Privacy Policy

1. Introduction

Welcome to Hiring Journey, operated by Undash-cop Private Limited ("we," "our," "us," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, process, and safeguard your information when you use our services, including our website, mobile applications, and related services (collectively, the "Service").

By using our Service, you consent to the collection, use, and disclosure of your information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including but not limited to:

• Name, email address, phone number, and other contact information
• Resume, cover letters, and other career-related documents
• Job preferences, application history, and career goals
• Payment and billing information (processed securely through third-party payment processors)
• Profile information, including skills, work experience, and educational background
• Any other information you choose to provide to us

2.2 Sensitive Personal Data or Information

As defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we may collect sensitive personal data including:

• Password and account authentication information
• Financial information such as bank account or credit card details (processed through secure third-party providers)
• Any other information classified as sensitive under applicable Indian laws

2.3 Automatically Collected Information

We automatically collect certain information when you use our Service, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent, clickstream data)
• Log files and analytics data
• Cookies and similar tracking technologies (see our Cookie Policy)

3. Legal Basis for Processing (GDPR)

For users in the EEA/UK/Switzerland, we process your personal data based on the following legal bases under GDPR:

• Contract Performance: To provide our Service and fulfill our contractual obligations
• Legitimate Interests: To improve our Service, ensure security, and prevent fraud
• Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
• Legal Obligations: To comply with applicable laws and regulations

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our Service, including resume optimization, job matching, application tracking, and interview preparation
• Communication: To send you service-related notifications, updates, and administrative messages
• Personalization: To personalize your experience and provide tailored job recommendations
• Payment Processing: To process payments and manage your subscription
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests
• Security: To detect, prevent, and address technical issues, fraud, or security threats
• Analytics: To analyze usage patterns and improve our Service
• Marketing: To send you promotional communications (with your consent, where required by law)

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you have explicitly consented to such sharing
• Service Providers: With third-party service providers who perform services on our behalf (e.g., payment processors, cloud hosting, analytics providers), subject to confidentiality obligations
• Legal Requirements: When required by law, court order, or governmental authority, including under the Information Technology Act, 2000
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to users
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others
• Job Applications: When you apply for jobs through our platform, we may share your resume and application information with potential employers

6. Data Security

We implement reasonable security practices and procedures as required under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and audits
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You acknowledge that you provide information at your own risk.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:

• The nature of the data and purpose of processing
• Legal and regulatory requirements (e.g., tax laws may require retention of payment records)
• Legitimate business interests (e.g., fraud prevention, dispute resolution)
• Your consent and account status

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies and applicable laws (including GDPR requirements for EU users).

8. Your Rights Under Applicable Law

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies and applicable Indian laws.

7. Your Rights Under Applicable Law

7.1 Rights Under Indian Law

Subject to applicable Indian laws, including the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request access to your personal information and receive a copy
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information, subject to legal obligations
• Right to Withdraw Consent: Withdraw your consent for processing personal information, where processing is based on consent
• Right to Grievance Redressal: File a complaint with us or the relevant data protection authority
• Right to Data Portability: Request transfer of your data in a structured format

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by applicable Indian law.

7.2 Rights Under GDPR (EU/EEA/UK Users)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), as detailed in Section 10.1.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to read the privacy policies of any third-party websites or services you visit.

10. International Data Transfers

Your information may be transferred to and processed in countries other than India. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable Indian laws, including the Digital Personal Data Protection Act, 2023.

10.1 GDPR Compliance (EU/EEA/UK Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies to the processing of your personal data. In addition to the rights outlined in Section 7, you have the following rights under GDPR:

• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing of your personal data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your personal data for direct marketing or legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

For GDPR-related requests, please contact us at [email protected]. We will respond within one month (may be extended by two months for complex requests).

10.2 Data Transfer Safeguards

When transferring personal data outside the EEA/UK, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms to ensure your data receives an adequate level of protection.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for material changes)
• Displaying a prominent notice on our Service

For EU/EEA/UK users, we will obtain your consent before making material changes if required by GDPR. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Grievance Officer

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer. You may contact our Grievance Officer for any privacy-related concerns:

13. Data Protection Officer (GDPR)

For users in the EEA/UK/Switzerland, we have designated a Data Protection Officer (DPO) to oversee GDPR compliance. You can contact our DPO for GDPR-related inquiries:

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: