Privacy Policy

1. Who we are

Jobulary 360 ("we", "us", "our") provides a 360-degree feedback and assessment platform accessible at jobulary360.com. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our platform.

If you have questions, contact us at hello@jobulary360.com.

2. Information we collect

Account information: When you sign up, we collect your name, email address, company name, and password (hashed — never stored in plain text).

Employee data: Administrators may upload employee names and email addresses to use as assessment subjects and raters. This data is stored on our servers and used solely to facilitate assessments.

Assessment responses: We store the ratings and comments submitted by raters as part of the 360 assessment process.

Payment information: We do not store card details. Payments are processed by Stripe (USD) or Razorpay (INR), each with their own privacy policies.

Usage data: We collect standard server logs including IP addresses, browser type, and pages visited for security and diagnostic purposes.

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Jobulary 360 platform
• Send transactional emails (survey invitations, reminders, completion notifications)
• Process payments and manage your subscription
• Respond to support requests
• Comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

4. Anonymity of rater responses

Assessment responses are anonymised at the rater level. Subjects are only shown aggregated scores grouped by rater type (e.g., peer, manager). Individual rater identities and individual rater responses are never exposed to subjects through the platform interface.

Administrators with database access may technically be able to link responses to rater tokens, which is an inherent limitation of any hosted platform. We encourage organisations to communicate this clearly to their teams.

5. Data storage and security

Data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure. All data is encrypted at rest and in transit using TLS. Access is restricted to authorised personnel only.

We implement industry-standard security practices including HTTP-only session cookies, server-side authentication, and HMAC-verified webhook endpoints.

6. Data retention

We retain your data for as long as your account is active. If you cancel your account, you may request deletion of all associated data by emailing hello@jobulary360.com. We will action deletion requests within 30 days.

7. Third-party services

We use the following third-party services, each subject to their own privacy policies:

• Supabase — database and authentication
• Resend — transactional email delivery
• OpenAI — AI narrative generation (assessment data is sent to OpenAI's API)
• Stripe — payment processing (USD)
• Razorpay — payment processing (INR)
• Vercel — hosting and infrastructure

8. Your rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at hello@jobulary360.com.

9. Cookies

We use a single HTTP-only session cookie to maintain your login state. We do not use tracking cookies or third-party advertising cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify active account holders of material changes by email. The "last updated" date at the top of this page reflects when the policy was most recently revised.