Legal
How your data is handled
Profyl holds your career history. This page says what is kept, who else handles it, how long it stays, and how to take it back.
In short
- We never use your profile, your voice recordings, or anything Profyl writes for you to train any model, ours or anyone else’s.
- Profyl keeps what you give it and what it writes for you, so it can keep writing from it. None of it is public.
- A few named companies handle it for us, each for one job. We don’t sell your data or use it for advertising.
- You can export your profile at any time, and delete your account from Settings. Deletion is immediate and can’t be undone.
- Questions and requests go to connect@profyl.com. Every email is answered within 48 hours.
Who we are
Profyl is run by Stark Dynamics LLP, a limited liability partnership registered under the Limited Liability Partnership Act, 2008 (LLPIN AAD-9235), SRR Riverview, Gandipet Road, Kokapet, Hyderabad 500075 (“we”). Under India’s Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal data on this page.
This website, profyl.com, collects nothing about you. Everything below is about the Profyl app at app.profyl.com and the iOS and Android apps.
What we collect
When you sign in
- Your name, email address and Google account ID, from Google. Profyl accepts personal Google accounts only.
- Your mobile number, confirmed once with a code by SMS. One number holds one account.
- That you agreed to the terms and this page: which version, and when.
What you put into Profyl
- Your profile: your name and contact details, your roles, education, certifications, skills and links, and your answers to Profyl’s follow-up questions.
- The writing samples you type, so Profyl can learn how you sound.
- Any resume or LinkedIn file you upload to start your profile.
- The job descriptions you paste, and the ideas you type or speak.
- What you tell Profyl when you ask for a rewrite.
What Profyl writes for you
Resumes, cover letters, gap notes, interview questions, posts and scripts.
When you pay
What you bought, when, for how much, and the payment provider’s references for the order and payment. Razorpay or SMEPay handles the payment itself. We never see your UPI PIN, card or bank details.
To run the service
- Your signed-in sessions, each with the name of the browser or device it’s on.
- The IP address a sign-in code was requested from, to stop codes being abused.
- Server logs, which record requests and the IP address they came from.
- Which page of this website you signed up from, if you came from one. This is the page, not your browsing.
- Two kinds of event: when your profile became complete, and when you reached a step that needs credits. Nothing you wrote is in them.
If sign-ups are full for the day
Your mobile number, kept for 90 days to count how many people we had to turn away. If you join the waitlist, it also holds your place, and your invitation comes by email to the address you sign in with.
If you name a nominee
Their name and email address.
How it’s used
- To write your applications, posts and scripts, and to keep improving them from your profile.
- To sign you in, and to keep it to one account and one free application per person.
- To take payment and send receipts.
- To answer you when you write to us.
- To keep Profyl running and secure, and to see, in counts rather than content, whether it’s working.
We never use your profile, your voice recordings, or anything Profyl writes for you to train any model, ours or anyone else’s.
Anthropic and OpenAI don’t train their models on what we send them either, under their terms for business use of their APIs.
We use your data because you agreed to it when you created your account. You can withdraw that agreement at any time by deleting your account.
Who else handles it
Each of these companies handles your data only to do its one job for Profyl.
| Who | What they do | What they see |
|---|---|---|
| Anthropic | The AI models that write your drafts | Your profile, job descriptions, ideas and rewrite requests, with each request |
| Hostinger | The server and database, in Mumbai | Everything in your account |
| Cloudflare | File storage, this website, and the network in front of the app | Uploaded files, exports and backups; the requests you make |
| Sign-in | That you signed in to Profyl | |
| Razorpay | Payments on the web by UPI, credit card and debit card | Your payment, and the details you give Razorpay |
| SMEPay | Payments on the web by UPI | Your payment, and the details you give SMEPay |
| Zoho | Receipt emails, waitlist invitations, SMS sign-in codes, and our accounts | Your email address, mobile number and purchases |
| 2Factor.in | Backup for SMS sign-in codes | Your mobile number |
| OpenAI | Turning a spoken idea into text, with its Whisper model, once spoken ideas launch | The recording |
| Apple, Google Play | Payments in the apps, once they launch | Your purchase, under their own terms |
Your account is stored in India, on our server in Mumbai. Some of your data is kept by Cloudflare in its Asia Pacific region, which may be outside India: files you upload or export, voice recordings, the full text of each request to the AI models, and backups. Anthropic and OpenAI may process data outside India while they work on a request.
Voice recordings
Profyl doesn’t record you to learn how you sound. Your writing samples are typed.
Spoken ideas aren’t available yet. When they are, you’ll be able to speak an idea instead of typing it, for up to five minutes. The recording goes to OpenAI to be turned into text, and is deleted one month after you make it.
How long it’s kept
| What | How long |
|---|---|
| Your profile, applications and ideas | Until you delete them or your account |
| A resume or LinkedIn file you uploaded (Word or PDF) | 6 months, in case an import needs checking |
| A voice recording of an idea | 1 month |
| Files you export | 30 days |
| The full text of each request to the AI models, and what came back | 90 days, to investigate a draft that went wrong |
| A signed-in session | 30 days after you last use it |
| Sign-in codes and the IP address they were requested from | 90 days |
| Server logs | 30 days |
| Backups of the database | 30 days |
| A mobile number turned away when sign-ups were full | 90 days |
| A waitlist number | Until you sign up, or 6 months after your invite expires |
| Purchase records | While your account exists. After you delete it, until 8 years from the purchase, with your email address masked |
Your rights
See what we hold
Write to connect@profyl.com from the address you sign in with. A full copy of your data is sent to that address. You can export your profile yourself, free, at any time.
Correct it
Everything in your profile can be edited in the app.
Delete it
In the app, go to Settings, then Account, then Delete your Profyl. It signs you out everywhere, removes your account, profile, applications, ideas and files, and can’t be undone. Unused credits go with the account and aren’t refunded.
What stays: purchase records, with your email address masked, because the law requires them, and a record of any action we took on your account.
Complain
Write to our grievance officer, Anwar S, at connect@profyl.com. Grievances are resolved within one month of receipt, as the Information Technology Act, 2000 and its rules require. If you’re not satisfied with the answer, you can complain to the Data Protection Board of India.
Name someone to act for you
You can name someone to use these rights for you if you die or can’t act yourself. In the app, go to Settings, then Account, then Nominee.
Cookies and storage
This website sets no cookies, runs no scripts, loads no fonts or analytics from anyone else, and doesn’t know who you are.
The app uses two cookies, both needed for it to work:
- profyl_session keeps you signed in, for up to 30 days after you last use it.
- profyl_oauth lasts ten minutes, while you sign in with Google.
The app also keeps your theme choice and unsaved drafts in your browser’s own storage. There are no advertising or tracking cookies anywhere in Profyl.
Security
- Everything between you and Profyl is encrypted in transit.
- Sign-in codes, and the keys that keep you signed in, are stored only as hashes, never as themselves.
- Database backups are encrypted.
- The admin tools can only be reached through Cloudflare Access, and every action taken in them is recorded.
If something goes wrong that affects your data, we’ll tell you and the Data Protection Board as the law requires.
Changes
When this page changes, the date at the top changes with it.
Profyl is for people aged 18 and over. We don’t knowingly hold data about anyone younger.