Privacy Policy

1. About us and what GotaOfferr is

GotaOfferr is an AI-powered resume and cover-letter builder operated by AB24 SOLUTIONS, a sole proprietorship business, Delhi, India. The proprietor is Abhishek.

We help you rewrite your resume for a specific job description, generate a matching cover letter in PDF format, build a resume from scratch with AI assistance, search public job listings, and receive job alert emails.

2. Data we collect

Account information: When you sign up, we collect your email address through our authentication provider so you can log in, save your usage history, and manage your subscription.

Resume and job-description content: When you upload or paste a resume and job description, we send the text to our AI provider to generate the tailored output. The content is used only for the tailoring request and is not stored on our servers permanently.

Usage data: We record how many resumes you have generated in the current billing month to enforce free and paid plan limits.

Payment information: We do not collect or store card details. Payments are handled by Razorpay, and we only receive a subscription ID and payment status.

Logged-out (anonymous) tailoring: If you try one free rewrite without an account, we store a device identifier (a random ID plus a hashed browser fingerprint) and the email address you enter to download the result. This is used only to enforce the one-time free limit and prevent abuse.

Bot-protection and security data: Cloudflare Turnstile checks some actions (sign-ups, downloads, resume builder) to block automated abuse, and we keep short-lived rate-limit records keyed by IP or account.

3. How we use your data

• To provide the resume tailoring and cover-letter generation services.
• To enforce plan limits and manage your subscription.
• To send transactional emails such as one-time sign-in codes, password reset codes, job alert emails (every 3 days when enabled), and payment receipts.
• To improve the service and fix bugs.

4. Storage and security

Authentication and limited account data are stored in Lovable Cloud (Supabase). Resume and job-description content is processed in real time and not retained after your session ends, unless you explicitly save a job alert or tailored output.

All data in transit is encrypted with TLS, and saved resumes and tailored documents are encrypted at rest with AES-256-GCM. We do not sell your data or use it to train third-party AI models.

5. Third-party services

We use trusted providers for authentication, hosting, payments, AI generation, and email delivery. Each provider only receives the data needed to perform its specific function.

• Lovable Cloud / Supabase — authentication and account data storage.
• Lovable AI Gateway — resume, cover-letter and job-search generation.
• Razorpay — payment processing and subscription mandates.
• Resend — transactional email delivery (sign-in codes, alerts, receipts).
• Cloudflare Turnstile — bot and abuse protection.
• Google — sign-in with Google, Google Analytics (usage measurement) and Google AdSense (advertising).

6. Cookies, analytics and advertising

We use essential cookies to keep you signed in. We use Google Analytics to measure which pages are visited and where errors occur, and Google AdSense to show advertising. Both load only after the page finishes loading (or on your first interaction) so they do not slow the site down, and they may set their own cookies under Google's privacy policy. You can block analytics and ad cookies in your browser settings or with an ad blocker without breaking the core service.

7. Your rights

If you are in India, the Digital Personal Data Protection Act 2023 gives you the rights below. We extend the same rights to every user, wherever you live.

• Right to information and access: download a complete copy of the data we hold about you from Account → Settings → Your data.
• Right to correction: update your name and email on the account page, or write to us for anything you can't change yourself.
• Right to erasure: delete your account and all associated data from Account → Settings → Your data. Deletion is immediate and cannot be undone.
• Right to withdraw consent: turn off job alerts, stop using the tailoring tool, or delete your account at any time. Withdrawing consent does not affect processing already carried out.
• Right to nominate: you may nominate another person to exercise these rights on your behalf in the event of death or incapacity — email us to register a nominee.
• Right to grievance redressal: contact our Grievance Officer below before approaching the Data Protection Board of India.

8. Data retention

• Account and profile data — kept while your account is active.
• Tailored resumes and cover letters — kept so you can re-download them; the most recent 10 are shown on your account page.
• Job alert settings and send history — kept until you delete the alert.
• Payment and subscription records — retained as long as tax and accounting law requires, even after account deletion.
• Resume and job description text sent for tailoring — processed in real time and not retained beyond generating your documents, unless it is part of a saved rewrite.
• Emails captured from logged-out users who downloaded a free rewrite — deleted on request.

9. International data transfers

GotaOfferr uses cloud infrastructure, AI processing, payment and email providers that may store or process data outside your country, including outside India. We remain responsible for your data as the data fiduciary, use providers under data-processing agreements, and do not transfer data to any jurisdiction restricted by the Indian Government.

10. Children's data

GotaOfferr is intended for job seekers aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we do not build behavioural advertising profiles of any user — ads are shown contextually. If you believe a minor has created an account, email us and we will delete it.

11. Security and breach response

Data is encrypted in transit with TLS, access to production systems is restricted, and database access is enforced with row-level security so you can only ever read your own records. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India without undue delay, and in any case within 72 hours of becoming aware of it.

12. Grievance Officer

In line with the DPDP Act 2023, complaints about how your personal data is handled can be sent to our Grievance Officer, who will respond within 30 days.

Grievance Officer: Abhishek — AB24 SOLUTIONS (GotaOfferr)
Location: Delhi, India
Email: contact@gotaofferr.com

If your complaint is not resolved, you may escalate it to the Data Protection Board of India.

13. Changes to this policy

We may update this policy as the service changes. The latest version will always be posted at this URL with an updated "last updated" date.

14. Contact us

If you have questions about this privacy policy, email us at contact@gotaofferr.com.

AB24 SOLUTIONS · Delhi, India