Privacy Policy

This policy explains what personal data Moonshot Technologies ("we", "us", "our") collects when you use growthroles.com and the growthroles connector service at mcp.growthroles.com (together, the "Services"), why we collect it, how long we keep it, and the rights you have over it. It is written to be read, not skimmed past.

Data fiduciary / controller: Moonshot Technologies
Wathoda, Nagpur, Maharashtra 440035, India
hello@growthroles.com

1. The short version

Browsing the job board requires no account and sets no cookies. If you sign in to the connector service, we hold your name, email address, and a record of the jobs you clicked apply on, so the service can work for you. We never receive your CV, we never store a password, we run no advertising trackers, and we do not sell or rent personal data to anyone. Full card details never touch our systems.

2. Browsing growthroles.com: no account, no cookies

The job board works without registration. You can read every listing and every pay figure without identifying yourself. There is no CV upload and no profile.

We measure traffic with Plausible, a privacy-focused analytics tool. It sets no cookies, stores no personal identifiers, and does not follow you to other sites, which is why the site shows no cookie banner. It records the page viewed, the referring site, the country, and the device type, in aggregate. It also counts clicks through to employers' sites in total, never per person. These measurements are relayed through our own domain; what is collected does not change.

Our hosting provider, Cloudflare, keeps standard server logs (including IP addresses) for security, abuse prevention, and keeping the Services running. We do not use them to build profiles of visitors.

3. The connector service: what an account holds

When you sign in at mcp.growthroles.com, we collect and store:

Identity. Your name and email address, received from Google when you choose "Sign in with Google". We never see or store a password, and we request no other Google data — no contacts, no calendar, no files.

API keys. Keys you create are stored only as one-way cryptographic fingerprints (hashes). The key itself is shown to you once and is not recoverable by us afterwards.

Application activity. When you click an apply link issued to your account, we record which job, and when, so the service can remind you what you applied to and tell you if that listing later closes. A click is recorded as a click; it is marked as an application only when you say so. You can view and update this history at any time through the service, and have it deleted by writing to us (see section 9).

Usage counts. We meter use of the service (for example, applications per month) so that plan limits and abuse protection work.

What we deliberately do not hold: your CV or résumé (it stays in your AI assistant and is never transmitted to us), your conversations with your assistant, passwords, or any payment card numbers.

4. Payments

If you buy a paid plan, payment is processed by a licensed payment processor. Card and banking details go directly to the processor and never touch our servers. We receive and keep only what we need to run your purchase: the plan, its status, transaction references, and billing country. Refunds and cancellation are governed by our Cancellation and Refund Policy.

5. Why we process data, and on what basis

We process account data to provide the service you asked for (signing you in, issuing keys, tracking your applications at your request, metering plans) — in contract terms, performance of a contract, and under India's DPDP Act, processing for the purpose you consented to when creating the account. We process server logs and abuse signals under our legitimate interest in keeping the Services secure and available. Where law requires us to keep transaction records, we do so to comply with legal obligations. We do not use personal data for advertising, we do not profile you, and we make no decisions about you by automated means that have legal effect.

6. Sharing

We share personal data only with the processors needed to run the Services:

Cloudflare (hosting, storage, and delivery), Google (sign-in only, at your initiation), and, when paid plans are active, a payment processor for billing. Each acts on our instructions. We do not sell, rent, or trade personal data. We do not share your identity with employers: when you open an apply link, you leave for the employer's own site as an ordinary visitor, and we strip referrer information from that hand-off.

We may disclose data if a law, court, or authority with jurisdiction validly requires it, or where strictly necessary to protect the rights, safety, or property of users, the public, or the Services.

7. International transfers

The Services run on global infrastructure (Cloudflare's edge network; Google's sign-in service), so data may be processed outside your country, including outside India, the EEA, and the UK. We rely on our processors' standard safeguards for such transfers and keep the data we hold to the minimum described above.

8. Retention

Account identity and application history are kept while your account is active. Revoking a key deletes its usable form immediately (only spent fingerprints remain until purged). Usage meters expire automatically about two months after the month they measure. If you delete your account, we delete identity and application history within 30 days, keeping only what tax or accounting law requires us to keep about transactions, for as long as it requires. Aggregate statistics that identify nobody may be kept indefinitely.

9. Your rights

You can access what we hold about you, correct it, delete it, withdraw consent, or complain. Keys can be created and revoked at mcp.growthroles.com/settings; for anything else, email hello@growthroles.com from your account address and we will act within 30 days. If you are in the EEA or the UK you additionally have the rights to restrict or object to processing and to data portability, and you may lodge a complaint with your local supervisory authority. If you are in India, you may raise a grievance with our grievance contact below and, if unresolved, with the Data Protection Board of India.

Grievance contact: Grievance Officer, Moonshot Technologies, Wathoda, Nagpur, Maharashtra 440035, India · hello@growthroles.com

10. Job listings and employer data

Listings are read from employers' own public hiring pages and describe roles, not people. Company names, logos, and job descriptions remain the property of their employers. If you are named in a listing and would rather not be, or you are an employer who wants a listing or logo removed, email us and we will remove it promptly.

11. Children

The Services are about employment and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

12. Security

Keys are stored only as hashes; sessions are signed; transport is encrypted end to end (HTTPS); secrets are held in our infrastructure provider's secret store, never in code. No system is perfectly secure, but we hold little, and what we hold is minimised by design. If a breach ever affects your data, we will notify you and the authorities as the law requires.

13. Changes

When this policy changes materially, the change appears on this page with a new date before it takes effect. The current version always lives at growthroles.com/privacy.

14. Contact

Moonshot Technologies · Wathoda, Nagpur, Maharashtra 440035, India · hello@growthroles.com