The short version. Your resume is checked on your own device. We keep only what we need to run your account, take payments and help you, we never sell your data or send it to cruise lines, and you can download or delete it at any time.
1. Who is responsible for your data
World Cruise Jobs, which runs World Cruise Jobs, decides how your personal data is used and is the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This policy also follows the Information Technology Act, 2000 and its rules on reasonable security practices and sensitive personal data.
2. What we collect
| What | Examples | When |
|---|---|---|
| Account details | Name, email, password (stored only as a secure hash), optional phone and the role you're aiming for | When you sign up or edit your profile |
| Resume check results | The role, score, years of experience, certificates and languages found. The resume itself is read on your device and never sent to us. | When you check a resume |
| Resumes you build | Kept in your browser. When you download the PDF, the content is sent to our server only to create the file. | When you use the resume builder |
| AI assistance and chat | The text of application forms you paste or link, and the questions you ask. Screenshots are read on your device; we receive only the text. | When you use Meera or the chat |
| Support and sessions | Your questions to our experts, their replies, and the sessions you book | When you ask or book |
| Payments and invoices | Amount, credits, payment method type (for example UPI or card network), billing name, state, country and optional GSTIN. Never card numbers, CVV or UPI PIN. | When you add credits |
| Technical and usage data | Pages visited, device type, browser, IP address, approximate location (country, region, city) from your connection, and sign-in history | Whenever you use the website |
| Messages to us | What you send through the contact form | When you write to us |
3. Why we use it
- To run your account and give you the tools and services you ask for, including the paid ones.
- To take payments, issue invoices or receipts, and keep the records that tax law requires.
- To answer your questions, run expert sessions and send service emails (confirmations, receipts, replies). We don't send marketing emails without your consent.
- To keep the website and your account secure, prevent fraud and misuse, and investigate problems.
- To understand, in aggregate, which pages and tools help people, so we can improve them.
4. Your consent
We process your personal data with your consent, which you give when you create an account or use a feature, and for the "legitimate uses" the DPDP Act allows, such as complying with law and keeping records. You can withdraw consent at any time by deleting your account or writing to us. Withdrawing doesn't affect processing that already happened, and some features won't work without the data they need.
6. Data stored outside India
Some providers above store or process data outside India, for example in the United States or the European Union. We use only reputable providers with strong security, and we follow any restrictions the Government of India notifies under the DPDP Act.
7. How long we keep it
- Account, resume-check results, support and session records: while your account is open. When you delete your account, we erase them.
- Payment records, invoices and the credit ledger: 8 years, because GST and income-tax law require it. They are kept even if you delete your account.
- Sign-in and security logs: up to 2 years, to protect accounts and investigate misuse.
- Contact form messages: up to 2 years after we reply.
- Visit statistics: kept in aggregate; the visitor cookie expires after one year.
8. How we protect it
- Every page is served over HTTPS. Passwords are stored only as scrypt hashes, which we can't read.
- Sessions use secure, http-only cookies. You can see your signed-in devices and sign them out from My account > Security and privacy.
- Admin access is limited to the people who need it, and every admin action is recorded in an activity log that can't be edited.
- If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
9. Your rights
Under the DPDP Act you can:
- Get a copy of your data: My account > Security and privacy > Download my data.
- Correct it: edit your details on the Profile page, or ask us.
- Erase it: delete your account from the Security and privacy page, or ask us.
- Nominate someone to exercise these rights if you die or can't act yourself.
- Complain to our Grievance Officer, and if you're not satisfied, to the Data Protection Board of India.
Write to us through our contact form. We reply within 30 days at the latest.
10. Children
World Cruise Jobs is for adults looking for work. We don't knowingly collect data from anyone under 18. If you believe a child has created an account, tell us and we will delete it.
12. Changes to this policy
If we change how we use your data, we will update this page and its date, and tell signed-in members about important changes before they take effect.
13. Grievance Officer
Nitin Sikka, World Cruise Jobs. Contact: our contact form. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.