Privacy-first by design — no personal data stored by Tevara. Your resume is processed transiently and never retained on our servers. We endeavour to align with applicable data protection regulations, including the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000.
Tevara is a resume intelligence product operated by Kinnected, part of the People Elements initiative, India. We are a Data Fiduciary as defined under India's Digital Personal Data Protection Act 2023 in respect of any personal data we process in connection with your use of this service.
Product: tevara.kinnected.pro
Contact: support@tevara.kinnected.pro
We apply strict data minimisation — we collect only what is necessary for each specific, stated purpose. Below is a complete account of every category of data processed when you use Tevara.
What: The text content of the resume file you upload (PDF, DOCX, or TXT). This constitutes Sensitive Personal Data under the IT (SPDI) Rules 2011 as it may include professional history, qualifications, and financial information.
Why: To generate your resume score, narrative analysis, and Career Intelligence report. This is the sole purpose for which your resume is processed.
How it is handled: Your resume text is extracted client-side and transmitted to Anthropic's Claude API for AI analysis. It is not written to any Tevara database, file system, or storage service at any point. The transmission is encrypted in transit (HTTPS/TLS). Once the analysis is returned, the text is held in your browser session memory only and is lost when the session ends or the browser tab is closed.
Sub-processor disclosure (DPDP Act 2023, Section 8): Anthropic, Inc. (United States) processes your resume text as a Data Processor under our API agreement. Anthropic retains API inputs and outputs for up to 30 days before permanent deletion. Anthropic does not use API data for model training. Their data handling is governed by Anthropic's Privacy Policy.
Purpose limitation: Resume content is processed solely to generate your requested analysis. It is not used for any other purpose, including product development, benchmarking, or any form of resale.
What: Payment details when you purchase a full report (₹199) or JD Match checks (₹49).
Why: To process your payment and confirm entitlement to the paid service.
How it is handled: All payment processing is handled entirely by Razorpay Software Private Limited (India). Tevara does not receive, process, or store any card numbers, UPI identifiers, or bank account details. Tevara stores only: Razorpay payment ID, amount, currency, payment status, and timestamp. Razorpay is PCI DSS compliant and governed by RBI regulations for payment aggregators.
What: Anonymous, non-personal usage data — pages visited, features used, session duration, device type, and approximate geographic region (country/city level, not precise location).
Why: To understand how the product is used and to improve it. No personal data is included in analytics.
How it is handled: We use Google Analytics 4 and Microsoft Clarity. Neither service receives your name, email address, resume content, or any personally identifiable information. IP addresses are anonymised before processing. Analytics data is aggregated and anonymous.
What: Name, email address, query type, and message — submitted voluntarily through our contact form.
Why: To respond to your inquiry. We do not use contact form data for marketing without explicit separate consent.
How it is handled: Processed and stored by Netlify Forms on Netlify's servers. Retained for up to 12 months or until the inquiry is resolved, whichever is sooner. Not shared with any third party.
What: An anonymous device identifier and a count of free previews and JD Match checks used.
Why: To enforce the three free preview limit and JD Match daily check limit per device.
How it is handled: Exists only in your browser's localStorage on your device. Never transmitted to Tevara's servers. Contains no personally identifiable information. Can be cleared at any time by clearing your browser's local storage.
| Data category | Retention | Basis |
|---|---|---|
| Resume content | Not retained by Tevara. Session-only. | Data minimisation |
| Resume text at Anthropic | Up to 30 days, then permanently deleted by Anthropic | Anthropic API terms |
| Payment record (ID, amount, status only) | As required by financial regulations | Legal obligation |
| Analytics data | 14 months (GA4 default); Microsoft Clarity per their policy | Legitimate interest |
| Contact form data | Up to 12 months or until inquiry resolved | Legitimate interest |
| Browser localStorage | Until you clear your browser data | Device-only; not held by Tevara |
Tevara does not sell, licence, or share personal data with any third party for marketing, research, commercial, or any other purpose not stated in this policy.
The only parties who receive any data in connection with your use of Tevara are:
Permanent commitment: Resume content and analysis results are never licensed, sold, shared with employers, third-party researchers, data brokers, or any other party. This commitment does not change. Any future change to this position would require fresh, explicit consent from all affected users.
When you use Tevara, your resume text is transmitted to Anthropic's servers, which are located outside India (primarily in the United States). This constitutes a cross-border transfer of personal data.
Basis for transfer: The transfer is necessary to perform the service you have requested (AI resume analysis). By using Tevara and uploading a resume, you acknowledge and consent to this transfer. Without it, the core service cannot be delivered.
Safeguards in place:
Analytics data processed by Google (GA4) and Microsoft (Clarity) may also be transferred outside India. Both operate under internationally recognised data protection frameworks and standard contractual clauses.
Tevara does not set any first-party cookies for tracking or identification purposes.
Google Analytics 4 and Microsoft Clarity set cookies to measure anonymous usage patterns. These cookies do not contain personally identifiable information. You can opt out:
By continuing to use Tevara, you accept that anonymous analytics cookies may be placed by our analytics providers. No consent is required for strictly anonymous, non-identifying analytics under current Indian regulations, but we disclose this fully in the interest of transparency.
Tevara uses browser localStorage to store an anonymous device ID and preview usage count. This data never leaves your device, contains no personal information, and can be cleared by you at any time via browser settings.
Under the Digital Personal Data Protection Act 2023 and the IT (SPDI) Rules 2011, you have the following rights in respect of personal data we hold about you. Given that Tevara does not store resume content, the personal data we may hold is limited to contact form submissions and anonymous payment records.
To exercise any right, email our Grievance Officer at support@tevara.kinnected.pro stating:
We will acknowledge within 5 business days and respond fully within 30 days. If a request cannot be fulfilled, we will explain why in writing. If you remain unsatisfied, you may escalate to India's Data Protection Board once it is fully operational.
In accordance with the Information Technology (SPDI) Rules 2011 and the Digital Personal Data Protection Act 2023, we designate the following Grievance Officer for all data protection complaints:
We implement reasonable security practices as required under the IT (Reasonable Security Practices) Rules 2011:
In the event of a personal data breach that poses a risk to individuals, Tevara will:
Given that Tevara does not store resume content, the attack surface for a personal data breach is significantly limited compared to platforms that retain user data.
Tevara is designed for working professionals and is not intended for individuals under 18 years of age. We do not knowingly process personal data of minors. If you believe a minor has submitted data through our service, contact our Grievance Officer immediately and we will delete it promptly.
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make changes:
We encourage periodic review of this page. The current version number and date are shown at the top.