Privacy Policy

Studojo Labs Private Limited ("Studojo", "we") decides how your personal data is used. That makes us the "data fiduciary" under India's Digital Personal Data Protection Act 2023, and the "controller" under the GDPR.

This policy covers:

• studojo.com, app.studojo.com and studojo.pro;
• our browser extensions: Studojo Job Assistant, Studojo Outreach and the Studojo LinkedIn Connector;
• emails we send;
• our partner API, the Contact Enrichment API and the Sensei MCP.

Section 5 covers people who are not our users, but whose professional details we process.

Studojo Labs Private Limited is registered in Bengaluru, Karnataka, India. Contact: admin@studojo.com. Section 19 explains how to reach our grievance officer.

You don't have to give us everything. Without an email address you can't create an account. Without a Gmail connection, Outreach can't send. Without a resume, most personalisation won't work.

We do not use your data to train AI models, and we do not let our AI providers train on it.

In India, we process your data on the basis of the consent you give when you sign up and when you connect Gmail or LinkedIn. We also rely on the "legitimate uses" the DPDP Act allows, such as complying with law. You can withdraw consent at any time (section 17). Withdrawing does not affect processing that happened before, but it may mean we can no longer provide the service.

In the EU and UK, we rely on the following:

• performing our contract with you, to provide the services;
• our legitimate interests in security, fraud prevention, product improvement and communicating with customers;
• your consent, for Gmail and LinkedIn connections, non-essential cookies and marketing;
• legal obligation, for tax and accounting records.

If you received an email or LinkedIn message through Studojo, this section is for you.

What we hold: your name, job title, company, work email address, and in some cases a personal email address or mobile number and your professional profile links.

Where it comes from: professional data providers, currently Apollo.io, SalesQL and LeadsForge, which compile it from public professional sources.

What we use it for:

• So a Studojo user can contact you about job and internship opportunities. The email comes from the user's own Gmail account and is written with our AI tools.
• To give business customers contact details through our Contact Enrichment API.

Our emails include a small image that tells us whether the email was opened.

How to opt out: email admin@studojo.com and ask us to stop. No Studojo user will be able to contact you through us again. If you also ask us to delete your details, we will do so within 30 days. We keep only a scrambled (hashed) copy of your address so that you stay opted out.

When you connect Gmail, we ask Google for three permissions:

• gmail.send, to send your outreach emails;
• gmail.readonly, to detect replies and bounces;
• userinfo.email, to know which address you connected.

What we read. Each time we check for replies, we fetch the list of IDs of new messages in your inbox. We open only messages in threads started by your campaigns, and bounce notices about emails we sent. We do not open or store any other message.

Google sign-in. If you sign in with Google, Google also gives us tokens for your basic profile. We store them with your account.

Revoking access. You can revoke access at any time at myaccount.google.com/permissions, or by deleting your Studojo account. Revoking pauses your campaigns until you reconnect.

Limited Use. Studojo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is never used for advertising, never sold, and never used to train AI models. It is read by staff only with your permission, for security reasons, or where the law requires it.

LinkedIn automation needs access to your LinkedIn account, which you can give in two ways:

• The LinkedIn Connector extension reads your LinkedIn session cookies in your browser and sends them to our servers.
• You give us your LinkedIn email and password, and our servers sign in for you.

We store these credentials encrypted (AES-256). We use them to send the invitations and messages your plan includes, and to read the replies to them. This activity runs through a proxy service (Evomi) set to a location near you.

You can disconnect at any time, and changing your LinkedIn password ends our access. Section 7 of our Terms explains the risk that LinkedIn restricts your account.

Our main database, file storage and servers are on Microsoft Azure in Central India (Pune). Some providers process data outside India:

• United States: OpenAI, Azure OpenAI, Twilio, Resend, Meta, Apollo.io, IPinfo and Dodo Payments.
• European Union: Azure OpenAI (Sweden), PostHog, SalesQL (Spain), LeadsForge (Estonia) and ip-api (Romania).
• United Kingdom: SalesQL and Dodo Payments have UK entities.
• Switzerland: Evomi.

We transfer data only to countries the Indian government has not restricted. Where the GDPR applies, we rely on the European Commission's standard contractual clauses in each provider's data processing agreement.

We update this list when we change providers.

We use the Meta Pixel and Meta Conversions API to measure our ads and show them to people who have visited Studojo.

• Events we send to Meta: page views, content views, sign-ups, lead forms, resume uploads, starting checkout, adding payment details, and purchases (with amount and currency).
• Identifiers sent with them: a scrambled (SHA-256 hashed) copy of your email address, a hashed account ID, your IP address, your browser details, and the _fbp and _fbc cookies.
• Never sent: your resume, your outreach, your contacts or your Gmail data.

You can opt out by blocking cookies in your browser (section 13) or in your Meta ad preferences.

We show a cookie notice on your first visit. Essential cookies keep you signed in and cannot be turned off. In the EU and the UK (we tell from your device's time zone), analytics and advertising cookies, the Meta pixel and session recording stay off until you choose Accept, and Reject is just as easy. Change your cookie choice You can also block analytics and advertising cookies in your browser settings or with a tracker blocker, and you can opt out of Meta ads in your Meta ad preferences. Studojo keeps working when you do.

Session recordings capture your clicks and page movements. Text you type into forms is hidden.

We send two kinds of email:

• Service emails you can't opt out of while your account is open: receipts, campaign updates, reconnect requests and security notices.
• Marketing emails: tips, reminders and offers. Each one has an unsubscribe link.

Our emails record whether they were opened and which links were clicked, through links on email.studojo.com.

Deleting your account. Go to Settings, then Delete account. This deletes the following immediately:

• your account, profile and resume files;
• your campaigns and the content of your outreach;
• your Gmail and LinkedIn access, which we also revoke;
• your chatbot history.

Backups are overwritten within 7 days. We also delete your record from PostHog. Data Mixpanel collected before we stopped using it is removed when it reaches its retention limit.

You can:

• see a summary of the personal data we hold about you and how we use it, and who we have shared it with;
• correct, complete or update it;
• delete it (the Delete account option in Settings does this immediately);
• withdraw consent, including for Gmail and LinkedIn access, cookies and marketing emails;
• nominate someone to exercise your rights if you die or become unable to;
• in the EU and UK, also object to processing, restrict it, and receive your data in a portable format.

You can download a copy of your data at any time from Settings, then Your data. For anything else, email admin@studojo.com from your account address. We respond within 30 days.

If you are not satisfied, contact our grievance officer (section 19). After that, you can complain to the Data Protection Board of India, or to your local data protection authority in the EU or UK.

• Grievance Officer, Studojo Labs Private Limited
• Email: admin@studojo.com, with "PRIVACY" at the start of the subject line
• Studojo Labs Private Limited, Bengaluru, Karnataka, India

We acknowledge privacy complaints within 48 hours and resolve them within 30 days.