Privacy Policy

Four categories, and nothing outside them.

• Account data — your name, email address and a hash of your password. The password itself is never stored. Also when you agreed to the Terms and Conditions, which version of them, whether you asked to be shown the job-site notice before each application, and one word for how you reached us on the visit you signed up in: a search, a social site, an email, an advertisement, another site, or directly. The link itself and the page you came from are not kept.
• Profile data — college, degree, branch, graduation year, city, target roles, interests and experience level. All of it optional, and all of it supplied by you.
• Product data — resumes you upload, job descriptions you paste, job targets you save, learning paths, quiz results, quiz-verified skills and a record of your activity across the products.
• Job search and application data, in JobHunt — the jobs you save or dismiss, your job alerts, each application you approve together with exactly what was sent in it, and the answers you have given to employers’ questions, so the next form can reuse them.

We do not run third-party analytics, and we show no advertising on GrowAhead. One advertising tool, the Meta Pixel, runs only if you allow it; “Advertising measurement” below says what it does. We do not log request bodies, which means the contents of your resume do not appear in our server logs. We do not sell or rent personal data to anyone, in any form.

We advertise GrowAhead on Facebook and Instagram. To learn which advertisements lead people to sign up, and so that Meta can show our advertisements to people more likely to want GrowAhead, this site can load a small script from Meta Platforms, the Meta Pixel. It loads only after you choose “Allow” on the cookie notice. If you choose “No thanks”, or make no choice, it is never loaded.

When it is loaded, it tells Meta five things and no others: that a public page of this site or a step of signing up was opened, that an account was created, that a download button was pressed (which one: the Mac app, the Microsoft Store or the Chrome extension; not whether anything was installed), that a checkout began, and that a plan was bought, with its price. With each, Meta receives what any website receives from a browser (the page’s address, the time, your IP address and browser type) and the identifiers its own cookies hold. If you use Facebook or Instagram, Meta can connect these to your account there, under Meta’s own privacy policy.

Two of these are also reported to Meta from our server, so that they are counted even if the page was closed or something in the browser stopped it: an account being created, if you had chosen “Allow” before signing up, and a purchase, once our payment provider has confirmed the payment, if you had chosen “Allow” before the checkout began. Meta receives no more than it would from the page: the time, the page’s address without anything after a “?”, the price and currency of a purchase, your IP address and browser type, and the identifiers Meta’s cookies hold. We keep what is sent for 30 days, so that a report can be sent again if Meta cannot be reached, and then delete it.

We do not send Meta your name, email address, phone number, resume, the jobs you look at or apply to, or anything else you do inside the products.

You can change your choice at any time on the Cookie Policy page. Switching it off stops anything more being sent to Meta and deletes Meta’s cookies for this site from your browser.

This is the most important section on the page. To analyse and rewrite a resume, its text is sent to a third-party large language model provider. That is how the product works and there is no version of it that does not do this.

The provider processes the text to return a result and, under the API terms we operate under, does not use it to train models. Even so: if you are not comfortable with your resume text leaving this service, do not upload it. That is a reasonable position and we would rather say so plainly than bury it.

Video recommendations query the YouTube Data API using the topic you typed. Your identity is not sent with that query.

Ranking jobs against your resume sends your resume text and the job description to a third-party large language model provider, on the same terms as above.

Job listings come from employers’ own career pages and applicant-tracking systems, and from listing sources such as Adzuna. Searching them does not send your identity to those sources.

When you approve an application, the employer — or the applicant-tracking system or job board it uses — receives what you approved: your name and contact details, your answers to its questions and the resume attached. That is what applying means, and it happens only for the application you approved.

To fill in an employer’s form, GrowAhead runs the application in a cloud browser operated by a third-party provider, Browserbase. Your application details pass through that browser while it fills the form in. If you sign in to a job site inside it, it keeps that site’s sign-in cookies for your account so the next application there does not ask again. GrowAhead does not store your password for that site. Deleting your account removes these saved sign-ins.

The extension reads a web page only when you ask it to: when you press “Add to GrowAhead” on a job posting, or the GrowAhead button in your browser’s toolbar. It then reads that one page — the job’s title, company and description — and, if the posting links its full job description as a PDF, the text of that file. You see what it read before anything is saved. What you save is sent to your GrowAhead account, where it is scored against your profile and used to tailor your resume, as described above.

When you press “Fill this application” on an employer’s application form, the extension fetches your profile (name, email, phone, links, education and experience) and your tailored resume from your GrowAhead account and puts them into that form on your screen. It never submits the form: the employer receives your details only when you press their Submit button yourself.

To sign in, your GrowAhead password is sent once to GrowAhead over an encrypted connection and is not kept by the extension. The extension keeps a sign-in key that can be revoked, your two extension settings, and the up to five jobs you have stacked to apply to together, in your browser’s extension storage. Signing out of the extension revokes the key and clears that storage.

If a job description is on another site (for example SharePoint or Google Drive), the extension asks for your permission before reading that file. If the GrowAhead desktop app is installed, the extension talks to it directly on your computer so that jobs can open in the app; nothing extra leaves your computer that way.

The extension does not record your browsing history, read pages you have not asked it to read, capture keystrokes, read passwords you type into other sites, or run analytics or advertising trackers. Data it handles is used only to provide these features. It is not sold, not transferred to third parties except as this policy describes, and not used to decide creditworthiness or for lending. Its use of information follows the Chrome Web Store User Data Policy, including the Limited Use requirements.

Resume files uploaded for analysis and rewriting, and their extracted metadata, are deleted 7 days after upload. A resume you give JobHunt to match and apply with is kept for up to 365 days, so that it can be attached to your applications, or until you close your account if that is sooner. Everything else — your account, profile, saved targets, learning paths, quiz history, quiz-verified skills, and your saved jobs and applications — is kept until you delete it or close your account, so that you keep a record of where you applied.

You can export everything we hold about you as a single JSON file, at any time, from Account settings → Your data. You can delete your account from the same page; that removes your account, profile, quiz-verified skills, job targets and activity immediately and cascades to your learning paths and quiz history, and to your JobHunt saved jobs, applications, resumes and saved job-site sign-ins.

One limitation, stated rather than hidden: resume files already uploaded are removed by the 7-day expiry at the latest, not necessarily at the instant you press delete. For anything else, write to privacy@growahead.in.

One cookie for your session, one that remembers your answer about advertising cookies, and Meta’s own, only if you allow them. See the Cookie Policy for the detail.

Sign-in codes, password resets and updates about your applications come from noreply@growahead.in. That address is not read; a reply to one of these emails goes to support@growahead.in. We never ask for your password, a payment card or a one-time code by email. An email asking for one is not from us, so forward it to support@growahead.in.

This service is intended for college students and adults. It is not directed at children under 13, and we do not knowingly create accounts for them.

If this policy changes in a way that affects what we do with data you have already given us, we will say so rather than quietly re-dating the page. Questions and requests go to privacy@growahead.in. Complaints go to our Grievance Officer, Tanishq Modi, at admin@growahead.in.