Privacy Policy

Last updated: August 31, 2026

Work-ly (work-ly.in) is operated by Advitya Bansal, based in India. Work-ly is used by people around the world, so this policy is written to address the EU/UK GDPR, India's Digital Personal Data Protection Act 2023 (DPDPA), the California Consumer Privacy Act (CCPA/CPRA), Canada's PIPEDA, and Australia's Privacy Act — whichever applies to you.

Privacy & grievance contact: advitya@work-ly.in

1. What we collect

Account data: your name, email, and password (stored as a salted hash) — or, if you sign in with Google, the basic profile information Google shares.

Career data: your uploaded résumé/CV and its extracted contents, plus anything you add or edit yourself — work history, education, skills, career goals, and (in Student Mode) visa/work-hour preferences.

Application data: jobs you save, apply to, or track, and any notes you add.

Usage & device data: pages visited, features used, IP address, and similar technical data, used for security (like rate-limiting) and diagnostics.

Please don't include government ID numbers, payment details, or health information in your résumé or notes unless it's unavoidably part of your work history — we don't ask for or want sensitive personal data.

2. How we use it

To create your account, build your career profile, and parse résumés (using local pattern-matching by default; only where you enable an AI-assisted feature is relevant text sent to an AI model provider).
To show job opportunities and calculate Fit/Priority scores and skills-gap analysis based on your profile.
To let you save, apply to, and track opportunities, and to generate AI-assisted content you request, like a tailored cover letter.
To send service-related emails (via our email provider) and secure the service against fraud and abuse.
To maintain, diagnose, and improve Work-ly, and to comply with legal obligations.

We don't use your career data to serve you third-party ads, and we don't sell your personal information. If you're in the EU/UK, we rely on contract performance, our legitimate interests (security and improvement), your consent (for optional features), and legal obligation as our bases for processing.

3. Automated scoring & AI features

Fit/Priority scores and career suggestions are generated automatically from your profile and job data. They're informational only — no employer receives or relies on a Work-ly score as part of their hiring process, and you're never subject to a solely-automated decision with a legal or similarly significant effect on you. You can review, correct, or delete the underlying profile data anytime in Settings.

4. Who we share information with

Service providers who process data on our behalf under confidentiality obligations: our cloud hosting/database provider, our email-delivery provider, and, only for AI-assisted features you use, an AI model provider.
Job-data providers (Adzuna, Reed, Remotive, Jobicy, and similar) — we send search terms to fetch listings, not your résumé or identity.
Payments (once Pro launches) are processed by Lemon Squeezy; we never see or store your card details.
Legal authorities, where required by law, or in a business transfer such as a merger or acquisition.

We do not sell your personal information or share it with data brokers.

5. International transfers

Because Work-ly is operated from India and uses cloud infrastructure providers, your data may be processed in India, the United States, or other countries with different data protection laws than your own. Where we transfer personal data of EU/UK/EEA users internationally, we rely on appropriate safeguards with our service providers.

6. Retention & deletion

We keep your data while your account is active. Deleting a résumé, your career data, or your account in Settings removes it from active systems immediately; residual backup copies are purged generally within 90 days, except for the minimum we're legally required to retain.

7. Your rights

Email advitya@work-ly.in to exercise any of these, or use Settings to delete data directly:

EU/UK (GDPR): access, correction, deletion, restriction, objection, portability, withdraw consent, and the right to complain to your local supervisory authority.
India (DPDPA): as a Data Principal — access a summary of your data and how it's processed, correction and erasure, grievance redressal, and the right to nominate someone to act on your behalf.
California (CCPA/CPRA): know, delete, and correct your personal information, and opt out of "sale" or "sharing" — we don't do either, so there's nothing to opt out of. No discrimination for exercising these rights.
Canada (PIPEDA): access, correction, and withdrawal of consent, and the right to complain to the Office of the Privacy Commissioner of Canada.
Australia (Privacy Act): access and correction, and the right to complain, including to the OAIC.

8. Security

We encrypt data in transit (HTTPS), store your session as an HttpOnly cookie inaccessible to page scripts, hash passwords, and enforce per-account isolation so one account can't reach another's résumé, profile, or applications. No system is 100% secure; if we learn of a breach affecting your data, we'll notify you and any relevant authority as required by law.

9. Children

Work-ly isn't directed at anyone under 18, and we don't knowingly collect data from anyone under 18. If we learn we have, we'll delete it — contact us if you believe this has happened.

10. Changes & contact

We'll give reasonable notice before any material change to this policy takes effect. Questions or requests: advitya@work-ly.in