Privacy Policy

You may choose to provide information including:

• name;
• email address;
• phone number, where requested or provided by you;
• city, state, country, or other general location information;
• resume or CV;
• employment and professional experience;
• education;
• skills;
• projects and work activities;
• achievements and evidence of impact;
• certifications, awards, publications, presentations, or other professional accomplishments;
• career goals or professional objectives;
• professional biography;
• portfolio links and other professional URLs;
• information you provide while tracking your work or professional progress;
• information used to generate professional updates, summaries, or other outputs;
• documents and other materials you upload; and
• any other information you voluntarily choose to provide through the Services.

Where a feature supports importing information from another source, graph may access or import information that you explicitly choose to connect or authorize.

This may include information from supported professional platforms and services, such as:

• GitHub;
• Kaggle;
• professional websites or portfolios;
• public URLs that you authorize us to access; and
• other integrations made available through the Services.

We access information from connected services only in accordance with the permissions you provide.

To provide the Services, graph may generate, organize, summarize, or derive information based on information you provide.

This may include:

• resume suggestions and improvements;
• professional summaries;
• descriptions of work and achievements;
• impact summaries;
• interview preparation materials;
• standups and progress updates;
• performance or review summaries;
• LinkedIn posts and other professional content;
• suggested improvements or ways to better communicate your experience; and
• internal technical representations reasonably necessary to provide AI-powered features and functionality.

AI-generated or derived information is processed in connection with providing the Services.

You may choose to make certain information publicly available through a graph public profile, which may be accessible through an address such as:

mygraph.id/<username>

Information you choose to publish publicly may be accessible to anyone who can access the relevant public page.

You control what information is made publicly available through the visibility settings and features provided by graph.

Please review information carefully before making it public.

When you use the Services, we may automatically collect certain technical and operational information, including:

• IP address;
• browser and device information;
• operating system information;
• approximate geographic location derived from your IP address;
• login and authentication information;
• usage and interaction information;
• cookies and similar technologies;
• security and operational information; and
• diagnostic, performance, and crash information where applicable.

graph does not intentionally collect precise GPS location information through the Services unless a future feature expressly requires it and appropriate notice is provided.

graph uses AI-powered systems to provide features you choose to use.

Depending on the feature, AI may help:

• analyze and organize information you provide;
• identify missing context relevant to your resume;
• generate summaries and descriptions;
• help communicate your work and achievements;
• generate professional updates and posts;
• support interview preparation; and
• provide other AI-powered assistance made available through the Services.

AI is intended to assist you, not replace your judgment.

When you use an AI-powered feature, information reasonably necessary to provide that feature may be processed by graph or trusted AI service providers acting on our behalf.

AI-generated information may contain inaccuracies, omissions, or interpretations.

You remain responsible for reviewing AI-generated content before relying on, publishing, submitting, or sharing it.

Where supported, you may:

• edit AI-generated content;
• reject suggestions;
• delete generated content; and
• decide what information becomes part of your graph or public profile.

graph does not use your personal content to train general-purpose AI or machine-learning models without your explicit, informed, opt-in consent.

This applies regardless of whether such models are operated by graph or by trusted third-party AI providers processing information on our behalf.

We may use aggregated, anonymized, or de-identified information, together with operational metrics such as feature usage, performance measurements, error rates, and quality information, to improve the Services.

Nothing in this section permits graph to use your personal content to train general-purpose AI models contrary to Section 7.4.

Your graph is private by default.

Although a public profile address may be associated with your account, your professional information is not intended to be publicly visible unless you choose to make it public through the features provided by graph.

Where supported, graph may allow you to control the visibility of your information using options such as:

• Only Me;
• Anyone with the Link; or
• Public.

Available visibility settings may change as the Services evolve.

If you choose to make information public, that information may be:

• viewed by visitors to your public profile;
• indexed by search engines;
• copied or shared by other people; or
• stored or cached by third parties.

graph cannot control copies of public information retained independently by third parties.

You may change visibility settings or remove information through the features provided by graph, but changes may not immediately remove copies from search engines, caches, archives, or other third-party systems.

We may use trusted third-party service providers to help operate and deliver the Services.

Depending on the features you use, these providers may assist with:

• cloud hosting and infrastructure;
• authentication and account management;
• AI and language processing;
• analytics and product performance;
• email and notifications;
• customer support; and
• security and fraud prevention.

Where service providers process Personal Data on our behalf, we require appropriate protections and process information only for purposes related to providing the Services.

We may share information:

• when you direct us to do so;
• when necessary to provide the Services;
• with trusted service providers acting on our behalf;
• when required by applicable law or valid legal process; or
• when reasonably necessary to protect graph, users, or others from fraud, abuse, security threats, or other harm.

graph does not:

• sell Personal Data;
• rent Personal Data;
• trade Personal Data; or
• license Personal Data for third-party advertising purposes.

We do not treat users' Personal Data as a product.

If graph or REFLION TECH PRIVATE LIMITED undergoes a merger, acquisition, corporate reorganization, financing, or sale of assets, Personal Data may be transferred as part of that transaction, subject to applicable law and appropriate protections.

Where required by law, we will provide notice of such a transfer.

Third-party services you choose to connect or access may operate under their own terms and privacy policies.

We encourage you to review their privacy practices.

We implement reasonable administrative, technical, organizational, and physical safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include, where appropriate:

• encryption during transmission;
• encryption of stored information;
• secure authentication mechanisms;
• access controls;
• security monitoring;
• fraud and abuse detection; and
• backup and recovery procedures.

Security practices may change as technology and the Services evolve.

We may monitor for:

• suspicious login attempts;
• unauthorized access;
• fraudulent activity;
• abuse of the Services;
• security incidents; and
• operational anomalies.

If we become aware of a security incident involving Personal Data, we will investigate and take reasonable steps to contain and address the incident.

We will provide notifications where required by applicable law.

You are responsible for:

• maintaining the confidentiality of your account credentials;
• protecting devices used to access graph;
• promptly notifying us of suspected unauthorized access; and
• taking reasonable steps to protect your own information.

No method of electronic storage, processing, or transmission is completely secure.

While we take reasonable measures to protect information, we cannot guarantee absolute security.

We retain Personal Data for as long as reasonably necessary to:

• provide the Services;
• maintain your account;
• comply with legal obligations;
• protect the security and integrity of the Services; and
• fulfill the purposes described in this Privacy Policy.

You may request deletion of your account and associated information through the Services where available or by contacting us.

Deleting your account removes your information from the active Services, subject to the limited retention described below.

Deleted information may temporarily remain in secure backup systems as part of normal disaster recovery processes before being overwritten or deleted.

We may retain limited information where reasonably necessary to:

• comply with legal obligations;
• resolve disputes;
• investigate fraud or abuse;
• protect security;
• enforce our Terms of Service; or
• establish, exercise, or defend legal claims.

We aim to retain only the information reasonably necessary for these purposes.

We may retain, reserve, restrict, or delay reuse of previously claimed usernames or public profile identifiers where reasonably necessary to:

• prevent impersonation;
• protect users;
• maintain platform integrity; or
• prevent abuse.

Deleting your account or changing the visibility of information does not necessarily remove copies of information that you previously made public and that were independently copied, cached, indexed, or retained by third parties.

Where technically feasible and available through the Services, you may export information associated with your account.

Available export formats and functionality may evolve.