Privacy Policy

We only ask for what we need to run the service. What you give us depends on how you use GapInfly:

• Account details (everyone): name, email address, mobile number and the account type you choose (student, employer or college).
• Students: education details (college, degree, branch, CGPA/percentage, graduation year), skills, projects, internships, work experience, career goals, preferred locations and salary expectations, and your LinkedIn or portfolio links if you add them.
• Career gap (students, optional): the dates, reason and what you did during a gap. This can include sensitive personal context, so share only what you're comfortable with.
• Documents (students): resume, marksheets and bonafide certificate that you upload.
• Activity on GapInfly: your assessment answers, GapScore, roadmap progress, mock-interview answers and scores, and the jobs you apply to.
• Employers: company details, recruiter name, designation, official email and phone, logo, and the jobs you post.
• Colleges / TPOs: institution details, placement statistics, logo, and any student lists (such as a placement registration sheet) you upload.
• Technical data: sign-in cookies, and basic logs (IP address, browser, device, time of request) that our hosting providers record to keep the service secure and running.

We do not ask for Aadhaar, PAN, bank account or card numbers. When paid plans launch, payments will be handled by a licensed payment gateway and we will not see or store your full card details.

• To create and secure your account and send you sign-in links and service emails.
• To calculate your GapScore, build your personalised roadmap and give feedback on mock interviews.
• To show your profile to employers and colleges on GapInfly and to process your job applications.
• To give colleges placement and readiness insights about their own students.
• To prevent fraud and abuse, and to meet our legal obligations.
• To improve GapInfly using aggregated, de-identified usage patterns.

We process your data on the basis of the consent you give when you sign up and fill in your profile, and for the legitimate uses permitted under the DPDP Act. We do not sell your personal data, and we do not show third-party advertising.

GapScore, roadmaps and interview feedback are generated automatically — by our own scoring rules and, for some features, by Google's Gemini AI, which processes your answers on our behalf. We send only what the feature needs: your target role, the skills you list and your interview answers. We never send your name, email, phone number or your uploaded documents.

Please read this bit carefully: we currently use Gemini's free tier, and under Google's terms content sent through the free tier may be used by Google to improve their services, including training their models. If you would rather your answers were not processed that way, skip the AI mock interview — every other part of GapInfly works without it. We will move to the paid tier, where Google does not use your data this way, as the platform grows.

These scores are estimates of job-readiness, not guarantees. Employers make their own hiring decisions, and you can retake assessments to improve your score. If you think a score is wrong, write to us and we will review it.

• Employers and colleges on GapInfly can view student profiles — including education, skills, scores and the contact details in your profile — so they can find and reach candidates. Other students cannot see your profile.
• Your uploaded documents (resume, marksheets, bonafide) are private. They are stored in a locked folder that only your own account can open, through short-lived links.
• When you apply to a job, the employer who posted it can see your application.
• Service providers that run GapInfly for us, under contract and only for that purpose: Supabase (database, sign-in and file storage), Vercel (website hosting), Resend (sign-in emails), Brevo (welcome emails and job alerts), Google (Gemini AI for scoring and feedback, and sign-in if you choose "Continue with Google"). A payment gateway will be added when paid plans launch.
• Authorities, when we are legally required to share data, or to protect the rights and safety of our users.
• A buyer or successor, if GapInfly is merged or acquired — this policy would continue to apply to your data.

Our service providers may store and process data on servers outside India. Any such transfer is made as permitted under the DPDP Act, and never to a country the Government of India has restricted.

We keep your data while your account is active. If you ask us to delete your account, we erase your profile, documents and activity within 30 days, unless the law requires us to keep a particular record for longer. Backups and provider logs are cleared on their normal cycle after that.

All traffic is encrypted over HTTPS. Access to data is enforced in the database itself (row-level security), so each account can only reach the records it is allowed to. Documents are kept in private storage and opened only through links that expire.

No system is perfectly secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the law requires.

Under the DPDP Act you can:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete or update your data — most of it you can edit directly in your profile.
• Ask us to erase your data and close your account.
• Withdraw your consent at any time. This doesn't affect processing done before you withdraw, but we may no longer be able to provide the service.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance with us, and if you're not satisfied with our response, complain to the Data Protection Board of India.

To use any of these rights, email contact@gapinfly.in from the email address linked to your account. We aim to respond within 30 days.

GapInfly is meant for people aged 18 and over. If you are under 18, you may use GapInfly only with the verifiable consent of your parent or legal guardian. If we learn that we've collected a child's data without that consent, we will delete it. Parents can contact us to request this.

We use only what's needed to make the site work: a sign-in cookie that keeps you logged in, and your browser's local storage to remember your progress between pages. We don't use advertising or cross-site tracking cookies.

To understand how many people visit and which pages they use, we run Vercel Web Analytics. It sets no cookies, doesn't follow you across other websites, and reports only aggregated counts such as page views, referring sites and country.

Colleges that upload student lists, and employers that add team members, confirm that they have the authority and the individuals' consent to share that data with GapInfly, and will use candidate data on GapInfly only for recruitment and placement.

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll also notify you by email or in the app before they take effect.

For questions, requests or complaints about your personal data, contact our Grievance Officer at contact@gapinfly.in, or write to us at GapInfly, Kanpur, Uttar Pradesh, India.