Privacy Policy

1. Introduction

Welcome to My Student Club. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. This policy applies to all information collected through our website (mystudentclub.com) and any related services, sales, marketing, or events.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about us or our products and services, when you participate in activities on the website, or otherwise when you contact us.

• Account Information: We collect your email address and password for account creation and login. If you use Google Sign-In, we receive your email address and basic profile information from Google.
• Professional Profile Information: To provide our AI-powered services, we collect your full name, contact number, LinkedIn URL, resume/CV content, CA education details (level, attempts), achievements, work experience, and job preferences. This information is stored in your profile.
• Application Data: We track which jobs you apply for through our portal to help you manage your applications and to improve our services.
• Payment Information: When you purchase a course, your payment is processed by our third-party payment processor (e.g., PayU). We do not store your full credit card or financial details on our servers.
• Device and Notification Information: If you opt-in for push notifications, we collect a Firebase Cloud Messaging (FCM) token associated with your device to send you job alerts.
• Usage Information: We may collect information about your interactions with our website through analytics providers like Google Analytics.

3. How We Use Your Information

We use the information we collect for various business purposes, including:

• To provide and manage our services: This includes creating and managing your account, providing access to job portals, and delivering purchased courses through our Learning Management System (LMS).
• To power AI features: Your resume and profile information are sent to our secure AI models to provide services like the CV Reviewer, AI-Powered Apply, AI Interview Coach, and LinkedIn Note Generator.
• To send notifications: We use your FCM token and subscription preferences to send you relevant job alerts.
• To process transactions: We use enrollment information to grant access to paid content.
• To communicate with you: We may use your contact information to respond to your inquiries and provide support.
• To improve our services: We analyze usage data to understand how our services are used and to make improvements.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with third-party vendors, service providers, or agents who perform services for us or on our behalf and require access to such information to do that work.

Our key third-party services include:

• Supabase: Provides our backend infrastructure, including database hosting for profiles, jobs, and applications, as well as user authentication services.
• Google (Firebase & Analytics): Used for sending push notifications (Firebase Cloud Messaging) and for analyzing website traffic (Google Analytics).
• Cloudflare: Hosts our AI models on secure servers (Cloudflare Workers) to process data for features like the CV Reviewer and AI Apply.
• PayU (or similar): Processes payments for our paid courses.

CV Sharing with Employers

When you upload your CV/resume and provide explicit consent via our consent checkbox, we share your CV and profile details with registered companies and recruiters on our platform for the sole purpose of job-matching. Specifically:

• Your CV is shared only with employers registered on My Student Club.
• Sharing occurs only after you have provided explicit, informed consent through our consent mechanism.
• Employers may view your profile details including name, contact information, education, experience, and resume content.
• Your CV data is never sold to third parties.

We may also disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, or legal process.

5. Your Data Rights

You have certain rights regarding your personal information:

• Access and Update: You can review and update your personal information at any time by logging into your account and navigating to the Profile page.
• Opt-out of Notifications: You can manage your push notification preferences from the notification icon on the job portal pages or through your browser settings.
• Withdraw Consent: You can withdraw your CV sharing consent at any time by unchecking the consent checkbox on your Profile page. Upon withdrawal, your CV will no longer be shared with employers.
• Data Deletion (Right to Erasure): You can permanently delete your account and all associated data — including your profile, CV, consent records, application history, and course enrollments — from the Delete Account page. Deletion is irreversible and takes effect immediately.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. We use reputable third-party services like Supabase for data storage and authentication. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by a revised "Last Updated" date. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

8. DPDP Act Compliance

My Student Club operates as a Data Fiduciary under India's Digital Personal Data Protection (DPDP) Act, 2023. In accordance with this legislation:

• Lawful Basis: We process your personal data based on your explicit, informed consent. Consent is collected through a mandatory, un-pre-ticked checkbox before any CV data is shared with employers.
• Purpose Limitation: Your CV and profile data are used exclusively for job-matching and recruitment purposes.
• Data Minimisation: We collect only the information necessary to provide our services.
• Consent Records: We maintain timestamped records of your consent, including the exact text you agreed to, the date of consent, and your browser information, to demonstrate compliance. We log your IP address and browser User-Agent solely for the purpose of maintaining a legally required audit trail of your consent.
• Right to Withdraw: You may withdraw consent at any time from your Profile page. Withdrawal takes effect immediately.
• Data Retention: Your CV and consent records are retained only as long as your account is active and consent is in effect. Upon account deletion or consent withdrawal, relevant data is permanently removed.

9. Employer Data Processing Obligations

Employers and recruiters who access candidate CVs through My Student Club are bound by the following terms:

• Employers act as Data Processors upon receiving CV data from our platform.
• CV data must be used solely for recruitment and job-matching purposes.
• Employers must not sell, trade, lease, or share candidate data with any third party without the candidate's separate, explicit consent.
• Employers must honour deletion requests from candidates and delete CV data within 30 days of such a request or upon completion of the hiring cycle, whichever is earlier.
• Employers must implement appropriate security measures to protect candidate data from unauthorised access, disclosure, or loss.
• Violation of these terms will result in immediate suspension of the employer's account and potential legal action under the DPDP Act.

10. Grievance Officer & Contact Us

In compliance with the DPDP Act, we have appointed a Grievance Officer to address your data privacy concerns. For any data privacy concerns, questions about this policy, or to exercise your data rights, please contact our Grievance Officer at:
Email: admin@mystudentclub.com