Privacy Policy
How we collect, use, store and delete the career information you send us.
1. Who we are
CVPRO CareerOS 360 is a service operated by TALPRO INDIA PRIVATE LIMITED, a company incorporated in India (CIN U74999KA2020PTC135946, GSTIN 29AAHCT9485A1ZX), with its registered office at B-BLOCK, 4th Floor, 0741/A, 12th Main Road, Manipal County Rd, opposite Star Market, AECS Layout, Singasandra, Bengaluru, Karnataka 560068. In this policy “we”, “us” and “CVPRO” mean that company. We are the Data Fiduciary for the personal data described below.
2. What we collect
We collect only what the Profile Intelligence Audit and our response need. Fields shown to you are voluntary unless the form marks them as required.
When you request an audit
Your name, work email address, mobile number, city and country or region; current company, job title, job function, industry, career level, total experience, current annual CTC, job-search status, notice period, evidence availability, selected interest areas, LinkedIn profile URL, and the CV or résumé file you upload.
What the uploaded file may contain
Your employment, education, achievements, professional contact information and other career information you choose to include. Please remove government identifiers, bank details, health information and employer-confidential material before uploading.
HubSpot form and technical data
HubSpot records the submission and stores the uploaded file in a private, hidden file-manager folder linked to your contact record. HubSpot and its service infrastructure may process IP address, browser and device information, timestamps, referrer information and request logs needed to operate and secure the form.
Spam protection
The form uses Google's invisible reCAPTCHA v2. Google may receive device, browser, IP address, interaction, cookie or similar-technology data to distinguish people from automated abuse, under Google's Privacy Policy and Terms of Service.
3. Why we process it, and on what basis
- To prepare, respond to and deliver the audit you requested — on the basis of the audit and data-processing consents you select on the form, and to perform the service you asked for.
- To contact you about that audit and its next steps — under the separate One to One communication consent on the form. This is service-related contact, not marketing consent.
- To keep a record of the request, consent and work delivered — our legitimate interest in answering later questions, protecting the service from abuse and demonstrating what we were asked to do.
- To meet statutory obligations — Indian tax, accounting and company law where a paid engagement exists.
We do not sell personal data. We do not use your CV to train any model. We do not share your materials with employers, recruiters or any staffing operation. We do not send marketing messages unless you give a separate marketing consent.
4. Consent, and how to withdraw it
The form records separate permissions for the audit, storage and processing, and One to One communication about the requested audit. Required boxes must be selected before the form can be submitted. One to One consent covers only your audit request and related next steps; it does not enrol you in marketing.
You may withdraw any consent at any time by emailing [email protected]. Withdrawal is as easy as giving consent: one email, no account. We then stop the affected non-statutory processing and delete the record and files under section 6, unless a legal retention duty applies to a completed paid engagement.
5. Who else touches your data
We keep this list short on purpose and update it when the service changes.
Website hosting
Hostinger International Ltd — hosts the main CVPRO website and its first-party measurement endpoint. Primary processing location: European Union.
Email and spam protection
Google LLC — Google Workspace sends the acknowledgement and human reply; Google's invisible reCAPTCHA v2 protects the HubSpot form from automated abuse. reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
DNS and edge
Cloudflare, Inc. — domain-name resolution and edge delivery for the main website. Cloudflare does not receive the CV file submitted to HubSpot.
Form, customer record and file storage
HubSpot, Inc. — hosts the audit form, records the fields you submit, stores the uploaded CV in a private hidden folder linked to your contact record, and lets the authorised CVPRO team manage your request. The CVPRO HubSpot account is hosted in the United States (West/Oregon), with regional disaster-recovery and backup replication. HubSpot and its subprocessors may process limited data elsewhere as described in HubSpot's Privacy Policy and data-processing terms.
Depending on the service and applicable law, these providers act as our processor or service provider, or under their own published terms. Where personal data is processed outside India, we rely on your consent and the provider's contractual safeguards. We do not authorise any provider to use your CV for advertising, staffing or model training.
6. How long we keep it
- Enquiry, contact and consent records that do not become an engagement: deleted 90 days after the last message between us.
- Uploaded résumés and profile documents: deleted from active CVPRO and HubSpot storage 30 days after receipt, or sooner on request. The clock starts when the file is submitted.
- Delivered audit and pack files: kept for 12 months so we can re-send them if you lose them, then deleted.
- Invoices and tax records for paid engagements: kept for 8 years, as Indian tax law requires. These contain billing details, not your career materials.
- First-party measurement records on cvpro.in: deleted after 180 days. They carry no name, email address or raw IP address.
Deletion removes the record, file link and working copies from active systems under our control. Provider disaster-recovery backups may persist temporarily until overwritten under the provider's backup lifecycle and are not used for ordinary processing. HubSpot and Google keep their own security and service logs under their published retention rules.
7. How we protect it
- The CVPRO site and HubSpot form are served over encrypted HTTPS connections.
- Files submitted through HubSpot's upload field are stored with private visibility in a hidden file-manager folder and linked to the contact record.
- Access is restricted to authorised CVPRO users working on the audit; it is not general across the company.
- We use HubSpot to receive, store and route the request. We do not use the CV for model training, advertising, employer submission or staffing activity.
- We ask you not to upload government identifiers, financial account information, health data or employer-confidential material.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- Ask what personal data of yours we hold, and receive a summary of it.
- Have inaccurate or incomplete data corrected, updated or completed.
- Have your data erased, unless a statutory duty requires us to keep it.
- Nominate another person to exercise these rights on your behalf if you cannot.
- Raise a grievance with us, and escalate to the Data Protection Board of India if our answer does not resolve it.
How to exercise any of these. Email [email protected] with the address you used to contact us. No account and no form is needed. We answer within 7 working days and complete the action within 30 days.
9. Grievance redressal
If you are not satisfied with how we handled your data or your request, contact our Grievance Officer.
Grievance Officer
TALPRO INDIA PRIVATE LIMITED
Email: [email protected]
Telephone: +91 80 4094 8407
B-BLOCK, 4th Floor, 0741/A, 12th Main Road, Manipal County Rd, opposite Star Market, AECS Layout, Singasandra, Bengaluru, Karnataka 560068
We acknowledge every grievance within 48 hours and resolve it within 30 days. If you remain dissatisfied, you may complain to the Data Protection Board of India.
10. Children
This service is built for senior professionals and is not directed at anyone under 18. We do not knowingly process the personal data of a child. If you believe we have, write to [email protected] and we will delete it.
11. Cookies and measurement
Main CVPRO website
The main cvpro.in website uses no advertising pixel or cross-site advertising tracker.
It uses one first-party sessionStorage key, cv_s, which identifies the current
browser tab and is erased when the tab closes. A first-party endpoint at
/api/track records a limited list of page, route, button, form-step, download,
upload-open, sample-view, FAQ-search and configuration events. Values containing an email
address are rejected, and the raw IP address is not written to this measurement log.
HubSpot form and reCAPTCHA
The HubSpot-hosted audit form is a separate service surface. It loads HubSpot resources and Google's invisible reCAPTCHA v2. HubSpot and Google may use necessary cookies, local storage or similar technology and receive IP address, browser, device, interaction, timestamp and referrer data to operate the form, prevent abuse and maintain security. We do not configure the form for personalised advertising.
For more information, read the HubSpot Privacy Policy, the Google Privacy Policy and Google's Terms of Service. If you prefer not to use the hosted form, email [email protected] to request an alternative intake route.
12. Changes to this policy
We will post any change here with a new version number and effective date. If a change materially affects how we use data you have already sent, we will email you before it takes effect.
13. Contact
General: [email protected] · Privacy: [email protected] · Grievance: [email protected] · Telephone: +91 80 4094 8407