Privacy policy
Last updated 27 October 2026
The short version: we use your information to run Elayto for you. We don't sell it. Employers see your profile only when you choose to share it. You can see, download or delete your data at any time.
1. Who is responsible
Elayto is operated by Sunu Surendranath Nair, a sole proprietor trading as Elayto, based in Navi Mumbai, Maharashtra, India. We decide how your personal data is used. Contact for any privacy question or complaint: hello@elayto.com.
2. What we collect
| Information | Examples |
|---|---|
| Early access list | Email, phone (optional), country, whether you're looking, employed or hiring |
| Account | Name, email, sign-in details, country and job market, your settings |
| Your career content | Resume, work history, your answers to our questions, the bar you set, job links you paste, drafts, applications you track and their outcomes |
| Payments | Plan bought, amount, date and receipt. Card details are collected by Dodo Payments; we never see or store your full card number. |
| Employer accounts | Name, work email, company, roles posted, actions taken on candidates |
| Usage and device | Pages and features used, device and browser type, IP address, error logs |
Please don't give us sensitive details we don't need, such as health, religion or government ID numbers.
3. Why we use it
- To run the service: build your profile, score jobs, draft applications, run five-reviewer checks, track outcomes.
- To take payment, send receipts and handle refunds.
- To keep Elayto safe: detect fake jobs, fraud and misuse.
- To improve Elayto: we look at whether scores and drafts led to good outcomes, so they get better over time.
- To contact you about your account, your plan, and early access. Marketing emails only if you agreed, with an unsubscribe link in each.
- To meet legal, tax and accounting duties.
We rely on your consent (given at sign-up, and which you can withdraw), on what's needed to provide the service you asked for, and on our legal obligations.
4. AI processing
Scores, drafts and reviews are produced by sending the relevant parts of your content to AI model providers. They process it only to return a result to us, under contracts that don't allow them to use it to train their models. AI output is guidance; you can ask for a human review of any score.
5. Who we share it with
- Employers, only when you choose. When you share your profile or apply through Elayto, that employer sees what you sent. We tell you when they view, shortlist, download or export it.
- Service providers who run parts of Elayto for us: hosting and database, website and forms, email delivery, AI model providers, and Dodo Payments for payments and tax. They may use your data only to provide their service to us.
- Authorities, when the law requires it.
We don't sell your personal data, and we don't share it with advertisers.
6. Where it's kept
Your account data is stored with our database provider in India. Some providers (for example, AI model providers and email delivery) process data in other countries, including the United States. When that happens, we use providers with appropriate safeguards.
7. How long we keep it
- Account and career content: while your account is open. When you delete your account, we delete it within 30 days, except backups, which roll off within 90 days.
- Early access list: until you're invited and sign up, or until you ask us to remove you.
- Payment and tax records: as long as tax law requires (in India, up to 8 years).
8. Your rights
Wherever you live, you can:
- see the data we hold about you, and get a copy;
- correct it;
- delete it, or your whole account;
- withdraw consent and stop marketing emails;
- complain to us, and to the data protection authority in your country.
Most of this is in the app under Account → Privacy. Otherwise, email hello@elayto.com. We reply within 30 days.
9. Cookies
We use only the cookies needed to keep you signed in and the site working. We don't use advertising cookies or trackers.
10. Security
Data is encrypted in transit and at rest, and access is limited to what's needed to run the service. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.
11. Children
Elayto is for people aged 18 and over. We don't knowingly collect data from anyone younger.
12. Changes
We'll update the date at the top when this policy changes, and email you before important changes take effect.
13. Grievance officer
Sunu Nair, Elayto, Navi Mumbai, Maharashtra, India · hello@elayto.com