Privacy Policy

1. Introduction

VibeTensor Private Limited (CIN: U74909TS2025PTC197692, DPIIT: DIPP206711), operating as "VibeTensor" ("we", "us", "our"), operates UpdataMind, the AI career intelligence platform available at updatamind.vibetensor.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

By using UpdataMind, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our platform.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address) via our authentication provider
• Phone number (collected on the waitlist application form)
• Resume content (text or PDF uploads)
• Career profile information (current role, target role, skills, experience)
• LinkedIn profile content (when pasted for optimization)
• Job descriptions (when pasted for skill gap analysis)
• Chat messages with the AI career coach
• GitHub profile information (username, projects)

2.3 Phone Numbers and Re-engagement Messaging

Phone numbers are collected via the waitlist application and used solely for: (a) account recovery on request, (b) WhatsApp/SMS re-engagement messaging, only after explicit opt-in via dashboard settings. You may opt out anytime from the same settings page. We do not share phone numbers with third parties. Per the Digital Personal Data Protection Act, 2023 (DPDP Act 2023), you have the right to access, correct, and delete this data — contact us at support@vibetensor.com.

2.2 Information Collected Automatically

• IP address (used for rate limiting and security)
• Browser type and device information
• Pages visited and features used
• Usage patterns and analytics data

3. How We Use Your Information

• To provide AI-powered career analysis, skill gap matching, roadmap generation, and coaching
• To generate optimized GitHub profiles and LinkedIn content
• To authenticate your identity and manage your account
• To process payments and manage subscriptions
• To improve and personalize our platform
• To enforce usage limits and prevent abuse
• To communicate with you about your account and updates

We use the email address you provide via support requests (sent to support@vibetensor.com) only to respond to your message. We do not add support emails to marketing lists.

4. Third-Party Services and Data Processors

We engage trusted third-party service providers to operate and deliver our platform. All processors are engaged under valid data processing agreements and are contractually bound to protect your personal data.

• AI Service Providers: Process your career data for AI-powered analysis, coaching, and recommendations. Data is sent via secure API calls for real-time processing and is not used to train AI models. API data is automatically deleted by our providers within 30 days.
• Authentication Provider: Handles user authentication, account management, and session security. Stores your email address and authentication credentials securely.
• Payment Processor: Our merchant of record processes subscription payments, billing information, payment methods, and invoicing on our behalf.
• Cloud Database Provider: Stores user profiles, usage data, and account information in an encrypted, SOC2-compliant database with encryption at rest and in transit.
• Caching and Rate Limiting Provider: Handles rate limiting and session management. Stores only anonymized rate limit counters, no personal data.
• Job Search API Provider: Provides live job listing search functionality. Job search queries are sent to this service.
• Cloud Hosting Provider: Hosts and serves the platform, including CDN delivery, serverless function execution, and edge networking.

Under Section 11 of the Digital Personal Data Protection Act, 2023, you have the right to request the specific identities of all data processors with whom your personal data has been shared. To exercise this right, contact us at support@vibetensor.com.

5. Data Storage and Retention

Your account data (profile, usage history) is stored in our secure cloud database with encryption at rest and in transit. Career analysis data (resumes, skill gaps, roadmaps) is stored locally in your browser using localStorage and in our database when cloud sync is enabled.

Upon account deletion, all your personal data will be removed from our systems within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures including:

• Rate limiting on all API endpoints
• Input validation and sanitization on all user inputs
• Content Security Policy (CSP) headers
• HTTPS/TLS encryption for all communications
• Secure authentication with encrypted session management
• No storage of raw API keys or credentials on the client side

7. Your Rights

As a data principal under the DPDP Act, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate personal data
• Request erasure of your personal data
• Request information about how your data is processed
• Withdraw consent at any time (by contacting our Grievance Officer or deleting your account)
• Nominate another person to exercise your rights in case of death or incapacity
• Lodge a complaint with the Data Protection Board of India

8. Digital Personal Data Protection Act, 2023 (India)

VibeTensor Private Limited complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India. We process personal data only with explicit consent, provide clear notice of data usage, and maintain procedures for data breach notification to the Data Protection Board of India without unreasonable delay as required by the Act.

You may withdraw your consent at any time by contacting our Grievance Officer at the details provided below. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

9. Children's Privacy

UpdataMind is designed for professionals and career seekers aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us with personal data, please contact our Grievance Officer immediately and we will delete such data.

10. Cross-Border Data Transfer

Some of our third-party service providers operate servers outside India. By using UpdataMind, you consent to the transfer of your data to jurisdictions outside India where these providers operate, subject to appropriate data protection safeguards as permitted under the DPDP Act. You may request the specific identities of these providers by contacting us at support@vibetensor.com.

10A. Cookies and Analytics Consent

We use a small number of cookies and browser-storage entries for site functionality (such as authentication and rate limiting) and, only with your consent, for product analytics that help us understand how UpdataMind is used. Per the Digital Personal Data Protection Act, 2023, consent is the lawful basis we rely on for the analytics category, and you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

On your first visit to the public site you will see a banner that lets you choose "Accept" (functional + analytics) or "Reject non-essential" (functional only). You can revisit this choice anytime here:

Inside the authenticated dashboard, analytics consent is captured at sign-up via this Privacy Policy and you can opt out by deleting your account or by writing to our Grievance Officer.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by posting a notice on our platform and updating the "Last updated" date. Continued use of UpdataMind after changes constitutes acceptance of the updated policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for UpdataMind is:

13. Contact Us