Privacy policy.

1. What we collect

When you use notapdf we process:

• Résumé / CV content you upload or paste (name, contact, experience, education, skills)
• Email address (for payment receipts and portfolio delivery)
• Payment metadata from Razorpay (payment ID, timestamp — never card details)
• Anonymous analytics (page views, portfolio view counts, IP-derived country)

2. Legal basis for processing

We process your data for performance of the contract you entered into when you used the service (DPDP Act s.7(a)) — generating your portfolio and delivering it. We do not sell your data and do not process it for advertising.

3. How we use it

Your résumé content is sent to the Anthropic Claude API (US) to generate your portfolio HTML. It is processed in-memory and is not retained on our servers after generation completes. Anthropic’s retention policy applies to their processing — typically up to 30 days for abuse monitoring, then purged. See Anthropic’s privacy policy.

4. Cross-border transfer

Processing happens in the US (Anthropic, Vercel) and India (Razorpay, Upstash). By using notapdf you consent to this transfer under DPDP Act s.16. We select processors that maintain industry-standard security controls.

5. Your portfolio data

Once published, your portfolio is deployed as a public Vercel project. The content you chose to show is publicly accessible at your portfolio URL. You can request deletion by emailing the grievance officer below.

6. Third parties

We share data only with processors required to deliver the service:

• Vercel — hosting, deployment (US)
• Anthropic — AI generation (US)
• Razorpay — payment processing (India)
• Upstash Redis — portfolio view counter (global)
• Resend — transactional email (US)

7. Your rights under the DPDP Act

You have the right to:

• Access a summary of personal data we hold about you
• Correction of inaccurate or incomplete data
• Erasure of your data (portfolios taken offline, records purged)
• Grievance redressal via the officer listed below
• Nomination of another person to exercise your rights in the event of incapacity

To exercise any right, email the grievance officer. We respond within 7 working days.

8. Retention

Résumé content you upload is purged from memory at the end of each generation request. Published portfolio content stays live as long as you want it to — request deletion at any time. Payment records are retained for 7 years per Indian tax law. Analytics logs are retained for 90 days.

9. Security & breach notification

We use HTTPS everywhere, scoped API keys, and environment-variable secret storage. In the event of a personal-data breach affecting you, we will notify you and the Data Protection Board of India within 72 hours of discovery, as required by DPDP Act s.8(6).

10. Cookies

notapdf does not use tracking cookies or third-party advertising cookies. We use only technically necessary cookies for session state.

11. Grievance officer

For any privacy question, data-subject request, or complaint under the DPDP Act:

Shreyas Tiwari
Grievance Officer, notapdf
Email: hello@notapdf.com

You may also lodge a complaint with the Data Protection Board of India if you are unsatisfied with our response.

12. Updates

We update this policy when our processing changes. The “Last updated” date above reflects the most recent revision. Material changes will be announced via email to active users.