Privacy Policy

This policy explains what data O2Ten collects, why we collect it, and what control you have over it. We try to keep this in plain language. If anything is unclear, write to support@o2ten.com.

What we collect

To run the service, we collect three categories of data:

• Account information: name, email, phone number, password (hashed), and the country of residence you provide at signup.
• Career profile: resume content, work history, target roles, visa status (F1, OPT, H1B, etc.), and any preferences you give our intake form.
• Usage data: pages you visit, features you click, and the device and browser you use. This is anonymized to a pseudonymous ID where possible.

Payment information

Payments are processed by our payment partners, Razorpay and PayPal. Card and bank details are entered directly with the payment provider on their PCI-DSS compliant systems. O2Ten never sees or stores your full card number, CVV, or bank account number. We receive only a transaction ID, the amount, the last four digits of the card, and the status (paid, failed, refunded). Each provider handles that data under its own privacy policy.

How we use it

• To run the service: matching you to roles, tailoring resumes and scoring them against job descriptions, giving you access to job resources and Extraordinary Skills material, tracking your progress through courses and the community, and, on Premium, submitting applications on your behalf and showing you a pipeline.
• To take payment, issue receipts, apply refunds, and meet our tax and accounting obligations.
• To improve the service: aggregated usage analytics tell us which features work and which do not.
• To communicate with you: account notifications, application updates, and the occasional product email. You can unsubscribe from product emails at any time. Account notifications are not optional while you have an active subscription.

We do not sell your data. We do not let third parties advertise to you based on what is in your O2Ten profile.

Who we share it with

We share data with these classes of third party, only when needed to operate the service:

• Payment processors (Razorpay, PayPal) to take payment and process refunds and chargebacks.
• Infrastructure providers (hosting, database, email delivery, analytics) operating under data-processing agreements that limit them to processing data on our behalf.
• Employers and job boards when we submit an application on your behalf, with the information you have authorized us to send (resume, cover letter, application form fields).
• Government and law enforcement when legally required, after we have made a reasonable effort to limit the scope of the disclosure.

Your rights

You have the right to:

• Access the personal data we hold about you. You can download a copy from your Account settings or by writing to us.
• Correct data that is wrong. Most of it is editable directly in your Profile. For anything that is not, email us.
• Delete your account and all associated data. We retain a small set of records (transaction history, audit logs) for the period required by law, typically seven years.
• Object to certain processing or withdraw consent for analytics and product emails.

If you are in the EU, UK, or California, you have additional rights under the GDPR, UK GDPR, and CCPA. To exercise any of these, write to support@o2ten.com and we will respond within 30 days.

Data retention

We keep your career profile and application history for as long as your account is open. When you delete your account we remove that data, except for transaction records and audit logs that we are required to keep for tax and legal purposes, typically seven years.

Cookies

We use cookies (and similar local-storage technologies) for two purposes: to keep you signed in across page loads, and to measure aggregated product usage. You can disable cookies in your browser, but the service will not function without the session cookie that keeps you signed in.

Security

We encrypt data in transit (TLS 1.2 or higher) and at rest. Passwords are hashed with bcrypt. Access to production data is restricted to a small set of engineers and is logged. We are not perfect, and no online service is. If you believe you have found a security issue, write to support@o2ten.com.

International data transfers

O2Ten is operated from the United States. If you use the service from outside the US, your data will be transferred to and processed in the US, which has different data protection rules than your home country.

Children

The service is not directed at anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will delete it.

Changes to this policy

When we make a material change to this policy, we will notify you by email at least 14 days before the change takes effect. The "Last updated" date at the top reflects the most recent change.

Contact