Privacy Policy

Napida ("we", "us") operates napida.com, a service that fills out and submits job applications on your behalf. This policy explains what data we collect, why, and the choices you have.

• Account details: your name, email address, and sign-in information, handled by our authentication provider (Clerk).
• Profile and resume: the resume you upload and the details you enter or we extract from it, such as contact info, education, work history, projects, skills, work authorization, job preferences, and optional EEO answers.
• Job portal credentials: usernames and passwords you give us for job sites (for example Workday), so we can sign in and apply for you. Passwords are encrypted before storage.
• Application activity: the jobs you select, the answers submitted, application status, logs, and screenshots taken during submission.
• Gmail data: only if you connect Gmail. See the next section.
• Payment details: purchases are processed by Razorpay. We receive order and payment status, not your full card details.

If you connect your Gmail account, we request read-only access (gmail.readonly) and your email address. We use it for one purpose: to find verification emails and one-time codes that job sites send while an application is in progress, so the application can finish without you.

• We read only recent messages that match verification or sign-in patterns.
• We never send, delete, or modify your email.
• We do not store your email content. Messages are read when needed to extract a code. Only the code, and the OAuth tokens needed to keep the connection working, are kept.
• Short excerpts of a matching email may be sent to our AI provider (OpenAI) only to extract the code.
• You can disconnect Gmail at any time from the app, or revoke access at myaccount.google.com/permissions.

Napida's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, do not sell it, and do not use it to train AI models. Humans do not read it except with your consent, for security, or where required by law.

• To find jobs that match your profile and fill out and submit applications for you.
• To sign in to job portals and complete verification steps.
• To show your application history and status.
• To process payments and manage your credits.
• To keep the service secure, fix problems, and support you.

We do not sell your personal information. We share it only:

• With employers: the application details you choose to submit go to the employer and their applicant tracking system (for example Workday, Greenhouse, Lever, Ashby, Oracle, SmartRecruiters).
• With service providers that run the service for us: Clerk (sign-in), Supabase (database and file storage), OpenAI (resume parsing, job matching, form answers, and code extraction), Razorpay (payments), Cloudflare (network), and our hosting provider.
• When required by law, or to protect the rights and safety of our users or the service.

We keep your data while your account is active. You can edit your profile, remove saved credentials, and disconnect Gmail at any time. To delete your account and all associated data, email us at [email protected] and we will delete it within 30 days, except where we must keep records by law (for example payment records).

We use HTTPS for all traffic, encrypt stored job-portal passwords, and limit access to production systems. No system is perfectly secure, but we work to protect your data and will notify you of a breach where required.

Depending on where you live, you may have the right to access, correct, export, or delete your data, or to object to certain processing. Email [email protected] and we will respond within 30 days.

Napida is not intended for anyone under 16, and we do not knowingly collect their data.

We may update this policy. When we do, we will change the date at the top, and notify you of significant changes by email or in the app.

Questions about this policy or your data: [email protected].