Privacy Policy

Welcome to My Student Club. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

This policy applies to all information collected through our website (mystudentclub.com) and any related services, sales, marketing, or events.

We collect personal information that you voluntarily provide when you register, use our services, or contact us.

• Account Information: Your email address and password for account creation. If you use Google Sign-In, we receive your email and basic profile from Google.
• Professional Profile: Full name, contact number, LinkedIn URL, resume/CV content, CA education details, achievements, work experience, and job preferences.
• Application Data: Jobs you apply for through our portal to help manage your applications.
• Payment Information: Payments are processed by our third-party processor (e.g., PayU). We do not store financial details on our servers.
• Device & Notification Info: If you opt-in for push notifications, we collect a Firebase Cloud Messaging (FCM) token to send job alerts.
• Usage Information: Interaction data collected via analytics providers like Google Analytics.

• Provide & manage services: Creating and managing your account, providing access to job portals, and delivering purchased courses through our LMS.
• Power AI features: Your resume and profile are sent to our secure AI models for services like the CV Reviewer, AI-Powered Apply, and AI Interview Coach.
• Send notifications: Your FCM token and subscription preferences are used to send relevant job alerts.
• Process transactions: Enrollment information is used to grant access to paid content.
• Communicate with you: Your contact information is used to respond to inquiries and provide support.
• Improve our services: Usage data helps us understand how services are used and make improvements.

We do not sell your personal information. We may share your information with third-party service providers who perform services on our behalf.

Key third-party services

• Supabase: Backend infrastructure for database hosting and user authentication.
• Google (Firebase & Analytics): Push notifications via Firebase Cloud Messaging and website traffic analysis via Google Analytics.
• Cloudflare: Hosts our AI models on secure servers to process data for features like CV Reviewer and AI Apply.
• PayU (or similar): Processes payments for paid courses.

CV Sharing with Employers

When you upload your CV and provide explicit consent, we share your CV and profile details with registered companies and recruiters for job-matching purposes.

• Your CV is shared only with employers registered on My Student Club.
• Sharing occurs only after you have provided explicit, informed consent.
• Employers may view your name, contact information, education, experience, and resume content.
• Your CV data is never sold to third parties.

• Access and Update: Review and update your personal information anytime from the Profile page.
• Opt-out of Notifications: Manage push notification preferences from the notification icon on job portal pages or through your browser settings.
• Withdraw Consent: Withdraw your CV sharing consent at any time from your Profile page. Withdrawal takes effect immediately.
• Data Deletion: Permanently delete your account and all associated data — including your profile, CV, consent records, and application history — from the Delete Account page. Deletion is irreversible.

We have implemented appropriate technical and organizational security measures to protect your personal information. We use reputable third-party services like Supabase for data storage and authentication.

We may update this privacy policy from time to time. The updated version will be indicated by a revised "Last Updated" date. We encourage you to review this policy frequently to stay informed of how we are protecting your information.

My Student Club operates as a Data Fiduciary under India's Digital Personal Data Protection (DPDP) Act, 2023.

• Lawful Basis: We process your personal data based on your explicit, informed consent — collected through a mandatory, un-pre-ticked checkbox before any CV data is shared with employers.
• Purpose Limitation: Your CV and profile data are used exclusively for job-matching and recruitment purposes.
• Data Minimisation: We collect only the information necessary to provide our services.
• Consent Records: We maintain timestamped records of your consent, including the exact text agreed to, the date of consent, and browser information, to demonstrate compliance. IP address and User-Agent are logged solely for the legally required audit trail.
• Right to Withdraw: You may withdraw consent at any time from your Profile page. Withdrawal takes effect immediately.
• Data Retention: Your CV and consent records are retained only as long as your account is active and consent is in effect. Upon account deletion or consent withdrawal, relevant data is permanently removed.

Employers and recruiters who access candidate CVs through My Student Club are bound by the following terms:

• Employers act as Data Processors upon receiving CV data from our platform.
• CV data must be used solely for recruitment and job-matching purposes.
• Employers must not sell, trade, lease, or share candidate data with any third party without separate, explicit consent.
• Employers must honour deletion requests and delete CV data within 30 days of such a request or upon completion of the hiring cycle, whichever is earlier.
• Employers must implement appropriate security measures to protect candidate data from unauthorised access, disclosure, or loss.
• Violation of these terms will result in immediate suspension of the employer's account and potential legal action under the DPDP Act.