Last updated: 7 October 2026
Foundryy helps students and early-career professionals understand their skills, find relevant opportunities and ask people for advice or referrals. This policy explains what we collect, why, who sees it, and the choices you have.
What we collect
- Account: your email address and a password (stored only as a salted Argon2id hash; we cannot read it). If you sign in with Google or LinkedIn, we receive your verified email and name.
- Profile: your name, college, degree, graduation year, location, career goal, target companies and skills.
- Resume: the PDF or DOCX you upload, and the text and structured details (skills, experience, education, projects) extracted from it.
- Your activity: projects, achievements, saved and applied opportunities, application notes, connection, mentorship and referral requests (including the messages you write), notifications, and your conversations with the Career Agent.
- Technical: IP address and request logs for security, rate limiting and troubleshooting; AI usage counts (not the content) for cost control.
We do not use advertising trackers or sell your data.
How we use it
- To analyse your profile, show your skill gaps and a career roadmap, and rank opportunities. Match and readiness scores are estimates calculated from your profile and current listings. They do not predict hiring outcomes.
- To let you request referrals, connections and mentorship. Foundryy never contacts anyone on your behalf without your explicit action, and never guarantees a referral, interview or offer.
- To send transactional emails only, such as verification codes, password resets, and updates about your requests and applications. We do not send marketing email.
- To keep the service secure, prevent abuse and fix problems.
AI processing
Parts of Foundryy use AI (Amazon Nova models through Amazon Bedrock) to read your resume, draft roadmap text and referral messages you can edit before sending, and answer Career Agent questions. We send only the information needed for each task, not your whole profile. AWS states that content processed by Bedrock is not used to train its models. AI output can be wrong, so please check it before relying on it.
Who can see your information
- You, always. Your resume and Career Passport are private by default.
- A professional you contact: they see the message you send and anything you choose to attach (such as your resume or Career Passport). They do not see your profile otherwise.
- Service providers that run Foundryy for us: Amazon Web Services (servers, database, file storage in a private bucket, email delivery, AI) and Vercel (hosting the website). They process data only to provide those services.
- Authorities, only if the law requires it.
How long we keep it
We keep your information while your account is active. If you delete your account, your profile is deactivated and your uploaded resume files are deleted. We may retain referral records and security logs where needed for abuse prevention and audit, without using them to market to you.
Job listings
The openings shown on Foundryy are collected from the public career pages and job-board APIs that employers publish for this purpose (for example Greenhouse, Lever and Ashby job boards), and from licensed job-search APIs. Where we read a web page, our crawler identifies itself as FoundryyBot, obeys the site's robots.txt and crawl-delay, and fetches at a low rate. We store the listing details (title, company, location, description, pay where stated, skills) and always keep the link to the original posting, which is where you apply. We do not scrape sites whose terms forbid it, and we do not collect personal data about job applicants or recruiters. If you represent an employer and want a listing corrected or removed, email business@foundryy.in.
Your choices
- Access or export a copy of your data, correct it, or ask us to delete your account and data: email business@foundryy.in and we will respond.
- Delete a resume or application from within the app at any time where the option is shown.
- Withdraw consent for optional connections (such as sharing your Career Passport) by changing visibility or by contacting us.
Security
Traffic is encrypted in transit (HTTPS). Passwords are hashed, resume files are stored privately and encrypted, access is checked on our servers for every request, and we rate-limit sensitive actions. No system is perfectly secure, so we cannot guarantee absolute security.
Children
Foundryy is for students and early-career professionals and is not intended for children under 16. If you believe a child has given us information, contact us and we will remove it.
Changes and contact
We may update this policy and will change the date above when we do. Questions: business@foundryy.in.