Privacy Policy

LastKoin (Sole Proprietorship), registered at Rampura Road, Bhawanigarh, Distt. Sangrur, Punjab 148026, India. For any privacy question, contact our Privacy Officer / Grievance Officer using the details in section 13.

• Account data: your name and email. If you sign in with Google, also your Google account ID and profile photo. We have no passwords: you sign in with Google or with a link we email you.
• Profile & resume data: phone number (and whether employers may contact you on WhatsApp), any second phone, date of birth, gender, addresses, bio, skills, education, work history, job preferences, your resumes, and anything else you add. If you import a resume PDF, we read it to fill in your profile; we do not keep the file.
• Career tools: your career assessment answers and results, and your Career Chat messages.
• Recruiter data: if you hire on LastKoin, your company details, team members, job posts, and how you handle applications.
• Activity: jobs you view, click, save, and apply to (yourself or through auto-apply), resume downloads, and your Koin balance and history. With job views and clicks we log your browser type and a one-way hash of your IP address — never the IP address itself.
• Messages: anything you send us through the contact form or by email.
• Cookies: only the ones listed in our Cookie Policy.

We do not take payments, so we hold no card, bank, or billing details.

We process personal data to provide and improve the service. Under the DPDP Act we rely on your consent (and, where applicable, “legitimate uses”) for identified, reasonable purposes:

• To create and secure your account and authenticate you.
• To match you with relevant jobs and generate your resume and public link.
• To send your application to an employer — and, if you turn on auto-apply, to apply to matching jobs for you.
• To run the career assessment and show your profile-completeness and match scores.
• To read an imported resume, word your assessment result, and answer Career Chat questions using AI (see section 4).
• To run your Koin balance and the features it unlocks.
• To improve the product using aggregated, de-identified activity data.
• To comply with law and prevent fraud or abuse.

• Employers: when you apply to a job — yourself, or through auto-apply once you turn it on — that job’s employer sees your profile, resume, email, and phone number. Employers cannot search or browse people who have not applied to them. You can turn auto-apply off at any time.
• Public resume link: if you turn it on, anyone with the link can see that resume, and search engines may list it. Turn it off and the page stops showing.
• AI processing: an imported resume, your Career Chat messages, and the facts behind your assessment result are sent to Google’s Vertex AI to produce the answer. We keep a log of these requests and answers to check quality and fix problems.
• Service providers (processors): Vercel (hosting), Supabase (database), Google (sign-in and AI), and our email provider (sign-in links). They process data on our instructions.
• Legal: where required by law, court order, or to protect rights and safety.

We do not sell your personal data.

Our database and servers are in Mumbai, India. Some providers — such as Google, for sign-in and AI — may process data outside India. Where data crosses borders, we take reasonable steps so it remains protected to a standard comparable to this policy.

We keep your data while your account is open. When we delete your account, we delete your profile, resumes, applications, assessment results, Career Chat history, and the AI request log linked to you. We keep the messages you sent us (including your deletion request) and the record of job views and clicks, which is no longer linked to you, unless the law requires us to keep more.

We use reasonable technical and organisational safeguards — encryption in transit, sign-in links that expire, access controls, and least-privilege practices. No system is perfectly secure, but we work to protect your data and to respond quickly if something goes wrong.

Depending on where you live, you can:

• Access a summary of the personal data we hold about you.
• Correct or complete inaccurate or incomplete data.
• Erase your data and delete your account.
• Withdraw consent at any time (this does not affect prior processing).
• Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act).
• Challenge our compliance or raise a grievance (DPDP Act).

You can edit or delete most of your data yourself from your profile page. To get a copy of your data or to delete your account, email info@lastkoin.in from the address on your account. We respond within 30 days.

LastKoin is intended for users aged 18 and over. We do not knowingly process the data of children below that age without verifiable parental or guardian consent as required by the DPDP Act, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has given us data, contact us and we will delete it.

By using LastKoin you consent to this policy. You can withdraw consent at any time by asking us to delete your account at info@lastkoin.in; some features may stop working once you do.

If a personal-data breach is likely to affect you, we will notify the relevant authority (such as the Data Protection Board of India) and affected users as required by applicable law.

We use cookies only to keep you signed in and to remember your language, a referral link you followed, and your cookie choice. We use no analytics or advertising cookies. See the Cookie Policy.

In line with the DPDP Act, you can reach our designated officer for any privacy concern or grievance:

• Gurwinder Singh, Grievance Officer / Privacy Officer
• Email: info@lastkoin.in
• LastKoin, Rampura Road, Bhawanigarh, Distt. Sangrur, Punjab 148026, India

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

We may update this policy. Material changes will be communicated by email or an in-app notice, and the “last updated” date above will change.