1. Information we collect
To generate accurate salary benchmarks and AI-powered career reports, we collect a small, focused set of data:
- Identity & contact
- Your verified email address and the display name on your profile. We do not collect government IDs or phone numbers.
- Compensation details
- Current role, city, years of experience, base salary, variable pay, and any equity or benefits you choose to enter when generating a report.
- Resume content (optional)
- If you upload a resume, we extract text from the PDF or DOCX to power resume intelligence features. We never publish your resume.
- Usage analytics
- Anonymous platform analytics — pages visited, feature usage, and error reports — used to improve the product. No third-party trackers.
2. How we use your data
Generate your reports
Your role, city, experience, and compensation inputs are sent to our AI provider (Anthropic Claude) to produce your personalised salary benchmark, hike, and switch reports.
Improve the product
Aggregated, de-identified usage signals help us prioritise features and refine accuracy. Your individual salary inputs are never combined with personally identifying details for analytics.
Account and billing
Your email and purchase history are used to send transactional receipts, downloadable invoices, and the occasional service notice. We do not send marketing emails without your opt-in.
3. How we protect it
Practical safeguards we have in place today:
- TLS 1.2+ encryption for all data in transit
- Database encryption at rest via Supabase (Postgres + RLS policies)
- Cashfree payment processing — PCI-DSS compliant; we never see or store your card details
- Server-side service-role keys are never exposed to the browser
- Strict Row-Level Security so each user can only read and write their own data
No system is invulnerable. We disclose verifiable controls only — we do not claim certifications we do not hold.
4. Resume & salary privacy
Compensation and resume data are the most sensitive things a career platform handles. Our defaults are conservative.
No recruiter access
SalaryScope AI is not a job board. Recruiters cannot browse profiles, search resumes, or contact users through the platform.
Not indexed publicly
Resume content and salary inputs are never published, syndicated, or made discoverable by search engines.
Anonymised for benchmarks
When your inputs contribute to aggregated market benchmarks, they are stripped of identifiers and combined with at least dozens of other entries before they appear in any output.
6. Third-party services
We use a small number of vetted providers. Each is used only for the purpose listed below — no data is shared for advertising, profiling, or resale.
| Service | Purpose |
|---|---|
| Google OAuth | Sign-in option — used only for authentication. |
| Cashfree | Payment processing for plan and credit purchases. |
| Anthropic Claude | AI model that generates your salary and career reports. |
| Supabase | Authentication and database hosting. |
| Sentry | Anonymous error tracking to detect and fix bugs. |
7. Retention & your rights
Personal data is retained while your account is active. Once you delete your account, all identifying data is wiped from our servers within 30 days. Aggregated, de-identified benchmark inputs may remain in our dataset.
Under the Indian DPDP Act and GDPR, you can exercise the following rights — email us and we'll action requests within 30 days:
- 01Right to access. Request an export of every piece of personal data we hold for your account.
- 02Right to erasure. Delete your account and have all identifying data wiped from our systems within 30 days.
- 03Right to rectification. Correct any inaccuracies in your profile or report inputs.
- 04Right to withdraw consent. Opt out of optional data collection (e.g. resume retention) at any time.
8. Contact
Questions or requests regarding this policy can be sent to contact@salaryscopeai.com. We aim to acknowledge every request within 3 working days.
We may update this policy as the product evolves. Material changes will be announced in-app or by email at least 14 days before they take effect.