Privacy Policy
We believe in plain-language privacy policies. No legalese, no hidden clauses — just a clear explanation of what we collect, why, and how you can control it.
Last updated: 17 May 2025
We never sell your data to advertisers or third parties
Your resume is never shared without your explicit action
Delete your data any time — we'll process it within 7 days
1. What Data We Collect
Account information
When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service. We store only what is necessary to identify your account.
Resume data
If you upload a resume, we store the extracted text, your parsed skill set, work experience, and education history. Raw file uploads are processed and then deleted from our servers — we retain only the parsed profile.
Usage data
We log which pages you visit, which jobs you save, and which search filters you use. This data is used to improve recommendations and is never sold.
Employer data
Employers who post jobs provide their company name, email address, and job details. This information is displayed publicly as part of the job listing.
2. How We Use Your Data
AI-powered matching
Your parsed resume profile is sent to Anthropic's Claude AI to generate match scores between your skills and job descriptions. Anthropic processes this data under their API terms of service and does not store or use it to train their models.
Personalisation
We use your skill set and saved jobs to surface more relevant listings, sort job results by match strength, and remember your filter preferences.
Communications
We may send you transactional emails (e.g., account verification, password reset). We will never send marketing emails without your explicit opt-in.
Platform improvement
Aggregated, anonymised usage data helps us understand which features are working and where to invest next. Individual behaviour is never shared externally.
3. Data Sharing
We do not sell your data
Full stop. We have no advertising business model. Your resume, email address, and usage patterns are not sold or rented to any third party.
Service providers
We use the following trusted third-party services to operate the platform: MongoDB Atlas (database hosting), Render (backend hosting), Vercel (frontend hosting), Google OAuth (sign-in), and Anthropic Claude (AI matching). Each is bound by data processing agreements.
Legal requirements
We may disclose information if required by law, court order, or to protect the rights, property, or safety of 3ranga, our users, or the public.
Employer visibility
If you apply to a job through 3ranga's employer portal in the future, only the information you explicitly share (resume, contact details) will be visible to that employer.
4. Your Rights & Controls
Access your data
You can view all data we hold about you at any time via your Profile and Resume pages.
Delete your resume
You can permanently delete your parsed resume profile from the Resume page at any time. This immediately clears your match scores and skill set from our servers.
Delete your account
To fully delete your account and all associated data, email us at support@3ranga.com with the subject line 'Delete my account'. We will process your request within 7 business days.
Opt out of communications
Every email we send includes an unsubscribe link. You can also manage notification preferences from your profile settings.
5. Data Retention
Job listings
Job listings older than 7 days are automatically removed from our database. This keeps the platform fresh and avoids showing stale roles.
Account data
Account data is retained while your account is active. You may request deletion at any time (see §4 above).
Resume data
Resume profiles are retained until you delete them or request account deletion.
Logs
Server logs are retained for 30 days for debugging and security purposes, then automatically purged.
6. Security
Encryption in transit
All data exchanged between your browser and our servers is encrypted via HTTPS/TLS.
Authentication
We use industry-standard JWT tokens for session management. Tokens are stored in your browser's localStorage and are scoped to this domain.
Infrastructure
Our backend and database are hosted on Render and MongoDB Atlas respectively — both enterprise-grade, SOC 2-compliant cloud providers.
No passwords stored
We use Google OAuth exclusively for sign-in. We never store, handle, or have access to any passwords.
8. Contact & Questions
If you have any questions about this Privacy Policy or how your data is handled, please reach out. We aim to respond within 2 business days.
Policy changes
We may update this policy as 3ranga grows. We will notify registered users by email before material changes take effect and always update the “Last updated” date above. Continued use of the platform after changes constitutes acceptance.