Privacy Policy

Version 2026-11-11 · In force from 11 November 2026

1. Who we are

Pamposhun ("we", "us") is an AI job agent: it reads your resume, finds jobs that fit, prepares applications and, with your approval, submits them. The service is run by Pamposhun from India.

For the personal data described here, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the controller under the EU and UK General Data Protection Regulation ("GDPR"), where it applies to you.

This policy covers pamposhun.com, the Pamposhun app and the optional Pamposhun browser extension.

2. What we collect

Data you give us

• Account: name, email address, password (stored only as a one-way hash by our sign-in provider), confirmation that you are 18 or older, and which Terms and Privacy versions you agreed to.
• Resume and career details: the resume files you upload and their text, work history, education, skills, links (LinkedIn, GitHub, portfolio), phone number, and the facts about you that you confirm as true.
• Job preferences: roles, locations, remote preference, salary expectations, notice period, work authorisation, and companies you want to avoid.
• Answers for application forms: answers you save so the agent can reuse them, for example "Are you willing to relocate?".
• Hiring-site logins (optional): if you choose to save a login for a hiring site such as Workday, we store the login email and the password, encrypted. Only the agent uses them, to apply for you.
• Messages to us: support requests, feedback and reports.

Data created when you use Pamposhun

• Applications: the jobs you saved, hid or applied to; tailored resumes and cover letters; each application's status; what the agent filled into each employer form; and a screenshot of the confirmation page as proof of submission.
• Job inbox: Pamposhun can give you your own address at apply.pamposhun.com, so employers' sign-up and security-code emails reach the agent. We keep the sender, the subject and, encrypted, any security code or link. We delete codes and links after 7 days.
• Payments (once paid plans open): your plan, payment status and billing period. Card details go straight to Stripe and never reach us.
• Technical data: IP address, browser and device type, sign-in times, active sessions, failed sign-in attempts, error reports and server logs.
• Usage data: which features you use (for example "resume uploaded"). If you accept analytics cookies, also the pages you view and the buttons you click (page text is masked). See the Cookie Policy.

Data from other sources

• Public job postings: we collect job listings from public company career pages and job boards. These describe jobs, not you.
• Employers' emails: messages employers send to your job inbox address (see above).

Sensitive questions on application forms

Some employers ask about gender, ethnicity, disability, veteran status or similar. The agent never answers these from guesses. They are marked for you to answer yourself, and if you choose to save an answer, it is used only on applications you approve and only sent to that employer. We never use these answers for matching or any other purpose. Where the GDPR applies, this rests on your explicit consent, which you can withdraw by deleting the saved answer.

3. Why we use it, and our legal basis

We use personal data only for the purposes below. Under the DPDP Act, our basis is the consent you give when you sign up and when you take each action, unless the table says otherwise. Under the GDPR, the basis is shown for each purpose.

We do not sell personal data, we do not use it for advertising, and we do not build profiles of you for anyone else.

4. How AI is used

Pamposhun uses AI models to read resumes, pull out skills from job descriptions, score how well a job fits, tailor resumes and cover letters, and draft answers. For each task we send the model only the text that task needs, such as your resume text and the job description. The AI providers we use are listed on the Third Parties page.

Pamposhun does not train AI models on your data. We send your text to an AI provider only to do the task you asked for. How each provider handles what it receives is set by its own terms, which is one reason we list them all on the Third Parties page.

AI can be wrong. Pamposhun checks AI-written text against the facts you have confirmed and flags words it cannot support. You can always review anything before it is sent.

Automated decisions. Match scores are calculated automatically and decide which jobs we show you first. In Autopilot mode, the agent submits applications automatically when a job meets rules you set. You choose this mode and can switch back to Review at any time. Hiring decisions are made by employers, not by Pamposhun. If an automated result affects you, you can ask us to have a person look at it, and you can challenge it, by writing to the email below.

5. Who receives your data

• Employers you apply to. When an application is submitted, your application details go to that employer through its hiring system (for example Greenhouse, Lever, Ashby or Workday). From then on, the employer's own privacy policy applies to what it receives.
• Service providers who run parts of Pamposhun for us: hosting, database, email, AI models, the cloud browser that fills forms, error reports, analytics and payments. They may use the data only to provide their service to us. The full list, with what each receives and where it is based, is on the Third Parties page. We update that page before adding a new provider.
• Authorities, when the law requires it, or to protect someone's safety, or to defend legal claims. We push back on requests that are too broad.
• A new owner, if Pamposhun is ever sold or merged. This policy would continue to protect your data, and we would tell you first.

6. Where your data is stored

Our database, file storage and servers are in Singapore. A daily encrypted-in-transit copy of the database backup is also kept on our founder's computer in India for disaster recovery. Some providers process data in other countries: the USA, the EU, and, for one backup AI provider (DeepSeek), China. The Third Parties page lists them all.

The DPDP Act allows transfers outside India except to countries the Government of India restricts. We will stop any transfer that becomes restricted. Where the GDPR applies, we rely on adequacy decisions or the Standard Contractual Clauses in our providers' data processing terms, where those are available.

7. How long we keep it

We keep personal data only as long as we need it. In short: while your account is open; then, when you delete your account, it is erased within 30 days, and it leaves our backups within a further 60 days at most. Some records last for a fixed time, for example logs and tax records. The full list is on the Data Retention page.

8. Your rights

You have these rights, and you can use most of them yourself in the app:

Requests by email: write from your account's email address so we can confirm it is you. We will act on your request within 30 days, and we will tell you if we need more time and why. Using your rights is free.

9. Children

Pamposhun is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has signed up, tell us and we will delete the account.

10. Security

We protect data with encryption in transit (HTTPS), encryption of stored secrets such as hiring-site passwords, access controls, two-factor sign-in for staff tools, and regular security checks. No system is perfectly secure. The Security & Breaches page explains what we do in detail, and what we will do if something goes wrong.

11. If there is a data breach

If a breach affects your personal data, we will tell you without delay. We will explain what happened, what data was involved, what we have done and what you should do. We will also report it to the Data Protection Board of India and, where the GDPR applies, to the relevant authority, within the legal deadlines.

12. Changes to this policy

When we change this policy, we update the version and date at the top. If a change matters, for example a new purpose or a new kind of data, we show a notice in the app and ask you to agree again before you continue. Earlier versions are available on request.

If you do not agree with a new version, you can stop using Pamposhun, download your data from Settings → Data export, and delete your account from Settings → Delete account. Until you agree, we keep processing your data under the version you last agreed to, only to keep your account and data safe.

13. Grievance Officer and contact

This is our contact for privacy questions, for requests to use your rights, and for complaints, under DPDP Rules 2025 rule 9 and the Consumer Protection (E-Commerce) Rules, 2020.

Questions? Email privacy@pamposhun.com. This page is written in plain English on purpose; if anything is unclear, ask us and we will explain.