Legal

Privacy Policy

Effective Date: May 2, 2026 · Governing Law: India · Jurisdiction: New Delhi

Policy at a Glance

We collect data you provide and data generated through your use of our AI resume builder. We use it to deliver and improve our services, train our AI, and for lawful business purposes. We do not sell your personal data to third parties. All disputes are governed by Indian law, with jurisdiction in New Delhi. By continuing to use SureShortlist.com, you accept this Policy in full.

IMPORTANT - PLEASE READ THIS POLICY IN FULL BEFORE USING SURESHORTLIST.COM

This Privacy Policy is a legally binding document. By accessing, registering, or using SureShortlist.com in any manner, you confirm that you have read, understood, and unconditionally consented to the collection, processing, storage, and use of your personal data as described herein. If you do not agree with any part of this Policy, you must immediately cease using the Platform.

1. Who We Are and Scope of This Policy

1.1 This Privacy Policy applies to SureShortlist.com ("Platform"), an AI-powered resume building service operated by SureShortlist, based in New Delhi, India.

1.2 This Policy governs all personal data that We collect, receive, process, store, use, disclose, and retain in connection with your access to and use of the Platform, including all features, tools, AI-generated outputs, subscription services, and communications.

1.3 This Policy does not apply to third-party websites, applications, or services that may be linked to or integrated with our Platform.

1.4 This Policy should be read together with our Terms and Conditions, which are incorporated herein by reference.

2. Definitions

In this Policy, the following terms shall have the meanings assigned below:

"Personal Data" means any information relating to an identified or identifiable natural person, as defined under the Digital Personal Data Protection Act, 2023 (DPDP Act).
"Sensitive Personal Data" means Personal Data consisting of financial information, passwords, and other categories notified by the Government of India as sensitive.
"User Content" means all data, text, and materials you submit to the Platform, including career history, educational background, resume data, and job preferences.
"AI Output" means any content generated by artificial intelligence systems integrated into the Platform.
"Data Fiduciary" has the meaning assigned to it under the DPDP Act, 2023. SureShortlist acts as the Data Fiduciary.
"Processing" means any operation performed on Personal Data.
"Third-Party Service Providers" means entities that process Personal Data on behalf of SureShortlist.

3. Information We Collect

3.1 Information You Provide Directly

Account Registration: Your name, email address, mobile number, and password.
Resume and Career Data: Employment history, educational qualifications, skills, certifications, achievements, and job preferences.
Profile Information: Any additional biographical or professional information you choose to include.
Payment Information: Credit/debit card details, UPI ID, billing address - processed and stored by our third-party payment gateway providers. SureShortlist does not directly store full payment card details.
Communications: Messages, feedback, support requests, and survey responses.
Uploaded Documents: Any CVs, cover letters, certificates, or other documents you upload.

3.2 Information Collected Automatically

Usage Data: Pages visited, features accessed, actions performed, and interaction data.
Device and Technical Data: IP address, browser type, operating system, device identifiers.
Log Data: Server logs, error reports, and diagnostic data.
Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and local storage.
Geolocation Data: Approximate location derived from your IP address.

3.3 Information from Third Parties

Single Sign-On (Google, LinkedIn, etc.) - basic profile information as permitted by your settings.
Analytics providers - aggregated behavioural data.
Payment processors - transaction confirmation data.

3.4 AI-Specific Data Collection

When you use our AI resume builder, the content you input - including your career history, skills, and personal details - is transmitted to third-party AI API providers for the purpose of generating AI Output. By using the AI features of the Platform, you expressly consent to this transmission.

SureShortlist uses the data you input, the AI Outputs generated, and your interaction patterns to train, fine-tune, improve, and develop our AI models. By using the Platform, you grant SureShortlist a perpetual, royalty-free licence to use your data for this purpose.

4. How and Why We Use Your Personal Data

To Provide and Operate the Services: Creating and maintaining your account, generating AI-powered resume outputs, processing payments, providing customer support.

To Improve and Develop the Platform: Analysing usage patterns, training AI models, conducting research, A/B testing, monitoring performance.

For Communications and Marketing: Sending transactional communications, promotional emails (subject to your preferences), and service announcements.

For Legal, Compliance, and Security Purposes: Detecting fraud, complying with applicable law, enforcing our Terms, protecting rights and safety.

5. Sharing and Disclosure of Personal Data

WE DO NOT SELL YOUR PERSONAL DATA TO THIRD PARTIES.

We share data with carefully selected third-party service providers including AI API providers, cloud hosting providers, payment gateways, email service providers, analytics providers, and customer support tools. All providers are bound by contractual obligations to maintain appropriate security standards.

6. Data Retention

We retain your Personal Data for as long as necessary to fulfil the purposes for which it was collected. Indicative retention periods are:

Account data: Duration of account + 3 years post-closure
Resume and User Content: Duration of account + 2 years post-closure
Payment records: 7 years (tax compliance)
Usage data: Up to 3 years
AI training data (anonymised): Indefinitely

7. Cookies and Tracking Technologies

SureShortlist uses cookies, web beacons, pixel tags, and similar tracking technologies to operate, secure, analyse, and improve the Platform. We use strictly necessary cookies, performance cookies, functional cookies, and marketing cookies. You may manage your preferences through browser settings.

8. Artificial Intelligence - Special Provisions

This section governs how your data is used in connection with AI features.

Core AI Processing: When you use any AI-powered feature, your User Content is processed by AI systems - which may include third-party APIs - to generate AI Output.

AI Training Licence: By submitting User Content, you grant SureShortlist a perpetual, irrevocable, worldwide, royalty-free licence to use your data for training AI models. This licence survives termination of your account.

Third-Party AI APIs: Your data may be transmitted to third-party AI providers. SureShortlist does not accept liability for the data practices of third-party AI providers.

No Guarantee of AI Accuracy: SureShortlist does not warrant the accuracy, completeness, or reliability of any AI Output.

9. Data Security

SureShortlist implements reasonable security measures including encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is completely secure. SureShortlist shall not be liable for any unauthorised access beyond its reasonable control.

10. Data Storage and Cross-Border Transfers

Your Personal Data is primarily stored on servers located in India. Certain third-party service providers may store or process your data on servers outside India. By using the Platform, you consent to such cross-border transfers.

11. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access - Obtain a summary of Personal Data we hold about you.
Right to Correction and Erasure - Request correction of inaccurate data or erasure where no longer necessary.
Right to Grievance Redressal - Have grievances addressed by our Grievance Officer.
Right to Withdraw Consent - Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at [email protected].

12. Grievance Officer and Contact

GRIEVANCE OFFICER - IT RULES 2011 & DPDP ACT 2023

Name: SureShortlist Support

Designation: Grievance Officer

Email: [email protected]

Address: New Delhi, India

Response Timeline: We will acknowledge your grievance within 48 hours and endeavour to resolve it within 15 days.

For general privacy queries: [email protected]

13. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect Personal Data from minors. If you believe we have collected data from a minor, please contact us at [email protected].

14. Third-Party Websites and Services

We are not responsible for the privacy practices of any third-party websites or services linked to or integrated with our Platform.

15. Disclaimer of Warranties and Limitation of Liability

To the fullest extent permitted by applicable law, SureShortlist shall not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages arising out of or in connection with this Policy or the processing of your Personal Data. SureShortlist's total aggregate liability shall not exceed INR 1,000 or the total amount paid by you in the three months preceding the claim, whichever is lower.

16. Updates to This Privacy Policy

SureShortlist reserves the right to modify this Policy at any time. The updated Policy will be posted on this page with a revised "Last Updated" date. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.

17. Governing Law and Dispute Resolution

This Policy shall be governed by the laws of India. Any dispute shall be subject to the exclusive jurisdiction of the courts of New Delhi, India, and shall be resolved in accordance with the dispute resolution mechanism set out in our Terms and Conditions.

18. Regulatory Compliance Summary

SureShortlist strives to comply with the Digital Personal Data Protection Act, 2023; IT Act, 2000 and IT Rules, 2011; Consumer Protection Act, 2019; RBI Payment Data Localisation Guidelines; Indian Contract Act, 1872; and Copyright Act, 1957.

By using SureShortlist.com, you confirm that you have read, understood, and provided informed consent to this Privacy Policy in its entirety.