Privacy Policy

Last updated: October 3, 2026

This policy explains what FirstOffer ("we", "us") collects when you use firstoffer.online, why we collect it, and who we share it with. Searching and browsing listings never requires an account, but opening an individual opportunity's full details does — this policy covers what we collect once you sign in, plus the few things we collect even if you never sign in at all (see Resume Keyword Matcher and Push notifications below).

What we collect

If you sign in with Google, we receive your email address, name, and profile picture from Google — we never see or store your Google password. If you mark an opportunity as applied, we store which opportunity, when, and — if you choose to answer — whether you heard back.

If you use the Resume Keyword Matcher, your resume file is read in memory just long enough to extract its text and compare it against that opportunity's listed skills and requirements. The file and its extracted text are never written to disk, Supabase, or any database table — once your results are shown, nothing from that resume is kept anywhere.

If you turn on push notifications, we store your browser's push subscription (an endpoint address and encryption keys the browser itself generates) and basic browser information, so we know where to deliver "new opportunity" alerts. This isn't linked to a FirstOffer account — you can turn it on or off independently of signing in.

If you subscribe to full access or Internal HR Openings, we store the Razorpay order ID, payment ID, amount, status, which access period it covers, and which discount code (if any) you used. Each membership period is a single payment that covers 3 months — it is not an auto-renewing or auto-debited subscription, so continuing after a period ends is your choice, made the same way as your first payment. We do not receive or store your card number, UPI ID, or any other payment credential — that exchange happens directly between you and Razorpay inside their own checkout.

We also collect basic, privacy-preserving usage analytics (which pages are visited, which opportunities get unlocked) through Vercel Analytics, which does not use cookies and does not store your IP address.

Why we collect it

To run your signed-in session, to power the "mark as applied" tracking feature you opt into, to compare a resume against a specific opportunity when you ask us to, to deliver new-opportunity alerts you've opted into, to fulfill your membership payment and know your access is current, and to understand which parts of the site are actually useful so we can improve it.

Who we share it with

We use a small number of service providers to run FirstOffer: Supabase (database and authentication), Google (sign-in), Razorpay (payment processing), and Vercel (hosting and analytics). Each only receives what it needs to do its job. We do not sell your data, and we do not share it with recruiters, advertisers, or any other third party for marketing purposes.

Age requirement

FirstOffer is intended for users aged 18 and older. We don't knowingly collect data from anyone younger. If you believe a user under 18 has an account or has given us data, please email us at the address below and we'll delete the account and associated data promptly.

Cookies

We use one cookie, set by Supabase, to keep you signed in. We don't use advertising or cross-site tracking cookies.

Your data, your control

You can stop using your account at any time by signing out, and you can turn off push notifications at any time from your browser or device settings. To access, correct, or delete your account and associated data, contact us at the address below — we'll process the request within a reasonable time, except for records (like payment history) we 're required to keep for accounting or legal reasons.

Security

We rely on Google for authentication and Razorpay for payment handling, so we never store passwords or payment credentials ourselves. We take reasonable technical measures to protect the data we do hold, but no system is perfectly secure, and we can't guarantee absolute security.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Grievance Officer & complaints

In line with India's Digital Personal Data Protection Act, 2023, questions, complaints, or requests about your data can be sent to our Grievance Officer:

Nayan Kumar, Founder — FirstOffer
support@firstoffer.online

We aim to acknowledge and respond within 7 business days. If you're not satisfied with our response, you may also raise a complaint with the Data Protection Board of India.

Contact

Questions about this policy or your data — email us at support@firstoffer.online.

This is a first draft written to accurately describe what FirstOffer actually does with data today. It isn't legal advice, and we'd recommend a quick review by a lawyer familiar with Indian data-protection law (the DPDP Act) before treating it as final.