Privacy policy
Version 2026-10-v3 · Last updated 10 November 2026
Job Shift Careers ("we", "us") is run by Cutting Chai Studio, a sole proprietorship owned by Imran Yusuf Malik, based in Mumbai, India. Cutting Chai Studio decides how your data is used (under the law, it is the "data fiduciary"). This policy explains what we collect, why, who helps us process it, and the choices you have. It follows India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
The short version
- We collect what we need to run your account and the tools, and nothing from your phone.
- When you press an AI button, the text, file or company name you gave is sent to our AI provider to get the answer. Nothing goes to AI unless you press that button.
- We don't run ads and we never sell your data.
- You can download or delete your data any time.
What we collect, and why
- Email address: to sign you in with a one-time code or Google sign-in, run your account, and send you messages about it (like your pass ending).
- Nickname: what the app calls you, and the only name other members would ever see.
- Profile details you must give (full name, mobile number, city and current role): to run your account, contact you about it if needed, keep the community genuine, and personalise jobs and tools. Your name and mobile are never shown to other members.
- Profile details you may add (sector, years of experience): to personalise jobs and tools.
- What you type or upload into the tools (offer lines, savings, dates, resume text, job descriptions, offer letter photos or PDF pages) and your application tracker: so the tools can work, and saved to your account so they're there next time.
- Badges, streaks and activity notes (for example "applied to a job on 12 Oct", your Chai Poll vote count, your reason for joining): kept with your account to show your badges and your weekly recap. Share cards are made on your own device and only shared if you choose to.
- AI answers and usage: the answers you get back, and a count of how many times you used each AI tool, so we can show your limits, let you "Try again" fairly, and stop misuse.
- Your Chai Poll answers: kept with your account only so you can vote once a day. Other members only ever see the totals, never who voted for what.
- How the app is used: which tools are opened, the words typed into the Job Finder search, and which job sites are opened from it, kept only as daily totals with no name or account; and the days you used the app (just the date), kept with your account for up to 400 days so we can count active members. We look at all of these only as totals, to see what helps and improve the app.
- Visit counts: when you open the website or the app, we count the visit: the page you landed on, the kind of place you came from (for example Instagram, LinkedIn or Google), website or app, and whether it's your browser's first visit that day, week, month or year. Only totals are kept, with no name, account, email or IP address. To count a browser once a day, the date of its last visit is kept on your own device (browser storage), not with us.
- Questions Genie couldn't answer: saved without your name or account, so we can add answers.
- Nickname or message attempts that break the rules: saved with your account, so we can warn or suspend accounts that keep trying.
- Payments (when passes are on sale): what you bought, the amount, date, and the order and payment references from our payment provider. We never see or store your card, UPI PIN or bank login.
- Creator link (only if you came through one): which creator's link you opened and when, kept on your device and then on your account, so the creator can be paid their share of a pass you buy on our website. Creators only get a count of sales and receipt numbers, never your name or contact details.
- Salary numbers you choose to share (role, sector, city, years, CTC, in-hand, honesty score, with no name or contact details): only if you turn on benchmark sharing, to build anonymous salary benchmarks.
- Your consent choices, with date, time and policy version: to prove what you agreed to.
- Basic technical logs kept by our hosting and database providers (such as sign-in times and IP addresses): for security.
We don't collect your contacts, location, SMS or files from your phone. A file reaches us only when you pick it.
The Job scam checker is different: the message, sender's email and any screenshot you check are read on your own device and are never sent to us or saved. To read a screenshot, your phone downloads an open-source text reader (Tesseract) from a public code library (jsDelivr); your picture is not sent to them.
AI features
Files are read on your device first. Resumes (PDF, Word or photo) and offer letters are read on your own phone or computer by our own code. Photos and scanned pages are read with an open-source text reader (Tesseract) that runs in your browser. The file itself isn't uploaded; only what the tools need (for example your offer lines, or a short profile from your resume: job title, skills, years, city) is saved to your account.
Job matching. Every Monday and Thursday our server collects public job lists from companies' career pages (Greenhouse, Lever, Ashby, SmartRecruiters), Remote OK and, if switched on, the job search service Jooble. Nothing about you is sent to any of them. To show you the jobs that fit, your phone sends our own server the words from your job title and resume (never the file itself, your name or your contact details). Our server works out the match scores and sends back only your best jobs; it doesn't keep those words. The jobs found are kept on your phone until the next refresh, so looking again uses no data.
Some tools can use AI, only when you ask: reading a resume or offer letter when our own code isn't sure, polishing a resume's wording, a deeper look when switching careers, Company X-Ray, and Genie's wishes (an answer to a work question none of the ready answers covers). These run through our own server, which sends your request to Anthropic (the maker of the Claude AI models) as our service provider. Here's exactly what happens:
- Only when you press the button. Nothing is sent to AI in the background. The calculators, Ask Genie, the ATS check and the job match scores run on our own code, not AI.
- Only what that tool needs. For example, Genie's resume polish gets your resume text and the job description; Company X-Ray gets the company name; a Genie wish gets only the question you typed; career suggestions get the short summary made from your resume. Your account details (name, mobile, email) and saved salary numbers are not sent.
- We remove contact details from text first. Before text is sent, our server blanks out email addresses, phone numbers, links and ID-style numbers (like Aadhaar). Photos and PDF pages are sent as images, so we can't blank anything inside them. Cover or crop personal details before you upload.
- Not used to train AI. Under Anthropic's commercial terms, what we send is not used to train their models. They may keep it for a short time for safety and abuse checks, under their own policies.
- AI can be wrong. Our code checks every answer: it never lets the AI add skills you didn't mention or invent numbers, and it does all the salary and tax maths itself. Still, read every line before you use it.
Who can see your data
- Other members see only your nickname and anything you post in community features.
- The app's team can see member profiles, consent records, usage totals, AI usage counts, rule-breaking attempts, payments, reports and shared salary numbers, to run, support and moderate the service.
- Service providers that process data only on our behalf:
- Supabase: our database, sign-in and server functions.
- Anthropic: AI answers, as described above.
- Jooble, only if switched on: common job titles from our board's search list (never anything about you).
- Our web host, which delivers the website.
- Our email provider, which sends sign-in codes and account emails.
- Google, if you choose Google sign-in.
- Razorpay, our payment provider, when you buy a pass or pack. Razorpay handles your payment details under its own terms.
- Job listings on the board come from a job data provider (OpenWeb Ninja's JSearch). We send it only general searches like "relationship manager in Mumbai", never anything about you.
- Authorities, only if the law requires it.
Where it is stored
Your account data is stored with our database provider in Mumbai, India where available. Some providers, including our AI and email providers, process data outside India, as the DPDP Act allows.
How long we keep it
- We keep your data while your account is active.
- When you delete your account, we erase your profile, consents, saved tools, AI answers and usage, tracker, poll answers and shared salary numbers, normally straight away and always within 30 days.
- Two things we keep after deletion, and why:
- Payment records (what was bought, amount, date, references), for as long as tax and accounting laws require.
- A scrambled code made from your email, not the email itself. It only lets us recognise a returning founding member, so their founding year continues from where it was rather than restarting. It can't be turned back into your email.
- Questions Genie couldn't answer have no name attached and may be kept to improve the answers.
- We may keep anonymous statistics that cannot identify you (such as average in-hand pay for a role and city, built from several people).
- System logs are kept for at least one year, as the DPDP Rules require, then removed.
Your rights and choices
- See and download your data: You > Download my data.
- Correct it: You > Your profile.
- Withdraw consent for contact or benchmarks any time: You > Your choices. Withdrawing benchmark consent deletes the salary numbers you shared. You can stop using the AI tools at any time; the other tools keep working.
- Delete your account: You > Delete my account, or the account deletion page.
- Nominate someone to exercise your rights if you die or become unable to: email us.
- Complain: contact our grievance officer below. We reply within 90 days at most, usually much sooner. If you're not satisfied, you can complain to the Data Protection Board of India.
You can ask for this policy in Hindi or another language listed in the Eighth Schedule of the Constitution by emailing us.
Children
Job Shift Careers is for people aged 18 or older. We don't knowingly allow anyone under 18 to sign up. If you think a child has an account, tell us and we'll delete it.
Security
Data is encrypted in transit and at rest by our providers, and database rules stop members from reading each other's private data. AI and payment keys stay on our server and are never in the website. If a breach affects your data, we'll tell you promptly, in plain language, and report it to the Data Protection Board as the law requires.
Contact and grievance officer
Imran Yusuf Malik, Proprietor and Grievance Officer, Cutting Chai Studio (Job Shift Careers), 7, Floor - 2, Plot - 66K, Soonaiji Mansion, August Kranti Marg, Gowalia Tank, August Kranti Marg, Mumbai - 400036. Email: support@jobshiftcareers.com
Changes
If we change this policy in a way that matters, the app will ask you to read and agree to the new version before you continue.
10 November 2026: added creator links (which creator's link you came through, so they can be paid their share). Nothing else changed.
24 October 2026: added anonymous visit counts (totals only, no name or IP address). Nothing else about how your data is used changed.
22 October 2026: added who runs Job Shift Careers (Cutting Chai Studio), its address and the grievance officer's name. Nothing about how your data is used changed.
16 October 2026 (evening): job matching now runs on our own server from the words in your resume; company-page jobs are collected twice a week.
16 October 2026: files are read on your device first; added job search from company career pages, Remote OK and, if switched on, Jooble.
15 October 2026: added AI features (Anthropic), job listings (JSearch), payments (Razorpay), what we keep after deletion, and that uploaded images aren't blanked.