Privacy Policy
Website: firstdayai.in
FirstDay AI (“FirstDay,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights you have. It applies to firstdayai.in and all Services offered by FirstDay AI (the “Services”), including the candidate dashboard, AI Resume Builder, Mock Interview, Interview Intelligence, Targeted Application Engine, Profile Optimisation, and Insider Referral Network.
By using the Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Services.
1. Information We Collect
a. Information you provide directly:
- Account information: name, email address, phone number, password (stored hashed).
- Profile and resume content: work experience, education, skills, certifications, portfolio links, salary expectations, target role, target location, work authorisation status.
- Intake responses: career goals, preferences, current employment situation, and answers to onboarding questions.
- Communications: messages you send us via email, in-app chat, support forms, or social media.
- Payment information: handled by our payment processor (for example, Stripe). We do not store your full card number or CVV on our servers.
b. Information collected automatically:
- Device and browser information: IP address, device type, operating system, browser type, screen resolution.
- Usage information: pages viewed, features used, session duration, click patterns, referrer URL.
- Cookies and similar technologies: see Section 7.
c. Information from third parties:
- Job portal accounts you connect (Naukri, Indeed, LinkedIn): we receive the minimum data needed to submit applications and optimise profiles on your behalf.
- Public professional profiles: where you choose to link them.
- Payment processors: transaction status and billing details.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services.
- Generate resumes, cover letters, profile rewrites, and other AI Outputs you request.
- Submit job applications on your behalf through connected job portals.
- Personalise interview preparation content and Interview Intelligence suggestions.
- Match you with relevant opportunities from the Insider Referral Network.
- Process payments and manage subscriptions.
- Communicate with you about your account, the Services, and support requests.
- Send you service-related notices, including updates to the Terms and Privacy Policy.
- Send you marketing communications where you have opted in (you can opt out at any time).
- Detect, prevent, and address fraud, abuse, security, or technical issues.
- Improve our AI models, products, and user experience through aggregated, anonymised analytics.
- Comply with applicable law and enforce our Terms.
3. AI Model Training
We do not sell your personal information. We do not use your personally identifiable resume content, profile content, or interview transcripts to train public third-party AI models.
We may use:
- Anonymised, aggregated statistics (for example, “X% of campaigns produced an offer within 30 days”) for product improvement and marketing.
- De-identified patterns from your inputs to improve the performance of our own models, with strict access controls.
4. How We Share Your Information
We do not sell or rent your personal information to third parties for their own marketing. We share information only as described below.
a. With job portals and employers, at your direction:
- We submit applications and surface your profile to recruiters and hiring managers through the platforms you connect (Naukri, Indeed, LinkedIn) and through our Insider Referral Network. The information shared is what you have provided or authorised.
b. With service providers:
- Cloud hosting, payment processing, customer support, analytics, email delivery, and security vendors who process data on our behalf under data processing agreements that require them to protect your information.
c. For legal and safety reasons:
- To comply with applicable law, regulation, court order, or valid legal process.
- To enforce our Terms and protect the rights, property, or safety of FirstDay AI, our users, or others.
d. In a business transfer:
- In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.
e. With your consent:
- For any other purpose disclosed at the time of collection, with your consent.
5. International Data Transfers
FirstDay AI is headquartered in India, and we serve users in India, the United States, the United Arab Emirates, Singapore, and the United Kingdom. Your information may be transferred to, stored, and processed in India or in other countries where our service providers operate. By using the Services, you understand that your information may be transferred outside your country of residence, including to countries that may have different data protection standards. We take steps to ensure adequate protection, including using standard contractual clauses where required.
6. Data Security
We use industry-standard technical and organisational measures to protect your information, including:
- Encryption in transit (TLS) and at rest for sensitive data.
- Access controls and least-privilege principles for staff.
- Regular security reviews and vulnerability monitoring.
- Secure credential storage using salted hashing.
- Two-factor authentication for staff access to administrative systems.
- Logging and audit trails for access to personal data.
No system is perfectly secure. We cannot guarantee absolute security of your data. If we become aware of a security incident affecting your personal information, we will notify you in accordance with applicable law.
7. Cookies and Similar Technologies
We use cookies, local storage, and similar technologies to:
- Keep you signed in.
- Remember your preferences.
- Analyse how the Services are used (for example, Google Analytics or similar tools).
- Deliver relevant advertising (where you have consented).
You can control cookies through your browser settings. Blocking certain cookies may affect the functionality of the Services.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal information, subject to legal retention requirements.
- Object to or restrict certain processing.
- Withdraw consent, where processing is based on consent.
- Receive a portable copy of your data.
- Opt out of marketing communications at any time.
- Lodge a complaint with a data protection authority.
To exercise any of these rights, email us at hello@firstdayai.in. We will respond within 30 days.
For users in the European Economic Area, the United Kingdom, Singapore, the United Arab Emirates, and other jurisdictions with similar laws, we honour the rights granted by applicable data protection law, including the EU GDPR, the UK GDPR, the UAE Personal Data Protection Law, the Singapore Personal Data Protection Act, and the Digital Personal Data Protection Act, 2023 (India).
9. Data Retention
We retain your information for as long as your account is active and as needed to provide the Services. You can delete your account at any time, and we will delete your personal information within 90 days, except where we are required to retain it for legal, tax, accounting, or legitimate business purposes (for example, transaction records for tax compliance). Anonymised, aggregated data may be retained indefinitely.
For full retention rules, see our Data Retention Policy.
10. Children's Privacy
The Services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete it as soon as possible. If you believe a child has provided us with personal information, please contact us.
11. Third-Party Links
The Services may contain links to third-party websites, including job portals, partner companies, and social media. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.
12. Job Portal Account Access
When you connect a job portal account (Naukri, Indeed, LinkedIn), you authorise us to act on your behalf to:
- Read your profile data.
- Submit applications.
- Optimise your profile.
- Manage messages and visibility settings, subject to your preferences.
You can revoke this access at any time by disconnecting the account in your dashboard or by changing the password on the job portal. Where supported, we use official OAuth flows and do not store your job portal password.
13. Changes to this Policy
We may update this Privacy Policy from time to time. If changes are material, we will notify you by email or in-product notice at least 7 days before the changes take effect. The current version will always be posted on this page with a “Last updated” date.
14. Grievance Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:
Grievance Officer
DAVID PROTOCOL AND DEFI PRIVATE LIMITED
(operating as “FirstDay AI”)
36, Border Station Road, Kodambakkam, Chennai, Tamil Nadu 600024, India
Email: hello@firstdayai.in
Phone: +91 81109 21273
We will acknowledge your grievance within 48 hours and aim to resolve it within 15 days of receipt.
15. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at:
(operating as “FirstDay AI” and “First Day AI”)
36, Border Station Road, Kodambakkam, Chennai, Tamil Nadu 600024, India
Email: hello@firstdayai.in
Phone: +91 81109 21273