Privacy Policy

1. Who we are

Shiftlyn (“we”, “us”, “our”) operates the Shiftlyn website and AI career displacement risk assessment. This policy explains what personal data we handle, why, and what control you have over it. It applies to everyone who visits the site, takes the assessment, uploads a resume, creates an account or makes a payment.

2. Information we collect

We only collect what the product actually needs to work:

Account details

Your email address, and — if you choose to provide them at sign-in — your name and phone number. We use one-time codes sent to your email instead of passwords, so we never store a password for you.

Assessment answers

The information you enter in the quiz: job title, industry, main tasks, years of experience, current skills and how much you use AI. Students provide course, subjects, year of study and target role instead.

Resume or CV (optional)

If you upload a resume, the file is stored in our cloud file storage and the text inside it is extracted so our AI can read your role, skills and experience. We also store file metadata (file name, type, size, word count) and the analysis derived from it.

Reports and history

The risk report generated for you, the answers behind it, your score history across re-runs, skills you mark as in progress, and any job applications you track on your dashboard.

Payment information

Payments are processed by Razorpay. We never see or store your card, UPI or bank details. We store only the order ID, payment ID, amount, currency and payment status returned to us.

Messages you send us

If you use the contact form, we store your name, email, chosen subject and message so we can reply and keep a record of the conversation.

Technical data

Cookies and similar storage needed to keep you signed in and to carry your report between pages, plus standard analytics about how the site is used (pages viewed, approximate location, device and browser).

3. How we use your information

• To generate your AI displacement risk score, analysis, recommended skills and action plan.
• To show you peer benchmarks, live job listings and course suggestions relevant to your role.
• To sign you in, keep you signed in, and let you re-open reports you have saved.
• To take payment for the full report and to issue refunds where our refund policy applies.
• To email you your report, and — only if you opt in — digests, risk alerts and reminders.
• To answer your support messages.
• To keep the service secure: rate limiting, abuse prevention and debugging.
• To understand aggregate usage so we can improve the product. This analysis is done on aggregated, non-identifying data.

We do not sell your personal data, and we do not share your individual report or resume with recruiters, employers or advertisers.

4. AI processing

Your assessment answers and, where you upload one, the text of your resume are sent to third-party AI providers to generate your report. These providers process the text to return a result to us. We do not send them your email address, payment details or any other account identifier alongside that text.

5. Who we share data with

We share data only with service providers who help us run the product, and only to the extent they need it:

Anthropic (Claude)

AI generation of your assessment and skill analysis.

Google (Gemini)

AI generation, resume parsing, and live job/course search.

MongoDB Atlas

Database hosting for accounts, reports and application tracking.

Microsoft Azure

Application hosting and encrypted storage of uploaded resume files.

Razorpay

Payment processing. They are the recipient of your payment details, not us.

Resend and Google (Gmail SMTP)

Sending your report, one-time login codes and support replies.

Google Analytics

Aggregate usage analytics.

We may also disclose information where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim.

6. Cookies and local storage

We use a small number of essential cookies and browser storage items. The sign-in session cookie is httpOnly and identifies your account to our server. We also use browser storage to remember your theme preference, your cookie choice, and to carry your in-progress assessment between the quiz and results pages. Analytics cookies are used to measure usage in aggregate.

You can clear or block cookies in your browser settings. If you block the essential ones, sign-in and saved reports will not work.

7. How long we keep it

• Account and report data: for as long as your account exists, so you can revisit past reports.
• Uploaded resume files and their extracted text: retained with your account so your report can be regenerated or improved. You can ask us to delete them at any time.
• Payment records: retained as long as required for tax, accounting and audit obligations.
• Support messages: retained so we have a history of your requests.
• Aggregated, non-identifying statistics: retained indefinitely.

8. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your account and the data associated with it.
• Withdraw consent you previously gave — for example, to marketing emails or to us keeping your resume.
• Nominate someone to exercise these rights on your behalf if you are unable to.

Email info@shiftlyn.com from the address on your account and we will action the request. Some data may be retained where we are legally required to keep it.

9. Security

Data is transmitted over HTTPS and stored with encryption at rest by our hosting and database providers. Sign-in uses one-time codes and a server-side session, so there is no password of yours for anyone to steal. Access to production data is limited to the people who need it to operate the service. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children

Shiftlyn is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. International transfers

Our service providers may process data on servers outside India. Where that happens, we rely on the provider’s contractual data-protection commitments to keep your data protected to a comparable standard.

12. Changes to this policy

We may update this policy as the product changes. The “last updated” date at the top always reflects the current version. Material changes will be highlighted on the site.

13. Contact and grievances

For any privacy question, request or complaint, email info@shiftlyn.com or use our contact form. We aim to acknowledge every request promptly and resolve it within the timelines required by applicable law.