DRAFT — pending legal review
Privacy policy.
Written for the Digital Personal Data Protection Act, 2023. Last updated 18 September 2026.
The short version
Job seekers can use the whole site without telling us who they are. We keep one essential cookie to avoid double-counting visitors, store IP addresses only as salted hashes, and never sell data.
What we collect, and why
| Data | From | Purpose | Kept for |
|---|---|---|---|
| Hashed IP, session id, user agent, page path, referrer | Every visitor | Counting real visitors and apply clicks; abuse prevention | 13 months |
| Name, email, company, listing content | Advertisers | Publishing the listing and contacting you about it | Life of the listing + 8 years for tax records |
| Payment identifiers (checkout session id, payment id, amount, tax) | Dodo Payments | Crediting boosts, refunds | 8 years (tax law) |
| Email, city, category | Alert subscribers | Sending job alerts | Until you unsubscribe |
| Name, contact, complaint | Grievance form | Handling complaints (IT Rules 2021) | 3 years |
We do not collect card, UPI or bank details; Dodo Payments (merchant of record) does, under its own policy. We do not receive CVs.
Legal basis and consent
Advertisers, subscribers and complainants give consent by submitting the relevant form. Visitor measurement uses only data necessary to operate and secure the Service; raw IP addresses are hashed with a secret salt before storage and cannot be reversed by us.
Cookies
One essential first-party cookie (sid, 30 days) identifies a browsing session for deduplicating counts. Optional analytics load only if you choose "Allow analytics" in the banner.
Sharing
Processors: Supabase (database, hosting in the region configured), Vercel (hosting), Dodo Payments (payments, merchant of record), . Each acts on our instructions. We do not sell or rent personal data. We disclose data when required by Indian law.
Your rights
You may ask for access to, correction of, or erasure of your personal data, withdraw consent, or nominate someone to exercise these rights, by emailing grievance@example.com. We respond within the timelines the DPDP Act and Rules require. You may also complain to the Data Protection Board of India.
Children
The Service is not directed at children and we do not knowingly process their data.
Contact and grievances
Data Protection / Grievance Officer: [Grievance Officer name], grievance@example.com, [Registered office address]. Or use the grievance form.