Security
Security is fundamental to View Resume. This page describes the measures we take to protect your data and how to report a security concern.
1. Our approach
SPACESHOTS TECHNOLOGIES (OPC) PRIVATE LIMITED is committed to protecting the confidentiality, integrity, and availability of the data you entrust to us. We apply reasonable technical and organisational security measures aligned with recognised practices, including the reasonable security practices and procedures contemplated under the Information Technology Act, 2000 and the rules made thereunder. Security is an ongoing process, and we continue to improve our controls over time.
2. Encryption
Data transmitted between your browser and the Service is encrypted in transit using industry-standard Transport Layer Security (TLS). Data at rest is protected using encryption provided by our hosting and storage infrastructure.
3. Infrastructure and hosting
The Service is hosted with reputable cloud infrastructure providers that maintain robust physical and environmental security at their data centres. We rely on their certified infrastructure controls as part of our overall security posture.
4. Authentication and access control
Account passwords are stored using strong, one-way hashing; we never store passwords in plain text. Internally, access to production systems and personal data is restricted on a need-to-know basis under the principle of least privilege, and is granted only to authorised personnel.
5. Payment security
Payments are handled by a third-party payment processor that maintains compliance with the Payment Card Industry Data Security Standard (PCI DSS). We do not store complete card or bank account numbers on our systems.
6. Data minimisation
We collect only the data needed to provide the Service, and we do not use your Content to train artificial intelligence models. For details on how your data is processed, see our Privacy Policy.
7. Monitoring and logging
We maintain logging and monitoring of relevant systems to help detect and investigate anomalous or unauthorised activity, and to support the reliability of the Service.
8. Backups and resiliency
We use backups and the resiliency features of our infrastructure providers to help protect against data loss and to support recovery in the event of an incident.
9. Vulnerability management
We follow secure development practices and work to identify and remediate security vulnerabilities in our applications and dependencies in a timely manner.
10. Responsible disclosure
We welcome reports from security researchers. If you believe you have found a security vulnerability in the Service, please report it responsibly to [email protected] with enough detail to reproduce the issue. Please do not access or modify other users’ data, degrade the Service, or publicly disclose the issue before we have had a reasonable opportunity to address it. We appreciate good-faith research and will work with you in good faith.
11. Subprocessors
We engage trusted third-party providers (for example, for cloud hosting, AI model processing, payment processing, and email delivery) to operate the Service. We require these providers to maintain appropriate safeguards. A current list of categories of subprocessors is available on request at [email protected].
12. Incident response
We maintain procedures to respond to security incidents. In the event of a personal data breach, we will take appropriate remedial action and provide notifications to the Data Protection Board of India and affected individuals as required under the Digital Personal Data Protection Act, 2023 and applicable law.
13. Your responsibilities
Security is a shared responsibility. Please use a strong, unique password, keep your credentials confidential, and notify us promptly at [email protected] if you suspect any unauthorised access to your account.
14. Contact
For security questions or to report a concern, contact us at [email protected].