Privacy Policy

1 Information We Collect

Information you provide directly:

• Account registration data: name, email address, phone number, password (hashed).
• Seeker profile data: work experience, skills, education, current and expected salary, notice period, resume file, and profile photo.
• Employer profile data: company name, industry, size, website, description, and location.
• Job posting content: title, description, salary range, requirements, screening questions.
• Application data: cover letters, screening answers, and any messages exchanged on-platform.

Information collected automatically:

• Log data: IP address, browser type, pages viewed, time and date of visits, referring URL.
• Device data: operating system, screen resolution, and browser version.
• Cookies and similar tracking technologies (see Section 5).

2 How We Use Your Information

• To create and manage your account and verify your identity.
• To match job seekers with relevant job postings and deliver personalised recommendations.
• To facilitate applications, messaging, and the hiring process between Seekers and Employers.
• To send transactional emails (application updates, interview alerts, status changes).
• To send optional marketing communications — you may opt out at any time.
• To detect, prevent, and investigate fraud, spam, and abuse.
• To analyse usage patterns and improve Platform features and performance.
• To comply with legal obligations under Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

3 Information Sharing

We do not sell your personal data. We share it only in the following circumstances:

• With Employers: When a Seeker applies to a job, the Employer can view the Seeker's profile, resume, and application responses.
• With Seekers: Employer names, company information, and job details visible to Seekers are intended to be public-facing.
• Service providers: Cloud hosting (Firebase / Google Cloud), email delivery, payment processing, and analytics — each bound by confidentiality agreements.
• Legal requirements: When required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the transaction with prior notice.

4 Data Security

We implement industry-standard security measures including TLS encryption in transit, hashed passwords, role-based access controls, and regular security reviews. While we take reasonable steps to protect your data, no system is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your rights and freedoms, we will notify affected users and the relevant authority within 72 hours of becoming aware, as required by applicable law.

5 Cookies & Tracking

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and core Platform functions.
• Analytics cookies: Help us understand how the Platform is used (e.g. Google Analytics — anonymised).
• Preference cookies: Remember your settings such as location and filter preferences.

You can manage or disable cookies through your browser settings. Disabling essential cookies may prevent you from logging in or using certain features.

6 Data Retention

We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. financial records, legal disputes).

Application data (screening answers, messages) may be retained for 12 months after the application is closed to support dispute resolution.

7 Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal obligations.
• Grievance redressal: Raise a complaint with us and, if unresolved, with the Data Protection Board of India.
• Nomination: Nominate an individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email us at privacy@replykaro.com. We will respond within 30 days.

8 Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

9 Third-Party Links

The Platform may contain links to external websites (e.g. company websites, application forms). We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing any personal data.

10 Changes to This Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top of this page reflects the most recent revision. For material changes, we will notify registered users by email before the changes take effect.

11 Contact & Grievance Officer

For privacy-related queries or to exercise your rights, contact our Grievance Officer:

• Organisation: Jobs Shala Technologies Pvt. Ltd.
• Email: privacy@replykaro.com
• Response time: Within 30 days of receipt