Privacy Policy

This Privacy Policy explains how ChitraYantra Technologies Private Limited (“Company”, “we”, “us”), acting as a Data Fiduciary under India's Digital Personal Data Protection (DPDP) Act, 2023, collects, uses, stores, retains, and protects personal data through the RoleReady direct-to-student interview preparation platform at roleready.in.

1. Categories of Personal Data We Collect

We collect only personal data necessary to provide personalized spoken mock interviews and coaching feedback:

• Identity & Authentication Data: Google display name, verified Google email address, unique Google OAuth user identifier (UID) managed via Firebase Authentication, and any phone number you choose to add to your profile.
• Academic & Career Profile: Qualification level (including vocational, diploma, undergraduate, postgraduate, and doctoral backgrounds), selected academic stream (from our 19 Indian streams), subject/specialization, and up to 5 target industry job roles.
• Live Camera Preview, Sampled Images, Audio & Transcripts: During mock interviews, the camera provides a live preview only: camera video is not recorded, saved, or uploaded. We retain interview audio, text transcripts, and sampled camera images to provide the interview and coaching service. Images support limited feedback about visible framing, lighting, posture, and professional presentation. We do not use images for identity recognition, emotion detection, or sensitive personal inferences.
• Payment Transaction Records: Payment references from Razorpay or Google Play Billing, transaction amounts, purchased plans, validity dates, and verification status. We never capture, process, or store raw debit/credit card numbers, CVVs, or UPI PINs.
• Referral Programme Data: Your unique referral code, a first-visit referral attribution cookie (kept for up to 30 days), the referring account's internal identifier, and referral sign-up, qualifying-payment, and reward-ledger records. We do not show a referrer another student's contact details or payment identifiers.
• Website Analytics Data: Google Analytics may collect page views, interaction events, device/browser details, approximate location, and online identifiers using cookies and similar technologies.

2. Purpose of Processing & Lawful Basis

We process your data strictly on the basis of your affirmative, informed consent for the following lawful purposes:

• Administering live conversational mock interviews calibrated to your academic background and chosen roles.
• Generating personalized scoring, feedback reports, and category coaching across 6 dimensions.
• Processing payments for individual detailed mocks and monthly packs, managing available mocks, and enforcing pack validity.
• Creating and administering referral links, attributing a new account once, calculating the ₹19.90 qualifying-payment referral reward, displaying referral progress, and preventing fraud or duplicate-account abuse.
• Enforcing 18+ adult eligibility, preventing fraud, and administering security audit logs.
• Enabling historical tracking across your practice journey and 5-mocks-per-month milestones.
• Understanding website usage and improving RoleReady through Google Analytics.

3. Third-Party Processors & Infrastructure

We partner with enterprise-grade cloud and technology infrastructure providers who act as data processors under contractual confidentiality:

4. 90-Day Media Retention & Automatic Purge

Interview audio and sampled camera images stored in our private media storage are subject to a strict 90-day retention limit.

• Interview media is private and not made publicly accessible. Raw recording playback and raw transcripts are not provided in candidate screens; your dashboard provides coaching reports and practice history.
• Upon expiry of 90 days from interview generation, recorded media files are permanently deleted via automated Cloudflare R2 lifecycle rules.
• Text transcripts and coaching reports are retained for your practice history and continued preparation unless your account is erased. Candidates can view reports and progress; raw transcripts remain internal to the service.

5. Your Rights Under the DPDP Act, 2023

As a student (Data Principal), you are entitled to exercise the following rights:

• Right to Access: View your profile, target roles, coaching reports, and referral totals in your account. Contact the privacy team for a request concerning personal data not available through those screens.
• Right to Correction: Update your academic stream, specialization, or target roles in your profile settings.
• Right to Erasure (Account Deletion): Request complete account erasure. The account deletion workflow removes the RoleReady profile, related interview data, available mocks, payment records, referral records, and associated interview media. A deleted-account email record is retained to prevent the same email from registering again. See the account deletion page before proceeding.
• Right to Grievance Redressal: Submit inquiries or grievances to our dedicated Grievance Officer.

6. Grievance Redressal & Contact Officer

In compliance with Section 12 of the DPDP Act, 2023, you may contact our designated Grievance Redressal Officer for privacy concerns or erasure requests:

7. Make a clear privacy request

Send your request from, or identify, the Google email used for RoleReady. Specify whether you need access, a correction, a question about retention, or help with deletion. Describe the relevant profile field or interview reference so the team can understand the scope. Identity verification may be needed before account-specific information is released or changed.

Do not include passwords, authentication codes, card details, or unrelated sensitive documents in an initial message. If you are contacting us about an interview, avoid including another person’s confidential information. Our team can explain what is needed to process your request.

8. Before removing your account

Account deletion is different from updating a profile or waiting for the 90-day media retention period. It removes the RoleReady account and its associated practice records, including available paid mocks. The deleted email cannot be used to register a new RoleReady account. If you only want to correct a field or raise a concern, contact the privacy team first.

Read the account deletion information, service terms, or support guide for the action relevant to your request.