Privacy Policy

Who we are

Ingrid (ingrid.fyi) is operated by Gridilytic (OPC) Private Limited, based in Bangalore, India ("Ingrid", "we", "us"). This policy explains what personal data we collect, why, how we handle it, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

What we collect

We collect the following, and only what the service needs:

• Account data. When you sign in with Google, we receive your name and email address from your Google account.
• CV data. When you use the radar, we receive the CV file you upload (PDF or DOCX) and the information extracted from it, such as skills, experience, and the profile matches we compute.
• Configuration and roadmap data. The targets and confidence answers you provide, and the roadmap and progress generated from them.
• Payment data. When you buy a paid product, payment is handled by our payment processor. We receive confirmation and a transaction reference. We do not receive or store your full card details.
• Usage and technical data. Basic logs needed to operate and secure the service, such as request metadata.

How we use your data

We use your data to:

• Authenticate you and maintain your session.
• Produce your radar and build and deliver your roadmap.
• Operate, secure, debug, and improve the service.
• Contact you about your radar or roadmap, and respond to your requests.

We do not sell your personal data, and we do not use your CV to build any public-facing page.

Consent and legal basis

We process your personal data on the basis of the consent you give when you sign in and use the service, and where applicable for legitimate uses permitted under the DPDP Act, such as security and meeting legal obligations. You may withdraw consent at any time, as described under "Your rights" below. Withdrawing consent may mean parts of the service can no longer function for you.

Who processes your data

We use a small number of service providers (data processors) to run Ingrid. They process your data only on our instructions:

• Cloud hosting and storage for the application, files, and databases.
• AI processing to parse your CV and to validate roadmap inputs.
• Payment processing for paid products.
• Authentication through Google sign-in.
• Email delivery for notifications you receive from us.

Some of these providers may process data outside India. Where they do, we rely on the transfer mechanisms permitted under applicable law.

How long we keep it

We keep your data for as long as your account is active and for as long as we need it to provide the service and meet legal, accounting, and security obligations. You can ask us to delete your data, subject to those obligations, using the grievance contact below. [Retention periods to be confirmed by counsel.]

Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Ask us to correct or update inaccurate or incomplete data.
• Ask us to erase your personal data, subject to legal retention requirements.
• Withdraw consent.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these, contact our Grievance Officer below.

Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No system is perfectly secure, and we cannot guarantee absolute security, but we work to keep your data protected and to address issues promptly.

Children

Ingrid is intended for users who can lawfully enter into a contract. It is not directed at children. We do not knowingly collect personal data from children in a manner that requires verifiable parental consent. [Age threshold and handling to be confirmed by counsel.]

Grievance Officer

If you have any question, request, or complaint about your personal data, contact our Grievance Officer:

• Name: Aunindo Shankar
• Email: support@ingrid.co.in

We will acknowledge and respond to grievances within the timelines required under the DPDP Act.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above and, where the change is significant, take reasonable steps to notify you.