1. Who we are
The GCC Engineer is operated by Grit Labs AI, a business based in India (Genesis Apartments, Bellanduru, Bangalore, Karnataka 560102, India). Grit Labs AI also publishes PrepClever.
"The Services" means the The GCC Engineer website and web app, and anything bought through them. Grit Labs AI is the data fiduciary for the personal data this policy describes.
2. What we collect
- Account information: your email address and, if you sign in with Google, your name and profile picture.
- Setup answers: where you are now (student, IT services and so on), your years of experience and your target role.
- Learning data: lessons and items you complete, your skill audit ratings, weekly goals and the days you were active. This powers your roadmap, gap report and job matches.
- Resume tool: the PDF you upload is read in memory to produce your evaluation and is never stored. We keep the score and report it produces, the role and company you chose, and a fingerprint (hash) of any job description, so you can see past evaluations.
- Payment information: what you bought, the amount, and the Razorpay order and payment references. Card, UPI and bank details are entered on Razorpay's checkout and never reach our servers.
- Technical data: IP address, browser and device type, and error reports when something breaks.
We do not collect government ID numbers, financial account details, biometric, health or precise location data, contacts or photos.
3. How we use it
- Create and secure your account, including email confirmation and bot protection.
- Build your roadmap, gap report, track plan and job matches from your answers and progress.
- Run the resume tool and show you your past evaluations.
- Take payments and manage your plan (grant, extend or end Pro).
- Send service emails such as sign-in links and password resets.
- Answer support requests, and find and fix faults, fraud and abuse.
- Meet legal and tax obligations in India.
We do not use your data for automated decisions with legal effects, we do not sell it, and we do not profile you for anyone else.
4. Legal basis
- Contract: running your account and delivering what you paid for.
- Consent: anything optional, which you can withdraw at any time.
- Legitimate interests: security, fraud prevention and improving the Services.
- Legal obligation: tax and accounting records.
5. Who we share it with
Only service providers that act on our instructions:
- Supabase: database and sign-in.
- Razorpay: payments (it controls your card and UPI details under its own policy).
- OpenAI: reads the text of a resume you submit to produce the evaluation. It is not used to train their models under our API terms.
- Google: sign-in with Google, if you choose it.
- Cloudflare: the bot check (Turnstile) on our sign-in forms.
- Sentry: error reports, so we can fix faults.
- Sanity: hosts our course content. It holds no personal data about you.
- Our hosting provider, which serves the website.
We also disclose data where the law requires it, to protect rights or safety, or in a merger or sale of the business, where this policy keeps applying to it.
6. Cookies
We use essential cookies only: to keep you signed in, remember your setup and progress, and remember layout choices such as a collapsed sidebar. We use no advertising or analytics trackers today. If that changes, we will update this policy and ask for consent first where the law requires it.
7. How long we keep it
- Account and learning data: while your account exists.
- Account deletion: you can delete your account yourself in Profile, and it happens at once. Backups roll over within 30 days.
- Payment records: 8 years, as tax law requires. When you delete your account they are no longer linked to it.
- Uploaded resumes: never stored.
8. How we protect it
Encryption in transit (HTTPS), databases with row-level access rules so each account can read only its own rows, and a PCI-DSS compliant payment processor so we never hold card data. If a breach affects you, we will tell you and the relevant authority promptly.
9. Your rights
You can:
- Download a copy of your data from Profile at any time.
- Change your target role in the app, or ask us to correct anything else.
- Delete your account and data from Profile.
- Withdraw any consent you gave.
- Nominate someone to exercise these rights after your death or incapacity.
For anything you cannot do in the app, email hello@prepclever.com from your account address. We acknowledge within 1 working day and complete requests within 30 days, at no charge.
10. Age
The Services are for people aged 18 and over. If we learn we hold a child's data, we delete it.
11. Where your data is stored
Your account and learning data are stored with our database provider, Supabase. Some providers process data outside India, including in the United States and the European Union, under their standard contractual protections for international transfers.
12. Changes to this policy
We update this policy when the Services or the law change. The date above shows the current version. We announce material changes in the app or by email before they take effect.
13. Contact and grievances
Grievances, data requests and complaints: email hello@prepclever.com with "Grievance" in the subject. We acknowledge within 1 working day and aim to resolve within 30 days.
If you are not satisfied with our answer, you may escalate to the Data Protection Board of India. This policy is governed by the laws of India, and the courts at New Delhi have exclusive jurisdiction.