Our Privacy Policy

1. Introduction
Arya by Mentoria is a job automation platform developed and owned by Mentoria Pvt. Ltd. ("we", "our", or "us"). This Privacy Policy outlines how we collect, use, store, and disclose your personal information when you interact with our services through:

• Arya Web Application: https://app.agent.mentoria.com

• Arya Marketing Site: https://agent.mentoria.com

• Any other related services owned by Mentoria Pvt. Ltd.

By using Arya by Mentoria, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide to Us
When you interact with Arya, we collect the following information:

• Account Information: Your name, email address, and profile details from Google when you log in using Google OAuth

• Resume/CV Content: Uploaded files or resume data you generate using our tools

• Job Preferences: Target roles, industries, locations, and related career details

• Email Communications: Complete content of job application emails created and sent via the platform (subject, body, attachments)

2.2 Information Collected Automatically
We collect certain data automatically as part of platform usage:

• Usage Data: Features used, actions taken, session duration, and interaction logs

• Email Engagement Metrics: Open rates, link clicks, CV downloads (collected via tracking pixels and redirected URLs)

• Performance Analytics: Application success rates, response times, and engagement patterns

2.3 Gmail Data Access & Limited Use Compliance
IMPORTANT: Google API Services User Data Policy Compliance
With your explicit OAuth consent, we access limited data from your Gmail account exclusively for job application automation:

What We Access:

• Gmail Send Scope: To send personalized job application emails from your account using your email address

• Gmail Readonly Scope: To read responses ONLY within job application email threads that we initiated

What We DO NOT Access:

• Your personal emails, inbox content, or any emails outside job application threads we created

• Emails unrelated to job applications sent through our platform

• General mailbox browsing or email search capabilities

Data Usage Restrictions:

• Gmail data is used exclusively for job application automation and tracking

• We implement thread-bounded access - only reading specific threads where we sent the original application

• No Gmail data is shared with third parties except as required for core platform functionality

• All Gmail access can be revoked at any time from your Google account settings

Privacy Protection:

• We use surgical access methods to ensure maximum privacy

• Only job application threads initiated by our platform are accessed

• No broad email scanning or general inbox access

Google API Services Limited Use Compliance:
Arya by Mentoria's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information
Your data enables us to:

• Send Job Application Emails: Send personalized job application emails to recruiters and employers using your Gmail account and email address

• Deliver, manage, and improve our job automation services

• Customize and optimize your CV and email applications

• Track the outcomes of applications (e.g., opens, replies, clicks)

• Generate analytics to improve application success

• Ensure platform stability and security

• Provide customer support and respond to inquiries

• Comply with legal obligations and prevent fraudulent activity

Data Minimization: We only collect and process data necessary for these specified purposes.

4. How We Share Your Information

4.1 With Service Providers
We may share your data with third parties who help operate Arya, such as:

• Cloud Infrastructure: Secure hosting and data storage (AWS, Google Cloud Platform, Render.com)

• Email Delivery: Gmail API for sending job application emails

• Analytics: Platform usage and performance monitoring (internal analytics systems)

• Security Services: Fraud detection and platform security (internal security systems)

• Database Services: PostgreSQL (hosted on cloud infrastructure)

• Cache & Session Management: Redis (for rate limiting and session management)

These providers are contractually bound to safeguard your information and use it solely to deliver their services.

4.2 With Your Consent
We may share data in ways you explicitly authorize, such as:

• Sending job application emails to recruiters and employers

• Sharing your resume with potential employers through our platform

4.3 Legal Disclosures
We may disclose information when required by:

• Law enforcement or legal process

• Protection of rights, property, or safety of our users

• Prevention of fraud or illegal activities

• Compliance with applicable laws and regulations

4.4 Business Transfers
If Arya or Mentoria Pvt. Ltd. is involved in a merger, acquisition, or reorganization, your information may be part of the transferred assets, subject to the same privacy protections.

5. Data Security & Encryption
We employ comprehensive security measures including:

• Authentication: Google OAuth 2.0 with secure token management

• Encryption: AES-256 encryption for sensitive data at rest

• Transmission: TLS encryption for all data in transit

• Access Control: Role-based access with principle of least privilege

• Rate Limiting: Comprehensive rate limiting (15 job applications/day, technical safeguards)

• Monitoring: Real-time security monitoring and audit trails

• Vulnerability Management: Regular security assessments and updates

Token Security: Gmail refresh tokens are encrypted using industry-standard encryption with secure key management.
While we follow industry best practices, no system can be guaranteed to be 100% secure. Use of the platform is at your own risk.

6. Your Privacy Rights

6.1 General Rights
Depending on your jurisdiction, you may have the right to:

• Access: Request copies of your personal data

• Rectification: Correct inaccuracies in your information

• Erasure: Request deletion of your data ("right to be forgotten")

• Restriction: Limit certain processing activities

• Objection: Object to processing based on legitimate interests

• Portability: Request export of your data in a structured format

• Withdraw Consent: Revoke consent for data processing at any time

6.2 Gmail-Specific Rights

• Revoke Gmail Access: Disconnect Gmail integration through your Google Account settings at myaccount.google.com

• Data Deletion: Request deletion of all Gmail-related data by emailing appsupport@mentoria.com

• Access Information: Request information about Gmail data access patterns by emailing appsupport@mentoria.com

To exercise any of these rights, contact us at: appsupport@mentoria.com

7. Email Tracking & Monitoring Disclosure
Arya uses built-in tracking features within job application emails to provide application performance insights:

• Tracking Pixels: Detect when emails are opened by recipients

• Link Tracking: Monitor click-throughs on links and attachments

• CV Download Counters: Track when resumes are downloaded via platform-generated links

• Response Detection: Monitor recruiter responses within job application threads

Transparency: All tracking serves legitimate business purposes (application analytics) and is disclosed to users. No tracking data is shared with third parties for marketing purposes.

8. Data Retention & Deletion
We retain your information to provide our services and comply with legal requirements. However, you have complete control over your data:

Your Control Over Data:

• Immediate Deletion: Email us at appsupport@mentoria.com to request deletion of any or all of your data

• Data Export: Request a copy of your data by emailing appsupport@mentoria.com

• Gmail Access Revocation: Disconnect Gmail access instantly through your Google Account settings at myaccount.google.com

• Processing Timeline: All deletion requests processed within 30 days

• What We Delete: Account data, resumes, job applications, email content, analytics data, and all personal information

• Confirmation: We'll confirm completion of your deletion request via email

Automatic Data Management:

• Gmail Tokens: Automatically deleted when you revoke Gmail access

• Account Closure: All data deleted within 30 days when you close your account

• Legal Compliance: Some data may be retained longer only when required by Indian law

9. Children's Privacy
Our platform is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we learn that data has been collected from a child without verified parental consent, we will delete it promptly and take steps to prevent future collection.

10. Cookies & Tracking Technologies
We use cookies and similar technologies to:

• Essential Cookies: Enable core platform functionality

• Analytics Cookies: Understand platform usage patterns

• Performance Cookies: Monitor and improve platform performance

You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality.

11. Data Management & User Control

Google OAuth Compliance: You have complete control over your data and Gmail access.

Gmail Access Management:

• Revoke Anytime: Disconnect our app's access to your Gmail through your Google Account settings at myaccount.google.com

• No Self-Service Required: Google provides native revocation - no additional features needed from our platform

Data Deletion Process:

• Email Support: Send deletion requests to appsupport@mentoria.com

• What We Delete: Account data, resumes, job applications, email content, analytics data

• Timeline: All deletion requests processed within 30 days

• Confirmation: We'll confirm completion of your deletion request via email

Data Export:

• Request Process: Email appsupport@mentoria.com to request a copy of your data

• Format: We'll provide your data in a structured, readable format

• Timeline: Export requests fulfilled within 30 days

Support Contact: For all data management requests, email appsupport@mentoria.com

12. Data Protection Officer & Contact
For privacy-related inquiries, you can contact our Data Protection team at:
Support: appsupport@mentoria.com
Address: 505, 506, Kshitij, Veera Desai Rd, opposite Sports Complex, Azad Nagar, Andheri West, Mumbai, Maharashtra 400053

13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. All changes will be posted on this page with the updated effective date.

Notification: For material changes, we will notify users via email or prominent platform notice 30 days before the changes take effect.
Continued use of the platform after changes constitute acceptance of the revised policy.

14. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra.