Skip to content
Privacy

Your data

alder does not require an account. Without one, your profile, tracker and saved searches are tied to an anonymous cookie on this browser.

If you sign in, we store your email to sign you in, and that's all. We use it only to send you sign-in codes: no newsletters, and it is never shared. Codes are stored only as a one-way hash and expire after 10 minutes. Your session is a signed cookie on your device.

  • We store what you enter in your profile, the roles you track, your saved searches and the requests you send to the agent.
  • Pasted resume text is used to suggest skills and is stored with your profile so you can update it later.
  • Nothing is shared with employers or sold. alder never applies to jobs on your behalf.
  • You can delete everything at any time from your profile page. If you are signed in, this also deletes your account and email address.

Questions or deletion requests can be sent to the alder team (see "Contact and grievances" below).

Privacy notice (full)

Draft pending legal review. This page is a plain-language draft. Values in {{double braces}} are filled in before alder takes payments.

This notice explains how {{legal_entity_name}}, {{registered_address}} (`$alder`, "we"), handles personal data, as a data fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules.

What we collect and why

  • Anonymous browser identity (a random cookie id): to keep your profile, tracker and saved searches on this device without an account.
  • Email address (only if you sign in): to send sign-in codes, to send receipts for passes you buy, and for service messages about your account. Never for marketing unless you separately opt in.
  • Profile and resume (what you enter, paste or drop): to match you to roles and to draft Apply Kits, answers and messages. Resume files are read on your device; only the extracted text is sent to us.
  • Your activity in alder (tracked roles, outcomes you record, saved searches, agent requests, daily usage counts): to run those features and enforce daily limits.
  • Purchase records (which pass, amount, dates, the payment provider's reference): to grant your pass, handle refunds and keep accounting records. We never receive or store card or UPI details.
  • Public resume page (only if you publish one): shown publicly at its link, as you chose to publish it.
  • Security data (your IP address, kept in short-lived rate-limit counters): to prevent abuse.

Consent and withdrawing it

  • We process your profile and resume because you give them to us for these purposes. Optional uses (for example, daily drop emails or follow-up reminder emails) have their own unticked checkbox.
  • You can withdraw consent as easily as you gave it: untick the option, unpublish a page, or delete your data. Withdrawal stops future processing; it doesn't undo processing that already happened lawfully.

Who processes data for us

We use these processors, only for the purposes above and under their own security commitments. Some of them process data outside India.

  • Cloudflare: hosting, database (D1), security and the AI labelling of job listings (Workers AI; job listings only, not your data).
  • Anthropic: AI model that reads your resume text, profile and the job description to draft Apply Kits, answers, messages and search summaries. Sent only when you use those features.
  • Resend: sending sign-in codes and receipts by email.
  • Dodo Payments: checkout, payment processing, invoices and refunds, as merchant of record. Dodo receives the details you enter at checkout under its own privacy policy.

How long we keep it

  • Your profile, resume text, tracker and drafts: until you delete them or your account.
  • Sign-in codes: 10 minutes. Rate-limit counters: up to a day.
  • Purchase records: as long as tax and accounting law requires. If you delete your account, these records are kept without a link to your profile.

Your rights

  • Access and correction: see and edit your data on your profile page, or ask us for a summary.
  • Erasure: "Delete all data" on your profile page deletes your profile, tracker, drafts and, if signed in, your account and email. An active pass ends when its account is deleted; a refund within 7 days is still available on request.
  • Grievance redressal and the right to nominate someone to exercise your rights if you die or become incapacitated: write to the grievance contact below.
  • If you're not satisfied with our response, you can complain to the Data Protection Board of India.

Age

alder is for adults. Don't create an account or buy a pass if you are under 18.

Security and breaches

Data is encrypted in transit, sign-in codes are stored only as hashes, and sessions are signed cookies. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

Contact and grievances

Grievance officer: {{grievance_officer_title}}, {{legal_entity_name}}, {{registered_address}}. Email: grievance@{{domain}}. We acknowledge grievances promptly and aim to resolve them within the time the DPDP rules set. For anything else: hello@{{domain}}.