will process data strictly in accordance with your instructions, which includes configuring and running your Job Seeker Agent.

3. Subprocessors

We work with trusted subprocessors to handle infrastructure, payment, and email. Our current list includes:

• Amazon Web Services (AWS): Cloud hosting and database infrastructure.
• Google Workspace API: Email authentication and transmission.
• Razorpay: Secure payment gateway.

4. Data Subject Rights

We will assist you in responding to requests from data subjects exercising their rights (such as data portability, access, correction, or deletion) under applicable data protection regulations.