How Braevity handles your data.

Email address and authentication records when you create an account.

Profile information you choose to add — name, contact details, address, work history, education, skills, and (optionally) demographic fields such as gender, disability status, veteran status, and category, which some employers' application forms request. These optional fields are used only to autofill applications on your behalf and are never used to filter, score, or discriminate within Braevity itself.

If you provide a government ID for autofill purposes, we store only a masked reference (e.g. the last 4 digits), never the full number.

CV or resume text you upload or paste, and every resume, cover letter, or answer we generate from it.

Jobs you save or evaluate, application statuses, and AI evaluation outputs.

Usage metadata — credit consumption, feature usage, daily activity counts — for billing and quota enforcement.

If you install the Braevity browser extension: which job-application pages you visit and submit on, and feedback events you generate while using it (page URL, title, action taken).

Payment metadata (plan, amount, order/payment IDs, status) from Razorpay, our payment processor. Braevity never sees or stores your card, UPI, or bank details — those go directly to Razorpay.

If you sign up from outside India, we record only your country signal and a timestamp, never your IP address or identity, to measure how the India-only access gate is performing. This record is deleted automatically after 90 days.

Access: request a summary of what personal data we hold about you and how it's processed.

Correction and updating: ask us to fix or update inaccurate or outdated profile data.

Erasure: ask us to delete your account and associated data, subject to what we're legally required to retain (e.g. payment records).

Withdraw consent: for anything you consented to separately from account creation (e.g. marketing email), withdraw it at any time with the same ease you gave it.

Nominate: name another individual to exercise these rights on your behalf in the event of your death or incapacity.

How to exercise these rights today: email privacy@braevity.com. We do not yet have a self-service deletion or export flow in the product — every request is handled manually and we aim to complete it within 90 days, in line with DPDP grievance-redressal timelines.

We retain your account data for as long as your account is active, plus any period required by law (payment records, for example, are kept per applicable tax and financial regulation).

Signup-gate country logs (see above) are auto-deleted after 90 days on a scheduled job. Waitlist emails are kept until you ask us to remove them.

All data is encrypted in transit via HTTPS. Our database provider encrypts data at rest. API keys and credentials are stored encrypted and used only server-side.

If a data breach occurs that's likely to affect you, we will notify you and the Data Protection Board of India as required under the DPDP Act.

No internet-facing system can guarantee absolute security. Please don't store information in Braevity you wouldn't want processed by the services listed above.