Privacy Policy

1. Introduction

CyberCairn (“we”, “us”, or “our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you visit our website, submit a contact form, or book a 1-on-1 cybersecurity mentorship session.

Data controller (Data Fiduciary): CyberCairn Mentorship, India. Contact: info@cybercairn.in. Where data is processed outside India by the providers listed below, we rely on their contractual security commitments. Under India's Digital Personal Data Protection Act, 2023 you may request access, correction, erasure, and grievance redressal, and nominate another person to act for you, by emailing us.

By using our platform, you consent to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect information that you provide directly to us, including:

• Contact form submissions: name, email address, subject, and message content.
• Booking information: full name, email address, selected service, preferred date and time, and any notes you share to help us prepare for your session.
• Payment details: payments are processed securely through Razorpay. We do not store full card numbers, CVV codes, or banking passwords on our servers. We retain transaction IDs, payment status, and amounts for record-keeping and refunds.
• Authentication data: if you sign in using Google, Microsoft, or email and password, we receive your name, email address, and profile identifier from the respective provider.
• AI resume check and learning plans: resume text, target role, onboarding answers and submitted work are processed to produce the output you request. The standalone resume checker does not save your pasted resume; it saves purchased results and included-use records privately so you can reopen results and use your re-check. Resume text supplied for an interview is part of that interview’s saved preparation data.
• Technical data: IP address, browser type, device information, operating system, referral source, and pages visited to help us improve security and user experience.

3. How We Use Your Information

We use your personal data to:

• Deliver and schedule 1-on-1 mentorship sessions.
• Deliver requested AI resume checks, interview reports, personalized plans and detailed submission feedback; keep purchased results and included allowances available to your account.
• Process payments, issue refunds, and maintain financial records.
• Send booking confirmations, reminders, calendar invites, and follow-up communications.
• Respond to enquiries submitted through our contact form.
• Improve platform functionality, analyse traffic patterns, and prevent fraud or abuse.
• Comply with legal obligations and enforce our Terms of Service.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to remember your preferences, analyse site traffic, and understand how visitors interact with the platform. You can manage or disable cookies through your browser settings, although some features may not function correctly without them.

Essential cookies are required for authentication, booking flows, and security. Analytics cookies help us measure engagement and improve content. We do not sell cookie data to third parties.

5. Data Sharing and Third-Party Services

We do not sell or rent your personal information. We share data only with trusted service providers necessary to operate the platform:

• Razorpay for payment processing.
• Resend and/or configured SMTP providers for transactional emails.
• Google and Microsoft for social authentication, limited to the data required to create and secure your account.
• AI interviews: OpenAI and Google models, reached through our AI provider, transcribe and evaluate interview answers. Audio is not stored. We do not use your answers to train AI models.
• AI resume and learning outputs: our AI provider processes the resume or learning information submitted for the requested check, plan or review. Generated summaries can contain information from your submission; remove unnecessary contact details before submitting.
• Analytics: our own optional analytics run only after you accept them. Separately, our hosting provider (Lovable) records basic visitor statistics (pages visited and their addresses, referrer, device) for every visitor to operate and measure the site; this is not controlled by the cookie choice. No Google Analytics or advertising trackers.

All third-party providers are contractually bound to process data only on our behalf and in compliance with applicable data protection laws.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (SSL/TLS), role-based access controls for admin functions, hashed passwords, two-factor authentication for administrators, and regular security audits.

While we take every reasonable precaution, no internet transmission is completely secure. Please protect your account credentials and notify us immediately of any suspected unauthorised access.

7. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Booking and payment records are typically retained for the period required by applicable tax and accounting laws.

• Interview audio: not stored.
• Interview answer text and reports: kept until you ask us to delete them.
• Standalone resume-check input: not saved here. Resume-check results, learning plans and detailed feedback: kept privately until you request deletion; payment and usage records may be retained for the legal and accounting purposes described above.
• Email verification codes: expire after 10 minutes and are then cleaned up.
• Our optional analytics events: collected only with consent; declining removes our session identifier. Hosting-provider visitor statistics are kept under the provider's own terms.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data, subject to legal retention requirements.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, contact us at info@cybercairn.in. We will respond within the timeframe required by applicable law.

9. Children's Privacy

Our services are intended for individuals aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised policy on this page with an updated “Last updated” date. Continued use of the platform after changes means you accept the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us:

Email: info@cybercairn.in