Last updated: 4 September 2026
This policy explains how OneShot collects, uses, stores and shares personal data when you use our website and job-application tools.
Information we collect
We collect account information such as your name, email address, profile details and authentication identifiers. When you use the service, we process resumes, job descriptions, job links, application details, interview responses, career evidence, generated documents and the instructions you provide.
For purchases, we receive transaction details such as the payment reference, amount, status and credits purchased. Razorpay processes your payment credentials. OneShot does not store full card, bank-account or UPI credentials.
We may also collect device, browser, page, referral, approximate-location, IP-address and interaction information through essential logs and analytics technologies.
How we use information
We use personal data to authenticate users, analyse role fit, generate application materials, manage resumes and applications, provide interview practice, allocate credits, process payments, prevent abuse, troubleshoot the service, communicate with you, understand product usage and comply with legal obligations.
AI processing and service providers
We use Supabase for authentication, database and storage services; OpenAI to analyse supplied content and generate requested materials; Netlify to host and operate the website; Razorpay to process payments; and Google Tag Manager and Google Analytics to measure website usage. These providers may process data on our behalf under their own security and privacy terms, including in countries outside India.
We do not intentionally send resume text, job-description text, email addresses or generated application documents to Google Analytics. Analytics events should contain product-usage metadata rather than the contents of your documents.
Retention and deletion
Temporary raw resume uploads used for an application are scheduled for deletion from file storage after 24 hours by default. A resume you deliberately save to your resume library remains available until you remove it. Application records, generated materials, career-profile information and interview activity may remain while your account is active or until you use the available deletion controls.
We may retain limited transaction, security, fraud-prevention, backup and compliance records for longer where reasonably necessary or required by law. Deletion from active systems may not immediately remove data from encrypted backups, which expire on their normal rotation schedule.
Sharing and sale of data
We share personal data only with service providers needed to operate OneShot, when you direct us to do so, to protect users and the service, or when required by law. We do not sell your resume or personal data.
Role leaderboards are optional and private by default. If you opt in, only your chosen alias, selected role track, practice score, session count and rank are shown to other signed-in users. Your name, email, employers, applications, resumes and answers are not displayed.
Security
We use reasonable technical and organisational safeguards, including access controls and secure transport. No online service can guarantee absolute security, so you should avoid uploading sensitive information that is not needed for your application.
Your choices and rights
You may update account information and delete supported content through the product. You may also ask us to access, correct or delete personal data, withdraw consent where processing depends on consent, or raise a privacy grievance through our support and grievance form. We may need to verify your identity before completing a request.
You can limit non-essential cookies through your browser settings. Where applicable law requires separate consent for a technology, we will request it.
Children
OneShot is intended for people aged 18 or older. We do not knowingly provide the service to children.
Changes and contact
We may update this policy as the service or law changes. Material changes will be communicated through the website or account where appropriate. For questions or complaints, use our support and grievance form.