Privacy Policy
Version 1.0 · Effective 15 September 2026
This policy explains what PrepZap collects, why, who else sees it, and what you can do about it. It is written to be read, not skimmed past.
1. Who is responsible for your data
Philansys Labs, a sole proprietorship of Chetan Baviskar, registered in India, is the data controller (in India, the Data Fiduciary) for the personal data described here.
•
Address: Flat 501, C Wing, Bhavya Heights, Katrak Road, Near Ram Mandir, Wadala, Mumbai, Maharashtra 400031, India
•
Udyam Registration Number: UDYAM-MH-19-0463571
•
Grievance Officer: Chetan Baviskar, Proprietor — admin@philansys.com
2. What we collect
Email address, display name, profile picture
Resume content: name, contact details, employment history, education
Mock interview transcripts
Purchase and credit records
Diagnostic and error logs
You, or your Google account if you sign in with Google
You, if you sign up with email. Stored hashed — we never see it
Extracted from the resume you upload
Your purchases, reported to us by Dodo Payments
Generated automatically when something breaks
We do not collect card or payment details. Those go to Dodo Payments and never reach us.
We run no analytics. No tracking pixels, no advertising tags, no behavioural profiling, no session recording.
Sensitive information
We do not ask for photographs, date of birth, marital status, religion, caste or health information, and we do not need them. We ask you to leave them out of your resume — applicant tracking systems tend to penalise them anyway. If you include them, we process them as part of your resume because you have asked us to.
3. Why we use it, and on what basis
Creating and running your account
Scanning resumes, generating corrections, running mock interviews, grading
Tracking credits and processing purchases
Keeping the service secure and working
Complying with tax and legal obligations
Product update emails, if you opt in
Performance of a contract
Performance of a contract
Performance of a contract
Consent, which you can withdraw at any time
In India, we process this data on the basis of the consent you give when you create an account and use the service.
4. AI processing
PrepZap sends your resume text, job descriptions and interview answers to AI providers so they can be analysed and so the interviewer can respond.
We never use your data to train AI models — not ours, not anyone's. Our AI providers are contractually configured so that nothing you send through PrepZap is used to train or improve their models. We do not run any training of our own on your content either.
Scores and feedback PrepZap generates are for your practice. They have no legal or similarly significant effect, they are never sent to employers, and no automated decision is made about you on the basis of them.
5. Voice and mock interviews
During a mock interview your microphone audio streams directly from your browser to our speech-to-text provider. It does not pass through our servers, and we do not record or store it.
The interviewer's voice is synthesised the same way — generated in your browser session, not stored.
What we do keep is the text transcript of the interview, so you can review your practice and so we can grade it.
We do not create a voiceprint. We do not use your voice to identify you.
6. Who else sees your data
We use these providers. Each processes data only on our instructions.
Database, sign-in, file storage
Hosting for our application and servers
Sign-in, if you use Google to sign in
AI analysis and generation
AI analysis and generation
Speech-to-text during mock interviews
The interviewer's synthesised voice
Payments, as merchant of record
Our email, and messages we send you
We do not sell your personal data. We do not share it for advertising. We have never done either and have no plans to.
We may disclose data where the law requires it, or to establish or defend a legal claim.
7. Where your data is stored
Your data is stored in the United States. That is true for every user, wherever you live.
If you are in the EU, the UK, or another region with data transfer rules, your data is transferred to the United States under Standard Contractual Clauses (with the UK Addendum where the UK applies), which is the safeguard those rules provide for.
If you are in India, your data is transferred outside India. Indian law permits this except to countries the government has restricted, and none currently apply.
Our email runs on Zoho's India data centre.
We plan to offer regional storage in future. We do not offer it today, and this section will be updated when that changes — not before.
8. How long we keep it
Your account, resumes, transcripts
Credit and purchase records
Sign-in email, as a one-way hash
Diagnostic and error logs
Until you delete them, or delete your account
Deleted with your account. Dodo separately keeps the transaction record under its own policy and tax law
Kept after you delete your account, so free grants can't be repeated. We keep only the hash, never the email itself
While needed to handle your query and any follow-up
We do not delete accounts for inactivity. Your data stays until you choose to remove it.
When you delete your account, your files and database records are removed and the deletion cannot be undone. The one exception is the one-way hash of your sign-in email above, which we keep so a free grant is never given twice.
9. Your rights
Wherever you live, you can:
•
See what we hold about you
•
Delete your account and its data — this is built in, under Settings
•
Get a copy of your data in a portable form
•
Withdraw consent where we rely on it
•
Object to or restrict how we use your data
Deletion and profile corrections you can do yourself in the app. For anything else, email admin@philansys.com.
We acknowledge every request within 48 hours and aim to resolve it within one month.
We will not charge you or treat you differently for exercising these rights.
If you are unhappy
•
In the EU or UK: you may complain to your national data protection authority.
•
In India: write to our Grievance Officer first. If you are not satisfied, you may complain to the Data Protection Board of India.
We have not appointed a representative in the EU or UK. You can reach us directly at admin@philansys.com, and we answer to the same timelines set out above.
10. Cookies
PrepZap uses cookies only to keep you signed in. That is all they do.
We use no analytics cookies, no advertising cookies and no third-party trackers. Because our cookies are strictly necessary to provide a service you asked for, we do not show a cookie banner — there is nothing to consent to.
If you block these cookies, you will not be able to stay signed in.
11. Email we send you
Service emails — password resets, security notices, billing notices, and notice of changes to these documents. These are part of holding an account and cannot be unsubscribed from while your account is open.
Product update emails — only if you opt in. Every one carries an unsubscribe link, and we act on it within 10 business days. You can opt out at any time without affecting your account.
12. Children
PrepZap is for people 18 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to admin@philansys.com and we will delete it.
13. Security
Your files are stored in a private bucket that only your account can reach. Passwords are hashed. Our databases enforce row-level access so one account cannot read another's data. Traffic is encrypted in transit.
No service can promise perfect security, and we do not.
If a breach occurs that is likely to put your rights at risk, we will notify the relevant authority within 72 hours where the law requires it, and we will tell you directly without undue delay.
14. Regional information
EU and UK. Your GDPR rights are set out in section 9. Our legal bases are in section 3. Transfers are covered in section 7. You may complain to your national supervisory authority at any time.
India. We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023. Your rights, and how to reach our Grievance Officer, are in section 9. You may request this notice in any language listed in the Eighth Schedule to the Constitution of India by writing to admin@philansys.com.
California. In the past 12 months we have collected the categories described in section 2, for the purposes in section 3. We have not sold or shared personal information, and we do not do so. You have the right to know, delete, correct and to be free from discrimination for exercising those rights. Use the contact details in section 9.
15. Changes to this policy
We may update this policy. The version number and effective date at the top always identify the current version. Material changes take effect 30 days after we post them.
16. Contact
Chetan Baviskar — Proprietor & Grievance Officer
admin@philansys.com
Philansys Labs · Flat 501, C Wing, Bhavya Heights, Katrak Road, Near Ram Mandir, Wadala, Mumbai, Maharashtra 400031, India · UDYAM-MH-19-0463571 · admin@philansys.com