Privacy Policy

Account and Profile Data

Name, email address, phone number, institution, year of study, course, and any other information you provide when creating or updating your account.

Resume and Career Data

Resume content, work experience, education history, skills, and career preferences that you submit to generate documents or power the outreach service.

Gmail OAuth Data

When you connect your Gmail account for outreach, we store OAuth tokens that allow us to both send emails and read email threads on your behalf. We access full email threads associated with your outreach campaigns in order to track replies, monitor campaign responses, and display your email history within the outreach dashboard. We do not access emails unrelated to your outreach campaigns.

Payment Data

Payment transactions are processed by Razorpay and Dodo Payments. We store only a record of your payment status, amount, and credits granted. We do not store your card details.

Usage Data

Information about how you use the platform, including pages visited, features used, orders created, and actions taken. This is used to improve the product and diagnose issues.

Technical Data

IP address, browser type, device type, operating system, and session identifiers necessary for platform security and authentication.

Scopes We Request

When you connect Gmail, we request two OAuth scopes: gmail.send (to send outreach emails on your behalf) and gmail.readonly (to read email threads related to your campaigns).

Why We Read Email Threads

We read full email threads associated with your outreach campaigns to track whether hiring managers have replied, surface those replies in your outreach dashboard, and give you a complete view of each conversation. This is core to how the platform works. Without read access, we cannot show you reply tracking or conversation history.

What We Do Not Access

We never access emails that are unrelated to your outreach campaigns. We do not read personal emails, inbox messages from friends or family, newsletters, or any other correspondence outside of campaign threads.

Token Security and Revocation

Your Gmail OAuth tokens are encrypted at rest. You can revoke access at any time via your Google account security settings at myaccount.google.com/permissions. Revoking access will disconnect your Gmail from the platform and stop any active campaigns.

Contract Performance

Most processing is necessary to deliver the services you have signed up for. This includes generating your resume, running your outreach campaign, processing payments, and managing your account.

Legitimate Interests

We process certain data based on our legitimate interest in operating and improving the platform, preventing fraud and abuse, ensuring platform security, and understanding how users interact with our services.

Consent

Where we rely on consent (such as connecting your Gmail account), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Legal Obligation

We process and retain certain data as required under applicable law, including Indian IT Act obligations, financial record-keeping requirements, and responses to valid legal requests.

The outreach service surfaces contact information about third parties (hiring managers, founders, and recruiters) sourced from third-party professional data providers and professional contact databases. This data relates to individuals in their professional capacity and is sourced from publicly available information.

Studojo does not collect this data directly. We rely on third-party providers to ensure that the collection and use of this data complies with applicable data protection laws. However, we make no guarantee of accuracy and accept no liability for how this data is used by our users. Responsibility for lawful use of this contact data lies solely with the user.

If you are a third party whose information appears in our system and you wish to have it removed, please contact us at admin@studojo.com. We will process removal requests within 30 days.

Resume Parsing

When you upload a resume, it is processed using Azure OpenAI to extract structured data about your experience, education, and skills. This data is then used to power the outreach and resume-building features.

Email Personalisation

AI is used to generate personalised outreach email drafts based on your profile and the contact data surfaced by the platform. You review and approve these before they are sent.

No Automated Decisions That Affect You Legally

We do not make automated decisions about you that produce legal effects or similarly significant impacts. AI on our platform assists you in creating content and discovering opportunities; it does not determine eligibility, creditworthiness, or any other consequential outcome about you.

We do not sell your personal data to any third party. We do not share your personal data with advertisers.

We work with a limited number of trusted service providers who process data on our behalf:

• Microsoft Azure - cloud hosting and AI services (resume parsing)
• Third-party professional data providers - professional contact data for outreach
• Razorpay - payment processing
• Dodo Payments - payment processing
• Google - Gmail OAuth for email sending and thread reading
• Sentry - error monitoring and diagnostics

We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Studojo, our users, or others.

Your data is hosted on Microsoft Azure infrastructure in South Asia and European regions. We have chosen these regions to keep data geographically close to our primary user base while meeting applicable data residency expectations.

Some of our service providers, including Google, are based in the United States. Where data is transferred to US-based processors, we rely on standard contractual clauses and the providers' applicable data processing agreements to ensure an adequate level of protection for your personal data.

Active Account Data

Account data, resume data, and campaign data are retained for as long as your account is active.

Email Thread Data

Email thread data associated with your campaigns is retained for 2 years after the campaign ends, after which it is deleted.

Payment Records

Payment records are retained for 7 years to comply with financial and legal record-keeping obligations.

Resume Data After Account Deletion

When you delete your account, resume data is deleted within 90 days. Payment records are retained for the statutory period regardless of account status.

Your data is stored on Microsoft Azure infrastructure. We use industry-standard security measures including encrypted connections (HTTPS/TLS), access controls, and authentication systems to protect your data.

While we take reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You use the platform at your own risk, and we cannot guarantee absolute security of your information.

We use only essential cookies necessary to keep you authenticated and the platform functional. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

Session cookies are deleted when you close your browser. Persistent authentication cookies allow you to remain logged in across sessions and expire after a defined period.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict processing of your data
• Withdraw consent for Gmail access at any time via Google account settings at myaccount.google.com/permissions
• Lodge a complaint with your relevant data protection authority

To exercise any of these rights, contact us at admin@studojo.com. We will respond within 30 days.