Legal

Privacy policy.

Plain-language, actually readable. The short version: your data builds your career identity, you control what's public, and we never sell it.

Effective July 6, 2026

01Who we are

GrowthCharters (growthcharters.com and its subdomains app., learn., studio., auth., admin., api., docs.) is operated by Kaizen Training Solutions Pvt. Ltd., CLC Tower, 4th Floor, Plot 146, Sector 44, Gurugram, Haryana 122003, India ("we", "us"). This policy explains what we collect, why, and the choices you have. Questions: support@growthcharters.com.

02Information we collect

Account data: name, email address, password (stored only as a salted bcrypt hash), and optional profile details you add — education, work experience, skills, social links, profile photo.

Resume data: if you upload a resume, we extract its contents (experience, education, skills) to build your profile and compute your Career Profile Score. The file is stored in a private, access-controlled bucket.

Activity data: actions you take on the platform (courses completed, assessments passed, applications submitted, coach sessions) power your XP, badges and streaks — that is the product working as described.

Payment data: subscriptions are processed by Razorpay. We never see or store your card number, UPI PIN or banking credentials; we store only the transaction reference, plan and status.

Technical data: IP address, browser type, device information and usage logs, used for security, fraud prevention and improving the product.

03AI processing

Resume parsing, the career coach (Vanilla), job matching and content recommendations use large language models from Google (Gemini via Vertex AI) and OpenAI. Content you submit to these features is processed by those providers under their enterprise data terms and is not used by them to train their public models.

AI outputs — including your Career Profile Score — are informational estimates, not professional advice or a guarantee of employment.

04Cookies & single sign-on

We use first-party cookies to keep you signed in across *.growthcharters.com (HTTP-only session tokens), remember preferences (like theme), and measure aggregate usage. Advertising on the marketing site may use Google AdSense, which sets its own cookies subject to Google's policies; you can opt out at adssettings.google.com.

05What employers see

Your public employer card shows only: your Career Profile Score with its disclaimer, XP totals and peer rank, verified versus self-reported skills (always clearly separated), and recent growth velocity. Your private coach conversations, personal notes and contact details are never shown without your action.

06Sharing

We share data only with the processors needed to run the service: AWS (storage, Mumbai region), Cloudflare (CDN, security, video), Razorpay (payments), Google/OpenAI (AI features, as above), and email delivery providers. We do not sell personal data. We may disclose data if required by Indian law or to protect users from fraud or abuse.

07Retention & deletion

You can delete your account from Settings at any time. Deletion soft-locks your account immediately and permanently removes personal data from production systems within 30 days, except records we must keep under Indian tax and accounting law (e.g., payment invoices).

08Your rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023 you may request access to, correction of, or erasure of your personal data, and may withdraw consent at any time. Write to support@growthcharters.com — we respond within 30 days. If unresolved, you may escalate to our Grievance Officer at the same address, and thereafter to the Data Protection Board of India.

09Security

Passwords are bcrypt-hashed, sessions are short-lived JWTs with rotating refresh tokens, all traffic is TLS-encrypted, storage buckets are private-by-default, and access to production systems is restricted and logged. No system is perfectly secure — report concerns to support@growthcharters.com and we will investigate promptly.

10Children

GrowthCharters is intended for users 16 and older. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will remove it.

11Changes

We will post any material changes to this policy here and, for significant changes, notify you by email or in-app notice before they take effect.