What we collect
Contact details, project context, device and browser signals, limited usage analytics, cookies, and communication records tied to support or project work.
Back to homepage
Privacy Policy • Last updated October 8, 2026
Privacy Policy
CraftIQ handles inquiry data, project communication, infrastructure signals, and operational records with care. This policy explains what information may be collected, why it is used, how it is protected, and what rights users retain.
Quick summary
Why we collect it
To respond to inquiries, deliver services, maintain security, improve reliability, support ongoing communication, and meet legal obligations.
How it is protected
Through access controls, secure infrastructure, encryption in transit where appropriate, operational monitoring, and limited internal exposure.
Your rights
You can request access, correction, deletion, restriction, portability, objection handling, or withdrawal of consent where applicable.
How to contact us
Privacy requests can be sent to privacy@craftiq.in. Formal legal matters can be directed to legal@craftiq.in.
Information we collect
Personal Information
Name, email address, phone number, company name, project scope, budget signals, and other information voluntarily submitted through contact forms, email, or project discussions.
Technical Information
IP-related network signals, browser type, operating system, referring pages, route activity, request diagnostics, and performance data needed to keep the site stable and secure.
Usage Analytics
Aggregated or pseudonymous usage patterns that help us understand how pages are used, where visitors drop off, which services attract interest, and where content or flows should improve.
Communication Records
Emails, follow-up messages, inquiry history, scheduling context, support threads, and project notes shared during pre-sales, delivery, or post-delivery support.
Cookies
Essential cookies and related storage technologies that support session continuity, security, preferences, and site functionality. Analytics cookies may also be used where enabled.
Device Information
Screen, browser, and device capability signals used to improve responsive behavior, troubleshoot issues, and reduce operational or fraud-related risk.
CareerPulse APP and Google Calendar data
CareerPulse APP is a product provided by CraftIQ. This section explains information processed by the CareerPulse mobile application in addition to the CraftIQ website and service information described above.
Account and authentication
CareerPulse APP processes your Firebase account identifier and account details such as email and profile information needed to authenticate you and associate your data with your account.
Career information and documents
Depending on the features you use, this includes resumes and resume files, profile or resume-builder content, job and company details, application status and dates, interview-practice inputs, and generated analysis or recommendations.
Notifications and device data
If notifications are enabled, the service processes a device messaging token, platform and app-version details, notification preferences, and delivery records to send and manage account notifications.
Google Calendar data
When you choose the Calendar integration, the app processes the Google account email shown for the connected account and identifiers for CareerPulse-created events. Calendar event details are assembled from the application information you chose to turn into a reminder.
Google API and Google Calendar Data
CareerPulse APP requests Google Calendar authorization only after you choose to connect Google Calendar or add an application reminder. Google's authorization screen explains the requested access, and you can decline. The integration uses the scope https://www.googleapis.com/auth/calendar.events.owned. It operates on the primary calendar using create, update, and delete event requests for reminders you select, including application deadlines, interview dates, and follow-up dates.
The integration does not list or read your existing calendar events. It does not need access to unrelated events. A requested event can include the company, role, status, optional job URL, application identifier, and selected date needed to create that reminder. CareerPulse stores the created event identifier with application data so that it can update or remove that event later.
Google access tokens are obtained for an individual Calendar operation and held in memory for that operation. CareerPulse's backend does not receive or persist those tokens, and the app does not persist them. The app may store the connected Google account email locally with the signed-in CareerPulse account to show which account is linked. Disconnecting in CareerPulse removes that local link; existing calendar events remain unless you remove them. You can also revoke the app's access in your Google Account security settings.
Calendar data is used only to carry out the Calendar actions you request. It is not sold, used for advertising or advertising audiences, or used for profiling unrelated to CareerPulse functionality. It is not shared with advertising platforms or data brokers. Calendar data is not sent to CareerPulse's resume-analysis providers. The app sends event details directly to Google Calendar API for the requested operation; Google processes them under its own terms and privacy policy.
CareerPulse APP handles Google user data in accordance with the Google API Services User Data Policy, including its Limited Use requirements: Google API Services User Data Policy. Product-specific details are also available in the CareerPulse APP Privacy Policy.
CareerPulse storage, retention, and account deletion
CareerPulse account and application records are associated with your authenticated account. Resume files and application, profile, analysis, and notification records are stored in the service infrastructure used for those features, including Firebase services and the CareerPulse backend database. Device-local data may also be kept to support app features. Google Calendar access tokens are not part of that stored data.
Records are retained while needed to provide the service, keep your account history, maintain security, and meet legal or operational requirements. You can remove saved resume files and manage your Calendar connection in the app. Account deletion can be requested in CareerPulse; it enters a 30-day recovery period, after which the service deletes account-associated Firebase data, uploaded resume objects where configured, and associated backend records. A minimal account-deletion status marker may remain for security and deletion processing. Files you previously downloaded or exported and device-local copies outside the app's managed storage are not removed by server-side account deletion.
Calendar events already created in your Google account remain there when you disconnect CareerPulse or delete your CareerPulse account. Remove those events in Google Calendar if you no longer want them. Revoking OAuth access prevents later authorized operations; it does not itself delete events already created.
CareerPulse uses infrastructure and processing providers to operate the service, such as Firebase for authentication and app data, the CareerPulse backend and database for account operations, and AI providers to generate resume analysis when requested. These providers process information needed for their service role. Google Calendar event data is sent to Google only for the Calendar action you request and is not provided to resume-analysis providers. CraftIQ does not sell Google user data.
How information is used
Service delivery, inquiry handling, scoping, proposals, onboarding, and project coordination.
Project communication, support responses, scheduling, milestones, operational updates, and post-delivery follow-up.
Security, abuse prevention, bot mitigation, fraud screening, diagnostic logging, and access integrity.
Analytics, reliability review, traffic understanding, funnel quality review, and content improvement.
Legal compliance, recordkeeping, contractual protection, dispute handling, and policy enforcement.
Product improvement, delivery refinement, communication quality improvement, and operational planning.
Cookies
Essential Cookies
Used for core site functionality, request continuity, security controls, routing behavior, and technical reliability. These are tied to operation, not ad targeting.
Analytics Cookies
Used to understand traffic patterns, route engagement, performance issues, and content usefulness. They help improve the site rather than build advertising profiles.
Preference Cookies
Used to remember user-level interface choices or reduce repetitive prompts where such preference storage is enabled.
Data sharing
CraftIQ does not sell personal information.
Information may be processed by trusted infrastructure and workflow providers strictly for hosting, traffic delivery, transactional email, source management, or operational support.
Information may be disclosed where required by law, lawful process, or a valid regulatory or enforcement request.
Information may be transferred as part of a merger, acquisition, restructuring, or business transfer if equivalent privacy handling remains in place.
Data retention
Inquiry records are kept for as long as reasonably needed to respond, follow up, and maintain business records.
Project and support records may be retained longer where continuity, compliance, invoicing, contractual obligations, or dispute handling require it.
Technical logs and analytics records are retained based on operational usefulness, security needs, and infrastructure retention windows.
When deletion is requested and no overriding legal or operational basis exists, data is deleted or anonymized within a reasonable period.
Security
Encryption in transit where supported by infrastructure and communication channels.
Secure hosting and traffic delivery layers, including managed infrastructure controls.
Limited internal access based on operational need and role relevance.
Monitoring, diagnostics, and abuse detection to identify suspicious or harmful activity.
Practical industry-standard safeguards rather than unrealistic guarantees.
International processing
CraftIQ may process or store information using infrastructure, delivery systems, or collaborators that operate across jurisdictions. Where cross-border processing occurs, information is handled using reasonable contractual, operational, and security safeguards aligned with service delivery and applicable legal requirements.
Cross-border processing does not change CraftIQ's core position: personal information should be used only for legitimate operational purposes and protected with practical confidentiality and access controls.
User rights
| Right | Meaning |
|---|---|
| Access | Request confirmation of whether CraftIQ holds your personal information and ask for a copy where applicable. |
| Correction | Request correction of inaccurate or incomplete information. |
| Deletion | Request deletion where data is no longer necessary, consent is withdrawn, or no valid retention basis remains. |
| Restriction | Request limited processing while accuracy, legality, or objections are being reviewed. |
| Portability | Request a portable copy of data you provided where applicable under governing law. |
| Objection | Object to certain processing where legitimate grounds exist. |
| Withdraw Consent | Withdraw consent for consent-based processing without affecting prior lawful use. |
Children's privacy
CraftIQ services are not directed toward children below the applicable minimum age in relevant jurisdictions. We do not intentionally solicit or design services for child users, and if we learn that information has been submitted inappropriately, we will review and remove it where reasonably possible.
Third-party services
Cloudflare
Used for hosting-related delivery, security, performance handling, and infrastructure support.
Resend
Used for transactional email delivery and operational communication workflows.
GitHub
Used for source management, version control, and engineering collaboration around product delivery.
Analytics Providers
May be used in a privacy-conscious manner where analytics tooling is enabled to understand site usage and improve experience.
Contact
Privacy requests
privacy@craftiq.inAccess requests, correction requests, deletion requests, and privacy questions.
Legal matters
legal@craftiq.inFormal legal notices, compliance questions, and contract-linked privacy matters.
Changes to this policy
CraftIQ may update this Privacy Policy when operational practices, infrastructure, service scope, legal requirements, or compliance expectations change. Revisions will be reflected through an updated effective date on this page.
Material changes will be published on the website with the revised date so visitors and clients can review the current version before continuing to use the site or engage with services.