Privacy Policy

1. Introduction

Welcome to ShoWay ("we," "our," or "us"), a career branding and profile enhancement service founded and operated by Fathima Khanam. ShoWay is accessible at showay.in and through our social and communication channels.

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using our services, website, or communicating with us, you agree to the terms described in this policy.

If you have any questions or concerns, please contact us at support@showay.in.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you:

• Fill out our website contact form (name, email address, phone number, service interest, and message)
• Send us a message via WhatsApp, email, or Instagram
• Share your resume, LinkedIn profile, GitHub profile, or other career documents with us for service delivery
• Enroll in or purchase a service
• Communicate with us for revisions, support, or consultations

This may include: full name, email address, phone number, WhatsApp number, current job title, target role, career history, educational background, skills, projects, LinkedIn URL, GitHub URL, portfolio content, and any other information you choose to share.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical data, including:

• IP address and browser type
• Pages visited and time spent on the site
• Referring URLs
• Device and operating system information

This data is collected to help us understand how our website is used and to improve its performance.

2.3 Information from Third Parties

If you contact us through social media platforms (Instagram, LinkedIn, YouTube) or community platforms (WhatsApp Groups), we may receive information shared through those platforms according to their respective privacy policies.

2.4 Information Collected by Our Tools and Platforms

ShoWay also operates several self-service tools. Each one collects only what it needs to function:

• ATS Resume Checker: your email address, the resume file or text you upload, the job description you paste (if any), and the resulting score/feedback. We use a one-time email code (OTP) to verify your email — we never see or store a password.
• ShoWay Learn (SAP training platform): your email address, name, phone number, and a record of which courses and lessons you've accessed, so we can track your progress and grant you access to the videos you're enrolled in.
• SAP AI Assistant: the questions and screenshots you send in chat, so the assistant can respond. See Section 4 for how this is processed.
• AI Website Builder: the business details you enter (name, description, services, contact info, social links) — these are used to generate and publish your website, and the generated site itself becomes publicly accessible at the URL we give you.
• Payments (ATS Checker plans): if you purchase a paid plan, payment is processed by Razorpay. We receive confirmation that payment succeeded and a payment reference ID — we do not receive or store your card, UPI, or bank details; Razorpay handles that directly.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Service Delivery: To create and deliver your requested career branding materials (resumes, LinkedIn rewrites, GitHub profiles, portfolio websites, interview kits, and content packs).
• Communication: To respond to your enquiries, provide updates on your order status, share revisions, and answer questions.
• Record Keeping: To maintain records of work delivered and client interactions for quality and revision purposes.
• Improvement: To understand how clients use our services and improve our offerings.
• Marketing (with consent): To send you service updates, tips, or promotional content. You may opt out at any time.
• Legal Compliance: To comply with applicable laws and protect our rights.

We do not sell, rent, or trade your personal information with third parties for their marketing purposes.

4. Use of AI-Assisted Tools

ShoWay uses Google's Gemini AI to power several of our tools: scoring and giving feedback on resumes (ATS Resume Checker), answering questions in the SAP AI Assistant, and generating website copy and layout (AI Website Builder).

To do this, the relevant content — your resume text, your chat questions, or the business details you provide — is sent directly to Google's Gemini API for processing. We do not anonymize this content beforehand, since the AI needs your actual details (your real experience, your real business name, your real question) to produce a useful, personalized result. Google's handling of this data is governed by their own privacy terms, which you can review at ai.google.dev/gemini-api/terms.

For manually delivered services (resumes, LinkedIn rewrites, GitHub profiles, portfolios, content packs), any AI-assisted drafts are reviewed, edited, and personalized by ShoWay before delivery to you.

If you have concerns about AI tool usage, please contact us at support@showay.in before using a specific tool.

5. How We Communicate

We communicate with clients primarily via:

• Email: support@showay.in or fathima.khanam@showay.in
• Instagram DM: @showay.in

Please be aware that WhatsApp messages and Instagram DMs are processed by third-party platforms. We encourage you to review WhatsApp's and Meta's privacy policies for information about how they handle your data.

6. How Your Information Is Shared

6.1 No Sale of Personal Data

We do not sell your personal information to any third party, ever.

6.2 Service Providers

We share information with the specific third-party providers our platform runs on, and only to the extent needed for them to perform their function:

• Supabase — our database and file storage provider. All account data, resume scan results, course progress, and uploaded course videos are stored here.
• Vercel — hosts showay.in and runs our application code.
• Google (Gemini API) — processes content for our AI-powered tools, as described in Section 4.
• Razorpay — processes payments for paid plans. Card/UPI/bank details go directly to Razorpay; we never see or store them.
• Resend — delivers transactional emails (login codes, approval notices, receipts).

These providers are contractually obligated (via their own terms of service, which govern our use of them) to keep your information confidential and use it only for the services performed on our behalf.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6.4 Business Transfer

In the unlikely event of a business sale, merger, or acquisition, your information may be transferred as part of the business assets, subject to the same privacy protections.

6.5 With Your Consent

We may share your information for other purposes with your explicit consent. For example, if you agree to be featured as a client testimonial (anonymized or named as you prefer).

7. Children's Privacy

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@showay.in and we will delete it promptly.

8. Data Security

We implement technical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

• Passwordless, one-time-code (OTP) login for our tools — we never store a reusable password for these accounts
• Rate limiting on login and verification endpoints to prevent automated guessing attacks
• An internal audit log recording who performed sensitive actions (approving accounts, editing course content, changing lead status) and when
• Encrypted connections (HTTPS/TLS) for all data in transit, and encryption at rest via our database provider
• Restricted, role-based access to administrative tools — only approved ShoWay team members can access student or lead data

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as necessary to provide services, maintain business records, comply with legal obligations, and resolve disputes. Typically, client data is retained for up to 2 years after the conclusion of service engagement.

You may request deletion of your personal data at any time by contacting us at support@showay.in, subject to legal retention requirements.

10. Cookies and Tracking

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze site traffic. Cookies are small data files stored on your device.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our website may not function properly without cookies.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit the processing of your personal data.
• Objection: Object to processing of your personal data for specific purposes.
• Portability: Request that we transfer your data to another party in a structured, machine-readable format.
• Withdrawal of Consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, please email us at support@showay.in. We will respond within 30 days.

12. International Visitors

ShoWay is based in India. If you are accessing our services from outside India, please be aware that your information may be transferred to, stored, and processed in India. By using our services, you consent to the transfer and processing of your information in India in accordance with this Privacy Policy.

13. Third-Party Links

Our website and communications may contain links to third-party websites (such as LinkedIn, Instagram, YouTube, WhatsApp, or Udemy). We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of every site you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will notify you of any significant changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notification via email or WhatsApp.

Your continued use of our services after any changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: