Privacy Policy

1. Who we are

MyOmniCareer (myomnicareer.com) is operated by MyOmniCareer Private Limited, a company incorporated in India. We decide how and why your personal data is used (we are the “data controller” or “data fiduciary”).

Grievance Officer / Data Protection Officer, MyOmniCareer Private Limited — [email protected] (subject line “Grievance”).

2. What data we collect

• Account data: name, email address, phone number, sign-in method (Google or email/password), verification and plan status
• Profile data: work history, skills, education, certifications, resume text and file, profile photo, target countries, work rights and visa status for each country, salary expectations
• Activity data: jobs you save or track and your notes, tailored resumes, saved searches, relocation and Concierge answers, support tickets, invites you send (including the invitee’s email)
• Usage data: searches, pages visited, AI features used (feature names and timestamps, not full prompts)
• Technical data: IP address, browser and device type, session identifiers

3. Why we use it

• To provide the service you signed up for — job matching, visa scoring, resume optimisation, interview preparation, relocation guidance and support
• With your consent — employer visibility (Section 4) and any marketing emails. You can withdraw consent at any time.
• For our legitimate interests — keeping the platform secure, preventing abuse, and improving features using usage patterns
• To meet legal obligations — for example, responding to lawful requests from authorities

4. Employer visibility — only if you choose

Your profile is hidden from employers unless you switch employer visibility on. You choose Anonymous (skills, experience, target countries and work-rights needs only — no name, contact details, current employer or resume) or Full profile. In Anonymous mode, your contact details go to an employer only if you accept their request to connect.

You can change or withdraw this at any time in Privacy & Data. We record when you gave or withdrew consent and which policy version applied, and we keep a log of which employers viewed your profile, which you can ask to see. Employers must agree to use your data only for recruitment, not to sell or share it, and to delete it on request.

5. Who we share it with

We do not sell your personal data. We share it only with:

• Supabase — database and secure file storage
• Hostinger — server hosting
• Google — sign-in, if you use Google
• Resend — sending emails to you
• AI providers (currently OpenRouter, Groq, Google Gemini, OpenAI, DeepSeek and Mistral) — only the profile, resume or job content needed for the AI feature you are using
• Employers and recruiters — only if you switch on employer visibility, and only at the level you chose
• Authorities or professional advisers — where the law requires it, or to protect our rights and users’ safety
• A buyer or successor — if our business is sold or restructured, under the same protections as this policy

Apify, which we use to collect public job and company data, receives no user data.

6. International transfers

Our service providers store and process data in several countries, which may differ from the country where you live. Where the law requires it, we use safeguards such as contractual data protection clauses (including Standard Contractual Clauses for data from the UK and EU) so your data stays protected to the standard of this policy.

7. How we protect it

• Passwords are hashed with Argon2 — never stored in plain text
• Sessions use a signed, HttpOnly cookie
• Database access is restricted with row-level security
• Your resume and profile are visible only to you, to staff who need them to support you, and to employers only if you switch on employer visibility

If a data breach is likely to harm you, we will notify you and the relevant regulator as the law requires.

8. How long we keep it

We keep your data while your account is active. When you delete your account, your personal data is deleted within 30 days (backups roll off within the following 30 days). We keep a minimal record of your consents and of deletion requests for as long as needed to show we complied with the law. Anonymised statistics may be kept longer.

9. Your rights

• Access and export — download a copy of your data from Privacy & Data
• Correction — edit your profile at any time, or ask us to correct anything else
• Deletion — delete your account from Privacy & Data
• Withdraw consent — for employer visibility or marketing, at any time, without affecting your use of the rest of the platform
• Object or restrict — ask us to stop certain uses of your data
• Nominate — name someone to exercise your rights if you die or become unable to (India)
• Complain — to us first, and to your data protection regulator (Section 12)

Email [email protected] for anything you cannot do yourself. We respond within 30 days, or sooner where your local law requires.

10. Cookies

We use a single essential session cookie (omnicareer_session) to keep you logged in. It is signed and HttpOnly. We do not use advertising or third-party tracking cookies.

11. Age limit

MyOmniCareer is for people aged 18 and over. We do not knowingly collect data from anyone younger; if we learn we have, we delete it.

12. Country-specific information

We handle your data in line with the privacy law of the country where you live. Your regulator is:

• India — Digital Personal Data Protection Act, 2023; Data Protection Board of India. Contact our Grievance Officer first.
• Australia — Privacy Act 1988 and the Australian Privacy Principles; Office of the Australian Information Commissioner (OAIC).
• New Zealand — Privacy Act 2020; Office of the Privacy Commissioner.
• Singapore — Personal Data Protection Act 2012; Personal Data Protection Commission (PDPC). Our Data Protection Officer is named in Section 1.
• Malaysia — Personal Data Protection Act 2010; Personal Data Protection Commissioner.
• United Kingdom — UK GDPR and Data Protection Act 2018; Information Commissioner’s Office (ICO).
• European Union, including Germany — GDPR; the data protection authority in your country.
• United Arab Emirates — Federal Decree-Law No. 45 of 2021 on Personal Data Protection; UAE Data Office.
• Saudi Arabia — Personal Data Protection Law; Saudi Data & AI Authority (SDAIA).
• Bahrain — Personal Data Protection Law (Law No. 30 of 2018); Personal Data Protection Authority.
• Kuwait — Data Privacy Protection Regulation (CITRA Resolution No. 26 of 2024); Communication and Information Technology Regulatory Authority (CITRA).
• Jordan — Personal Data Protection Law No. 24 of 2023; Personal Data Protection Council.
• Lebanon — Law No. 81 of 2018 on Electronic Transactions and Personal Data.
• Egypt — Personal Data Protection Law No. 151 of 2020; Personal Data Protection Center.
• Nigeria — Nigeria Data Protection Act 2023; Nigeria Data Protection Commission (NDPC).
• Uganda — Data Protection and Privacy Act 2019; Personal Data Protection Office (PDPO).
• Zambia — Data Protection Act No. 3 of 2021; Office of the Data Protection Commissioner.
• Canada — PIPEDA; Office of the Privacy Commissioner of Canada.

All other countries — if your country is not listed, your local privacy and consumer laws still apply to how we handle your data. You can contact us at [email protected] or your local data protection authority.

13. Changes to this policy

Each version has a number and date at the top of this page. For material changes we will email you and ask you to review and accept the new version in the app. Any new use of your data that needs consent — such as employer visibility — will always be asked for separately and never switched on for you.

14. Contact

MyOmniCareer Private Limited — [email protected]

Grievance Officer / Data Protection Officer, MyOmniCareer Private Limited — [email protected] (subject line “Grievance”).