Privacy Policy

Last updated: August 1, 2026

Legal Entity & Contact

Empikalyze is a resume screening service operated by a registered entity in India. This Privacy Policy governs our collection, use, and protection of your personal data.

For privacy-related inquiries, please contact us at support@empikalyze.in.

1. Information We Collect

We collect different types of information to provide and improve our services:

Account Information

When you create an account, we collect your email address, full name (optional), company name, and location. This information is used to identify you, communicate with you, and provide access to your account.

Recruitment Data

To provide Resume Processing, Empikalyze processes information uploaded by your Organization, including:

  • Resume files and their parsed content (candidate name, contact information, work experience, education, skills, and other resume details)
  • Job descriptions provided for each screening job
  • Additional recruiter instructions or hiring context submitted alongside a job
  • AI-generated candidate evaluations and match insights (AI Analysis)
  • Resume ranking and matching information produced by Resume Processing

This information is processed solely for the purpose of providing recruitment screening services to your Organization. Recruitment Data is never shared across customers or used to benefit other organizations.

Usage Information

To operate and support the service, Empikalyze records operational Usage Information at the Organization level, including:

  • Resume Processing Credit purchases and transaction records
  • Available and consumed credit balances
  • Resume Processing activity and Processing Activity history
  • Screening job history
  • Processing timestamps
  • Organization-level usage statistics

This information is collected to operate, secure, improve, and support the service, and to maintain accurate records of Resume Processing performed for your Organization.

Early Access Form Data

If you complete our early access form, we collect company name, location, role, recruiter count, and monthly resume estimate. This helps us plan infrastructure and ensure availability when we launch.

2. Data Roles & Responsibilities

Understanding data roles is important for transparency about how your information is handled:

You Are the Data Controller

For resume content and candidate information, you (the customer) act as the Data Controller. You determine the purposes and means of processing candidate data, and you remain responsible for compliance with applicable privacy laws.

Empikalyze Is the Data Processor

Empikalyze acts as a Data Processor on your behalf. We process resume data only according to your instructions and for the purposes specified in this Privacy Policy and our Terms of Service.

3. How We Use Data

We use your information only for legitimate business purposes:

  • Resume Processing and matching: To analyze resumes and match them against job descriptions
  • Improving service quality: To monitor performance, troubleshoot issues, and improve matching logic, features, and overall platform reliability
  • Service operation and usage records: To operate the service, maintain accurate usage records, and provide organization-level usage insights
  • Support and communication: To assist you with technical issues and send product updates

What We Do NOT Do:

  • We do not sell your personal data to third parties
  • We do not use your data for advertising purposes
  • We do not use customer resume data to train or fine-tune general-purpose or third-party AI models.

4. Legal Basis for Processing

Our processing of personal data is based on the following legal grounds:

  • Contractual necessity: We process data to perform our services as described in our Terms of Service
  • Legitimate business interests: We process data to improve our services, prevent fraud, and ensure platform security
  • Consent: Where applicable, we process data based on your consent, which you can withdraw at any time

5. Automated Processing

Resumes uploaded to Empikalyze are processed using automated systems for matching and analysis purposes.

Our AI analyzes resume content against job descriptions to generate matching scores and insights. This automated processing helps you identify relevant candidates faster while maintaining your control over final hiring decisions.

Automated processing does not replace human judgment. You remain responsible for reviewing candidates and making final hiring decisions.

6. Resume Data Handling

Resumes belong to you, the customer.

Resume content uploaded to Empikalyze is used only for processing within your organization. Your resume data is never shared across customers or used to benefit other organizations.

Resume retention and deletion are controlled by your account administrator. You can request deletion of your data at any time.

Customer Responsibilities: Your Organization is responsible for ensuring it has obtained all appropriate rights, consents, and permissions before uploading resumes, job descriptions, and any other recruitment-related information into Empikalyze. This includes complying with applicable data protection laws and candidate consent requirements relevant to your jurisdiction.

7. Data Security

We implement reasonable technical and organizational safeguards to protect your information:

  • Access controls: We use role-based access to ensure only authorized personnel can access your data
  • Encryption: Your data is encrypted while stored (at rest) and when transmitted (in transit)
  • Organizational measures: We have policies and procedures to limit access to those who need it for legitimate purposes

While we implement appropriate security measures, no system is completely secure. You are responsible for protecting your account credentials and restricting access to your account.

8. Cross-Border Processing

Empikalyze uses third-party service providers to operate our platform. Your data may be processed or stored in locations where these providers operate, which may include jurisdictions outside India.

We ensure that any cross-border transfers are protected by appropriate safeguards in accordance with applicable data protection laws.

9. Data Retention

Empikalyze retains Customer Data only for as long as necessary to provide the service, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Retention periods are governed by Empikalyze's operational data retention and legal compliance policies.

Credits vs. Data Retention: The retention of Customer Data is independent of purchased Resume Processing Credits. While Resume Processing Credits do not expire, the storage and retention of Customer Data are governed by Empikalyze's operational data retention and legal compliance policies. Purchasing credits does not guarantee indefinite storage of uploaded data such as resumes, job descriptions, AI Analysis, or screening job history.

Early access form data is retained until you convert to a production account or opt out.

Operational Records

In addition to Customer Data, Empikalyze may retain Operational Records, including:

  • Processing events and Processing Activity logs
  • Authentication events
  • Error logs
  • Security logs
  • Audit logs
  • Usage metrics and system telemetry

These Operational Records are maintained for platform reliability, fraud prevention, troubleshooting, compliance, and service improvement, and may be retained for longer periods than Customer Data where required for security and legal compliance.

Users can request access, correction, or deletion of their personal data at any time by contacting us at support@empikalyze.in.

10. Third-Party Service Providers

To operate, maintain, and improve the Empikalyze platform, we engage trusted third-party service providers that process Customer Data on our behalf. These providers receive only the information necessary to perform their respective services and are contractually required to protect Customer Data in accordance with applicable privacy and security obligations.

Depending on the services used, these providers may include:

  • Authentication and cloud infrastructure providers (e.g., Supabase) for user authentication, secure application hosting, database operations, and core platform services
  • Payment processing providers (e.g., Razorpay) for securely processing Resume Processing Credit purchases, payment verification, and related billing transactions
  • Secure cloud storage providers for storing uploaded resumes, recruitment documents, and other customer-provided files
  • AI service providers for performing AI-powered resume analysis, candidate evaluation, ranking, and other recruitment intelligence features
  • Email service providers for delivering transactional emails, account notifications, security communications, and customer support messages

These service providers may process or store Customer Data in jurisdictions where they operate. Empikalyze implements appropriate contractual, organizational, and technical safeguards when engaging third-party service providers.

11. User Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Correction: Request corrections to inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Opt-out: Unsubscribe from non-essential marketing communications

To exercise these rights, please contact us at support@empikalyze.in.

12. Contact

For questions about this Privacy Policy or data practices, please contact our privacy team at support@empikalyze.in.