Privacy Policy

Information You Provide

• 1.Full Name
• 2.Phone Number
• 3.Work, Personal, or Student Email
• 4.Uploaded files (PDF resumes, docs, images)
• 5.Resume text & extracted data
• 6.Photos for portfolios
• 7.Social links (LinkedIn, GitHub, Behance, etc.)
• 8.Payment details (card numbers never stored by us)
• 9.All career-related information you enter

Automatically Collected Data

(Not yet active — for future integrations)

• 1.IP address
• 2.Device & browser type
• 3.Cookie data
• 4.Website usage analytics
• 5.Page interaction & session information

AI Processing

• 1.Resume text
• 2.Portfolio content
• 3.Career information
• 4.Inputs for cover letters, summaries, and suggestions

Use of Artificial Intelligence

Our platform uses a hybrid artificial intelligence architecture that integrates both internally managed systems and third-party AI models to deliver features such as resume creation, optimization, analysis, and content generation. To balance performance, availability, and cost efficiency during early-stage operation, we utilize a combination of AI models with differing data-handling characteristics.

Data Processing and Model Behavior

Some of the AI models used on our platform are designed to process data solely for inference and do not use user inputs for training. Other models, provided by third-party vendors, may process inputs in accordance with their own policies, which can include using data to improve system performance, reliability, or quality. Model selection and routing are handled internally on a priority and suitability basis and may vary depending on the feature being used.

Resume and Career Information

Resume content, career history, and related information are processed strictly to deliver the requested functionality. Depending on the feature and system availability, such content may be processed by different AI models as part of normal platform operation. We continuously evaluate our AI infrastructure and plan to expand the use of privacy-preserving and controlled AI environments as the platform grows.

Priority-Based Model Selection

Our platform dynamically selects AI models based on internal priorities such as reliability, performance, and availability. This selection process may involve models with different data-handling practices and is designed to ensure consistent service delivery.

Our Approach to Privacy

As our user base and product mature, we intend to progressively transition sensitive workflows to more privacy-preserving AI systems. Our long-term objective is to maximize user data protection while maintaining high-quality AI-powered features.

What Data We Collect

We collect only what is needed to power the platform: name, phone number, email, resume/portfolio content, and career-related inputs that students choose to enter. Nothing beyond this — no hidden tracking, no browsing data sold or shared.

Where and How Data Is Stored

This means student data stays within Indian infrastructure and is not passed through third-party AI services for processing.

• 1.Database: Supabase (Postgres), hosted on servers located in India
• 2.Authentication: Clerk
• 3.AI Processing: Azure, using self-hosted models — student data is not routed through external AI vendors
• 4.Hosting: Vercel

Third-Party Sharing

Student data is never sent to any third-party vendor, recruiter, or external party by default. The only exception is the Recruiter Connect feature, which is entirely student-controlled: data is shared only if the student explicitly approves it from their dashboard, where we clearly explain how the connection works and what gets shared before they opt in.

Data Shared With Institutions

Partner colleges may access aggregated student activity data such as placement readiness scores, quiz performance, resume completion metrics, and interview practice statistics. This data is used exclusively to help institutions support their students' career readiness. Institutions can only view data for students enrolled under their organization code.

Security

• 1.End-to-end encrypted connections (HTTPS/SSL)
• 2.Limited internal access controls
• 3.Continuous threat monitoring
• 4.Isolated file storage

Compliance

We operate in line with the IT Act 2000, SPDI (Sensitive Personal Data or Information) Rules, and the Digital Personal Data Protection Act (DPDP), 2023.

Data Retention & Deletion

• 1.Students can delete their account or files anytime, edit their data, export it, or revoke recruiter access via support@modncv.com
• 2.If a partner college opts out of the program, all associated student data is retained for 30 days (for continuity and security purposes) and then permanently deleted from our systems

Student Notification

Students enrolled through an institutional partnership are informed that their platform usage metrics (such as placement readiness, resume activity, and interview practice) may be visible to their institution's administrators. This is communicated during the student verification process.

Data Processing Agreement

Partner colleges may request a formal Data Processing Agreement (DPA) that outlines mutual obligations regarding student data protection. Contact support@modncv.com for details.

What the Extension Accesses

The extension only reads publicly visible information on the LinkedIn page you are viewing. It does not access private messages, connection lists, or any data not visible on the profile page.

• 1.Publicly visible LinkedIn profile data (name, headline, about, experience, education, skills)
• 2.Profile photo and banner presence (detected, not downloaded)
• 3.LinkedIn profile URL
• 4.Connection count

How Data Is Processed

• 1.Profile data is scraped from the visible page and sent to MODNCV servers via encrypted HTTPS connection
• 2.Data is processed by Azure AI models to generate optimization suggestions
• 3.Results are stored in your MODNCV account (linked via signed authentication token)
• 4.No data is stored locally on your device beyond your authentication token

Authentication & Security

• 1.The extension requires you to sign in to your MODNCV account before use
• 2.Authentication uses HMAC-signed tokens that expire after 7 days
• 3.Tokens are generated server-side and cannot be forged or modified
• 4.API calls are rate-limited to 10 analyses per hour per user
• 5.All communication uses HTTPS encryption

Data Storage

• 1.Analysis results are stored in your MODNCV account and visible on your dashboard
• 2.You can delete analysis results at any time from the LinkedIn tab in your dashboard
• 3.Raw scraped data is stored to enable keyword consistency re-computation
• 4.Extension data is stored separately from file-upload optimization data

Permissions Justification

• 1.activeTab: Required to read LinkedIn profile content on the active page
• 2.storage: Required to store your authentication token locally
• 3.tabs: Required to open LinkedIn detail pages (skills/experience) in background for complete data extraction
• 4.scripting: Required to inject the optimization button and results panel on LinkedIn pages
• 5.Host permission (linkedin.com): Required to operate on LinkedIn profile pages
• 6.Host permission (modncv.com): Required to communicate with MODNCV servers for analysis

What the Extension Does NOT Do

• 1.Does not access your LinkedIn login credentials or cookies
• 2.Does not post, message, or take any action on your LinkedIn account
• 3.Does not track your browsing activity outside of LinkedIn profile pages
• 4.Does not sell or share scraped data with any third party
• 5.Does not store other people's profile data without their knowledge (analysis is linked to your account only)
• 6.Does not run in the background when not actively being used on a LinkedIn profile page

Third-Party Profiles

When you analyze another person's LinkedIn profile using the extension, the publicly visible information is processed for optimization suggestions. This data is stored in your MODNCV account as part of your analysis history. The profile owner is not notified. Only publicly available information (visible to any LinkedIn visitor) is accessed.

Removal & Data Deletion

Uninstalling the Chrome extension removes all locally stored data (authentication token). Server-side analysis data remains in your MODNCV account until you manually delete it from the dashboard. You may also request complete data deletion by contacting support@modncv.com.

Prohibited Content Uploads

We may suspend or delete user accounts that violate these rules.

• 1.Malware, viruses, scripts, or harmful files
• 2.Illegal, copyrighted, or plagiarized content
• 3.Fake resumes, fake identities, or fraudulent documents
• 4.Offensive, explicit, or discriminatory content

AI Usage Restrictions

Users are responsible for reviewing all AI-generated content before use.

• 1.Use AI tools for fraudulent identity creation
• 2.Resell or redistribute generated content commercially
• 3.Use AI outputs to deceive employers or violate job application rules
• 4.Claim MODNCV's AI-generated content as professional legal advice

Abuse Prevention & Rate Limiting

Any abuse may result in permanent termination.

• 1.Create multiple accounts to bypass limits
• 2.Use bots, automation scripts, or scraping tools
• 3.Attempt unauthorized access, penetration testing, or data scraping
• 4.Overload the system by mass-generating content

Payment Fraud Prevention

• 1.Fraudulent transactions or chargebacks may lead to permanent account bans
• 2.We may share fraud-related transaction details with payment gateways or authorities
• 3.Refunds follow our Refund Policy

Anti-Spam & Ethical Use

Violation may result in immediate suspension.

• 1.Spam recruiters or hiring agents
• 2.Send unauthorized bulk messages
• 3.Use our platform for harassment or illegal employment offers
• 4.Impersonate another person or organization

Public Portfolio Moderation

If portfolios are publicly accessible: Harmful, offensive, explicit, or misleading content is forbidden. MODNCV reserves the right to hide, modify, or remove such content.

Data Export Safety

To prevent identity theft: MODNCV may request identity verification before exporting data. We may deny data export if a request appears suspicious.

Recruiter Access Safeguards

If you choose to connect with recruiters: Only minimal, necessary data is shared. You must not misuse recruiter access for spam. MODNCV may revoke access for improper use.

Account Termination Rights

MODNCV may terminate or suspend accounts if: Terms are violated, fraudulent activity is detected, content or behavior threatens platform security, or illegal or harmful actions occur. We may take action without notice in serious cases.

Legal Compliance

We may disclose user data if required to: Comply with law enforcement, respond to legal claims, protect the safety of users or the public, or safeguard MODNCV's legal rights.

No Guarantee of Employment

MODNCV does not guarantee jobs, interviews, recruiter responses, or any specific employment outcome. We provide tools, not employment guarantees.

Policy Changes & Feature Modifications

We reserve the right to: Modify features, add new restrictions, update pricing, change access rules, and modify or remove services. Continued use means acceptance of updated terms.