Privacy Policy
Last updated: February 2026
1. Introduction
PlacementPilot AI ("we," "our," or "us"), operated by Mindweave Technologies Pvt. Ltd., is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA") of India and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI-powered placement preparation platform.
2. Data Fiduciary Information
Data Fiduciary: Mindweave Technologies Pvt. Ltd.
Registered Address: Bangalore, Karnataka, India
Contact Email: [email protected]
Data Protection Officer: [email protected]
3. Personal Data We Collect
We collect the following categories of personal data:
3.1 Information You Provide
- Account Information: Name, email address, phone number, profile photo
- Educational Information: College name, department, batch year, CGPA, academic records
- Professional Information: Resume, skills, certifications, work experience
- Assessment Data: Mock interview recordings, test scores, trainer feedback
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, session duration
- Device Information: Browser type, device type, IP address
- Cookies: Session cookies, preference cookies (with your consent)
4. Purpose of Processing (DPDPA Section 5)
We process your personal data for the following lawful purposes:
- Service Delivery: Providing placement preparation services, mock interviews, and assessments
- AI-Powered Analysis: Resume scoring, readiness assessment, personalized recommendations
- Reporting: Generating placement reports for your institution (with consent)
- Communication: Sending service updates, notifications, and support responses
- Improvement: Analyzing usage patterns to improve our services
- Legal Compliance: Meeting regulatory and legal obligations
5. Consent (DPDPA Section 6)
We obtain your explicit, informed consent before processing your personal data. You may:
- Grant or withdraw consent for specific processing activities
- Manage your consent preferences through your account settings
- Withdraw consent at any time (this will not affect processing done before withdrawal)
Your Right: You can manage your consent preferences at any time by visiting yourPrivacy Settings.
6. Your Rights (DPDPA Chapter III)
As a Data Principal under DPDPA, you have the following rights:
Right to Access (Section 11)
Request a summary of your personal data and processing activities.
Right to Correction (Section 11)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Section 12)
Request deletion of your personal data when no longer necessary.
Right to Data Portability (Section 13)
Receive your data in a structured, machine-readable format.
Right to Grievance Redressal (Section 13)
Lodge complaints about data processing practices.
To exercise any of these rights, please contact us at [email protected] or use the tools in your Privacy Settings.
7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
| Data Category | Retention Period |
|---|---|
| Account Data | Duration of account + 3 years |
| Candidate Profiles | 2 years from last activity |
| Assessment Records | 2 years |
| Interview Recordings | 1 year (auto-deleted) |
| Activity Logs | 1 year (for security audit) |
| Consent Records | 7 years (legal requirement) |
8. Data Sharing
We may share your personal data with:
- Your Institution: Placement statistics and reports (with your consent)
- Service Providers: Cloud hosting (Supabase, Vercel), video platform (Daily.co)
- Legal Authorities: When required by law or court order
We do not sell your personal data. All third-party service providers are bound by data processing agreements compliant with DPDPA requirements.
9. Data Security (DPDPA Section 8)
We implement appropriate security measures to protect your personal data:
- Encryption at rest and in transit (TLS 1.3)
- Row-level security in database
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Employee training on data protection
10. Data Breach Notification (DPDPA Section 8)
In the event of a personal data breach that is likely to cause harm, we will:
- Notify the Data Protection Board of India within 72 hours
- Inform affected Data Principals without undue delay
- Provide details of the breach and remedial actions taken
11. Grievance Redressal
If you have concerns about our data processing practices, you may:
- Contact our Data Protection Officer at [email protected]
- We will respond within 7 days and resolve within 30 days
- If unsatisfied, you may approach the Data Protection Board of India
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email and/or a prominent notice on our platform. Continued use after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy inquiries: [email protected]
Data Protection Officer: [email protected]
General support: [email protected]