← Back to Mitra

Privacy Policy

Last updated: May 2026

Who we are

Mitra is an AI-powered talent agent for India's startup ecosystem. We help candidates find the right startup roles and help founders hire the right people — primarily over WhatsApp. References to "Mitra", "we", "us", or "our" in this policy refer to the Mitra platform and its operators.

For questions about this policy, contact us at hello@mitralabs.co.

What data we collect

When you use Mitra via WhatsApp

  • Your WhatsApp phone number (used as your session identifier)
  • The content of messages you send to Mitra
  • Career signals you share: role, company, skills, salary expectations, location preferences
  • Any documents you send (e.g. a CV/resume) — parsed for structured career data

When you use the Mitra web app

  • Your email address (if you sign in)
  • Your name and profile information
  • Your cookie preferences (stored locally in your browser)

When you are a founder/employer

  • Company name, role, and contact details you provide
  • Job listings you submit through the platform

How we use your data

PurposeLegal basis
Matching you with relevant job opportunitiesContract / legitimate interest
Sending introductions between candidates and foundersConsent (you explicitly request each intro)
Personalising career advice and salary benchmarksLegitimate interest
Improving the Mitra serviceLegitimate interest
Communicating service updatesLegitimate interest

We do not sell your personal data to third parties. We do not use your data for advertising.

Where your data is stored

Your data is stored in the following systems, all of which operate under appropriate data processing agreements:

  • Supabase (PostgreSQL) — durable candidate and job data, hosted on AWS (ap-south-1 region)
  • Redis — short-term conversation session data (30-day TTL)
  • OpenAI — message content is sent to OpenAI's API for AI responses; subject to OpenAI's data processing terms

How long we keep your data

  • Conversation history: stored in Redis with a 30-day rolling TTL
  • Career signals: kept until you request deletion
  • Intro records: kept for up to 12 months for dispute resolution

Your rights

You can ask us at any time to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data entirely (right to erasure)
  • Export your data in a portable format

To exercise any of these rights, message us on WhatsApp or email hello@mitralabs.co. We will respond within 30 days.

Cookies

We use a small number of cookies on the Mitra website. See our Cookie Policy for details.

Third-party services

Mitra uses the following third-party services to operate:

  • WhatsApp (Meta) — message delivery channel
  • OpenAI — AI language model powering conversations
  • Twilio — fallback WhatsApp message delivery
  • Resend — transactional email delivery
  • Railway — application hosting
  • Supabase — database hosting

Each of these providers has its own privacy policy and data processing terms.

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via WhatsApp or email. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions or requests about your data: hello@mitralabs.co

Cookie Policy →