Privacy Policy

Last updated: October 15, 2026. Test accounts (sections 2 and 6) start on October 22, 2026.

First Salary (“we”, “us”) runs firstsalary.com, which helps people find their first job. This policy explains what personal data we collect, what we use it for, who we share it with, how long we keep it, and your rights under India’s Digital Personal Data Protection Act, 2023. Our Terms and Conditions cover the rest of your use of the site.

1. What we collect

From the resume you upload, with or without an account:

• The file itself, and its text.
• The details read from it: your name, email address, phone number, city, links (such as LinkedIn or GitHub), headline and summary, work experience, education, projects, skills and any other sections it has.
• Your date of birth, when the resume gives one. It completes your profile. We don’t print it on the resumes the site makes for you, and we don’t pass it to employers, though a resume you upload is shared as you wrote it when you apply (section 4). Only a resume sets it, and a new resume with a different date replaces it. To have it corrected or removed, write to us.

From your use of the site:

• Your account: your email address, and your password, which we store only as a one-way hash.
• Your changes on My Resume, the layout you choose, and the resume PDFs the site makes for you.
• Your public URL (section 4): its address, whether your profile page lists it, how many times it was opened and when it was last opened. We don’t record who opened it, apart from our request logs below, and we don’t count your own visits.
• The jobs you apply to or withdraw from, and the match scores we work out between your skills and each job.
• What you post on Discussion: the topics and replies you write, your votes, and the posts you report (section 4).
• Messages you send us.

Automatically, when you visit: the pages you open and when, your IP address, your browser and device as your browser describes them, and your email address if you are signed in. These are our request logs. When someone opens addresses under /r/ that aren’t anyone’s public URL, we also count them against their IP address, an hour at a time, to stop anyone guessing addresses. We also use the few cookies listed in section 8.

Uploads we turn away. When we can’t use a file, because it isn’t a PDF, can’t be opened, has no text or doesn’t look like a resume, we keep a copy with the reason, to check that our upload checks are right.

2. What we use it for

• To build your profile and resume from the file you upload (section 3).
• To match you with jobs, and to offer interview questions to prepare with.
• To send your applications to the employers you apply to (section 4).
• To show your resume to anyone with its public URL (section 4).
• To run your account: signing you in, and emails that confirm your address, reset your password, or tell you that your login email or password changed.
• To test the site before it launches, if you agree. We may email you once, at the address on a resume you uploaded, to ask whether we may make a test account from it. We make one only if you say yes. If you say no, or don’t reply, we won’t ask again, and we won’t use your resume for this. A test account signs in with your email address and shows what any account shows: your profile page, with your first name and last initial, the links on your resume and your degrees, and a public URL to your resume (section 4). Our team signs in to it to check how the site looks and works. We don’t apply to jobs as you, and we don’t post, reply, vote or like on Discussion as you. We send it no email apart from what anyone can start on the site, such as a password reset. To make the account your own, use Forgot password on the login page and set your own password. From then on, only you can sign in.
• To help you. To answer a support request or fix a problem with your account, our support team may sign in to your account for up to an hour and see it as you do. When a support ticket calls for it, they can also make the changes you could make yourself. They never change your login email, password or User ID, never post, reply, edit, delete or report on Discussion for you, and never list your public URL on your profile page for you. Every session, and every change made in one, is recorded.
• To keep the site secure and working: finding errors, stopping misuse, and checking that resumes are read correctly. Our logs can include the text of a resume, so we can check how it was read.
• To improve the site, for example which skills it recognises, by looking at many resumes together.
• To meet the law, when it requires us to keep or share something.

We never sell or rent your personal data.

3. How your resume is read

Each resume we accept, whether uploaded before or after signing up, is read by Claude, an AI model made by Anthropic, which turns it into the details your profile and My Resume start from. For this the file goes to Anthropic in the United States. Anthropic doesn’t use it to train its models, and deletes it within 30 days. Our team may also look at a resume and the details read from it, to check that they match.

The details, and the match scores worked out from them, come from software and can be wrong. Check your profile, and correct it on My Resume, before you apply.

4. Who we share it with

• Anyone with your public URL. Every account has a public URL, shown to you on your dashboard and My Resume: a link to the PDF of your resume that anyone can open without signing in. It works from the start and doesn’t change. It shows your latest saved resume, in the layout you use, with everything printed on it: your name, email address, phone number, links, experience, education, projects and skills. It never shows your date of birth. Whoever opens it can download it, keep a copy and pass the link on, and we can’t control what they do with it. You decide whom to give it to. Your profile page lists it only if you turn on “Display public resume URL” there, a switch only you can see. We ask search engines not to list it, but one that ignores the request, or a site that posts the link, could still make it public. We turn away anyone who keeps trying addresses that don’t exist. If your link reaches someone it shouldn’t, write to us (section 7): we give your resume a new address and the old one stops working at once, with no way from it to the new one. Copies people already downloaded stay with them.
• Everyone who reads Discussion. A topic you start can be read by anyone, signed in or not, and a reply you post by anyone signed in. Both show your User ID, which links to your profile page. We ask search engines not to list Discussion for now. Your votes and reports are never shown to others.
• Employers you apply to. When you apply to a job, we share your profile and your resume with the employer that posted it, or with the recruiter hiring for it, so they can consider you. They then handle them under their own privacy policies.
• Companies that run parts of the site for us, which may use your data only for that work:
  • Amazon Web Services, in Mumbai: stores resume files and database backups, sends our emails, and queues each new resume to be read.
  • Akamai (Linode): runs the site, in Mumbai, and its database.
  • Anthropic, in the United States: reads each resume (section 3).
  • Cloudflare: checks, when you upload a resume on the home page, sign up or start a topic on Discussion, that a person and not an automated script is sending it (Cloudflare Turnstile). For this it sees your IP address and details about your browser, never your resume.
  • Google, through Google Workspace: our email, which holds the messages you send us and our own reports and alerts, some of which name you.
• When the law requires it, such as a court order, or to protect people or the site from fraud or harm.

5. Where it is kept

Your files, and the site that uses them, are in Mumbai, with Amazon Web Services and Akamai. A computer of ours in Bengaluru sends each resume to Claude to be read and holds our request logs, and our team keeps working copies of resume files on its own computers. A resume leaves India when Anthropic reads it in the United States, and our email is with Google, which may keep it outside India.

6. How long we keep it

• While your account is open, we keep your profile, resume files, applications and the rest, so the site can use them.
• When you ask us to delete your account (section 7), we delete your account, profile, applications, match scores and public URL from the site, so the link stops working, and your Discussion posts and votes. A post someone else answered stays as “Deleted”, without your words or your User ID, so their replies keep their place. Your resume files, with their text and the details read from them, and the resume PDFs the site made for you, move to an archive that the site no longer reads and only our team can reach.
• Test accounts (section 2) are deleted when our testing ends, before the site launches, or as soon as you ask, in the same way as any account. A test account you’ve made your own with Forgot password stays, like any other account.
• Uploads made without an account stay with us, so your profile is ready if you sign up in the same browser. Write to us to have one removed from the site.
• Database backups: each daily backup is kept for 35 days, and the one from the first of each month for a year, so deleted data can remain in a backup until it expires.

The archive, uploads made without an account, uploads we turned away, the working copies on our computers, our logs and our email have no time limit yet. We are setting one for each, and this section will say what they are.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you, what we do with it, and who we have shared it with;
• correct, complete or update it (you can change most of your resume yourself on My Resume);
• erase it, unless the law requires us to keep it. Today this means deleting your account, as section 6 describes;
• stop using it, if you withdraw your consent. This too means deleting your account, and what we did before stays lawful;
• let someone you name use these rights for you if you die or can no longer act yourself.

To ask, write to privacy@firstsalary.com from the email address you sign in with (or, without an account, the one on your resume), so we can find your data. We may ask you to confirm the request from that address. We reply within 30 days. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.

8. Cookies

We use four cookies, all our own, and none for tracking or advertising:

• sessionid keeps you signed in, and remembers a resume you uploaded before signing up. It lasts two weeks.
• csrftoken stops other sites from sending our forms in your name. It lasts a year.
• messages holds a short notice, such as “Resume saved.”, until the next page shows it.
• fs_side remembers whether you keep the sidebar open or closed. It lasts a year.

When you click “Forgot your password?”, your browser’s session storage carries the email address you typed to the next page, which fills it in and forgets it. We use no analytics or advertising tools. The only thing on the site that loads from another company’s servers is Cloudflare’s check on the home page’s upload and on sign-up (section 4); Cloudflare’s own privacy policy covers what it collects. Without cookies you can browse the jobs, but not upload a resume or sign in.

9. Security

The site uses HTTPS, the resume files we keep with Amazon Web Services are encrypted, and passwords are stored only as one-way hashes. No system is perfectly secure, though. If a breach affects your personal data, we will tell you without delay what happened, what it may mean for you and what we are doing about it, and we will report it to the Data Protection Board of India.

10. Children

First Salary is for people aged 18 and over, as our Terms and Conditions say. We don’t knowingly collect personal data from anyone younger. If you believe we have, write to us and we will remove it from the site.

11. Changes to this policy

When we change this policy, we post the new version here with a new date. If a change affects how we use your data, we also email account holders at least 7 days before it takes effect.

12. Contact us

To ask a question about this policy, use your rights, or raise a grievance about how we handle your data, write to:

📧 privacy@firstsalary.com
🌐 www.firstsalary.com