Privacy Policy

This Privacy Policy ("Policy") describes how HRTailor.AI ("HRTailor.AI", "we", "us", "our"), a platform owned and operated by SKAD Business Solutions Pvt Ltd, collects, uses, discloses, combines, retains and otherwise processes information in connection with our websites, applications, tools, APIs and related services (together, the "Services"). It applies to users everywhere in the world and forms part of, and is incorporated by reference into, our Terms & Conditions. Capitalised terms not defined here have the meaning given in the Terms.

1. Acceptance and the basis on which we process data

By accessing or using the Services, creating an account, or submitting any information to us, you agree to this Policy and consent to our collection, use, combination, disclosure and other processing of your information as described here, and you confirm you are authorised to provide any information you submit. Where we rely on a legal basis other than consent, such as our legitimate interests in operating, securing, improving, personalising and commercialising the Services, performance of a contract with you, or compliance with law, we do so to the fullest extent permitted by applicable law. If you do not agree, do not use the Services.

Data-protection laws differ by country. Where a specific law grants you a right that cannot be waived, we honour that right; nothing in this Policy is intended to limit a non-waivable statutory right you have under the law that applies to you.

2. Information we collect

We collect the following categories of information:

• Account and business information, such as your name, email, phone, role, employer, and billing details.
• Content you submit, including prompts, uploaded files, and the documents, calculations and answers you generate and save.
• Device, network and identifier data, such as IP address, device and browser fingerprint, operating system, identifiers, and an approximate location derived from these signals.
• Usage and interaction data, including pages viewed, features used, clicks, session activity, referring pages, and the times and frequency of your activity.
• Cookies and similar signals, as described in Section 3, including from third-party analytics and advertising technologies.
• Transaction and payment data, processed through our payment providers; we receive confirmation and limited billing details rather than full card numbers.
• Communications, such as messages you send us, support requests, survey responses, and your marketing preferences.
• Information from third parties, such as sign-in providers, payment processors, analytics and advertising partners, and publicly available sources, which we may combine with the information above.
• Inferences and derived data we create from the above, including profiles, segments and preferences used to personalise, secure, improve and market the Services.
• Attendance location, only at the moment of clock-in, as described in Section 8.

3. Cookies, analytics and advertising technologies

We and our partners use cookies, pixels, tags, web beacons, local storage, software development kits and similar technologies for authentication, security, preferences, performance and analytics, personalisation, and advertising and measurement. These technologies fall into broad categories:

• Strictly necessary, required to sign you in, keep the Services secure and make them function. These are always on.
• Performance and analytics, which help us and our analytics providers understand and improve how the Services are used.
• Functional, which remember your choices and enable enhancements.
• Advertising and targeting, which we and third-party advertising, retargeting and measurement partners may use to deliver, personalise, cap, attribute and measure advertising on our Services and across other sites and apps, and to build audiences and interest segments. This may involve setting identifiers and sharing certain online identifiers and activity with those partners.

Where the law requires consent for non-essential cookies or for certain advertising activities, we obtain it through a cookie control or banner, and you can change or withdraw your choice at any time. You can also manage cookies through your browser or device settings and use industry opt-outs where available. Because there is no common standard, we do not respond to browser "Do Not Track" signals except where the law requires. Blocking some technologies may affect how the Services work. We reserve the right to add, change or remove analytics and advertising partners and technologies at any time.

4. How we use your information

We use the information we collect, and combine information across sources, for purposes including:

• Providing, operating, maintaining and securing the Services and generating the outputs you request.
• Personalising your experience and content, and developing, testing and improving existing and new products, features and models.
• Analytics, research, benchmarking, and measuring the performance and effectiveness of the Services and our marketing.
• Marketing, advertising and promotion, including sending you communications, showing and personalising advertising on and off our Services, building and using audiences and segments, and measuring and attributing advertising.
• Creating aggregated, anonymised or de-identified data and insights, which we may use, publish, license and otherwise commercialise for any purpose, including product development and industry reporting.
• Enforcing our Terms, verifying eligibility, applying usage limits, and preventing fraud, abuse and security incidents.
• Processing payments, maintaining records, and complying with legal, tax and regulatory obligations.
• Establishing, exercising or defending legal claims, and in connection with a corporate transaction as described in Section 7.

5. AI providers and how your inputs are processed

The Services use artificial-intelligence models to generate your documents and answers. Some of these models are operated by various third-party AI providers, and to produce a result the inputs you submit may be sent to those providers. We do not control, and are not responsible for, how third-party AI providers handle data once it reaches them. On our free tier, inputs may be routed to third-party or free AI tools, and those providers may retain and use the submitted data to train and improve their own models; we cannot guarantee deletion once a provider has used it. Inputs submitted on a paid plan are not used for AI model training. We may also use your content and usage data to develop and improve our own models and Services. Please do not submit confidential or sensitive information you would not want processed this way.

6. Data you submit about other people

Much of what you enter is personal data about someone else, such as an employee, candidate or contractor. For that data you act as the controller or data fiduciary and we act as your processor, handling it on your instructions. If you upload or enter another person's data, you are solely responsible for obtaining that person's permission and having a lawful basis to share it with us, and you agree to indemnify and hold HRTailor.AI and SKAD Business Solutions Pvt Ltd harmless from any claim, loss or penalty arising from data you provided without proper permission or a lawful basis. If such a person contacts us directly, we will route them to you.

7. How we share and disclose information

We share information in the following ways:

• Service providers and processors that host, support, secure and operate the Services (including hosting, AI processing, payments, email, customer support and analytics).
• Advertising, analytics and measurement partners, with whom we may share online identifiers, device data and activity to provide, personalise, measure and attribute advertising and analytics, including for cross-context or targeted advertising.
• Our group companies and affiliates, including within the SKAD HR Group, for the purposes described in this Policy.
• Corporate transactions, meaning any actual or proposed merger, acquisition, financing, reorganisation, or sale of assets, in which information may be disclosed or transferred as a business asset.
• Legal and safety, where we believe disclosure is required by law or legal process, or is appropriate to protect our rights, users, or the public, or to enforce our Terms.
• With your direction or consent, or as otherwise described at the point of collection.

We do not sell your personal data for money. Some sharing for advertising and analytics may be considered "selling" or "sharing" under certain laws (such as California's); where that is the case and the law gives you a right to opt out, you may exercise it as described in Section 12. We may share aggregated, anonymised or de-identified information freely and for any purpose.

8. Attendance and location (optional)

If your employer uses HRTailor.AI attendance and you choose to clock in or out, we capture your device's location at that moment and attach it to that single attendance entry. This is a one-time location pin taken only when you tap to clock in or out. It is not continuous or background tracking, and it is not geofencing. Your device asks for permission first, and you can decline. For attendance, your employer is the controller and we are the processor.

9. Marketing communications

We may send you service messages and, subject to applicable law, marketing communications about our and our group's products, offers and content. You can opt out of marketing at any time using the unsubscribe link or by contacting us; we will still send you necessary service and transactional messages.

10. Data storage, transfers and retention

Your information may be stored and processed in any country where we or our providers operate, including countries outside your own whose data-protection laws may differ. Where required, we use recognised safeguards for cross-border transfers. We retain personal data for as long as we consider necessary for the purposes in this Policy, to run and improve our business, and to meet legal, accounting, tax and security requirements. In particular:

• Active accounts: we keep your data while your account is active, and delete it within 90 days of account closure, subject to the exceptions below.
• Inactive accounts: accounts inactive for 24 months may be purged.
• Candidate records: details of a person who never joined are deleted automatically 180 days after the record is created.
• Legal, security and financial records: retained for as long as the law or our legitimate interests require.
• Aggregated, anonymised or de-identified data: we may keep and use indefinitely.

You can delete your own profile, saved companies, drafts and generated documents at any time from your My Account page.

11. Security, and our limits

We take reasonable administrative, technical and organisational measures to protect data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security and, to the fullest extent permitted by law, accept no liability for any loss, breach, or other mishap. You are responsible for keeping your credentials and devices secure and for telling us promptly if you suspect unauthorised access.

12. Your rights and choices

Subject to your local law, you may request to access, correct, delete, port or restrict your personal data, object to certain processing, and, where processing relies on consent, withdraw it. Where advertising sharing is treated as a "sale" or "share", you may opt out. To make a request, contact our Grievance Officer at [email protected]. We may verify your identity and may decline requests as permitted by law. We will not discriminate against you for exercising your rights.

13. Regional information

EEA and UK: we process personal data on the legal bases of consent, contract, legal obligation, and our legitimate interests, and we honour GDPR/UK GDPR rights. California: we honour CCPA/CPRA rights, including the right to know, delete, correct, and opt out of "sale" or "sharing" and certain targeted advertising. India: we handle personal data consistently with the Digital Personal Data Protection Act. Where these laws apply, their non-waivable rights prevail over anything inconsistent in this Policy.

14. Children

The Services are intended for users aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will remove it.

15. Third-party links and services

The Services may link to or integrate third-party sites and services with their own privacy practices, for which we are not responsible. Review their policies before providing information.

16. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the "Last updated" date, and, where required, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

17. Governing law and contact

This Policy is governed by the laws of India, and the courts at Mumbai have exclusive jurisdiction over any dispute relating to it, without affecting any non-waivable rights you have under your local law. For any privacy question, data request or complaint, contact our Grievance Officer:

Grievance Officer, HRTailor.AI
SKAD Business Solutions Pvt Ltd, Mumbai, India
Email: [email protected]