Privacy Policy

1. Introduction

This Privacy Policy explains how GiRiNova X Private Limited (CIN: U62020JH2025PTC026271), operating under the brand SmartHire247, collects, uses, discloses, and safeguards your personal data when you use our platform, mobile applications, and related services.

By using SmartHire247, you consent to the practices described in this policy. This policy is compliant with the Digital Personal Data Protection Act (DPDPA), 2023, the Information Technology Act, 2000, and applicable Indian privacy regulations.

2. Data We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Identity Data	Name, email, phone, date of birth	Account creation, communication
Professional Data	Resume, skills, experience, education, certifications	Job matching, AI scoring, SmartHire Score
Verification Data	Aadhaar number, DigiLocker documents	Identity verification (with explicit consent)
Employer Data	Company name, GSTIN, industry, size	Company verification, job posting
Franchise Data	Center name, location, infrastructure details	Franchise registration, quality assessment
Payment Data	Transaction IDs, plan selection (no card numbers stored)	Subscription management, billing
Communication Data	Support tickets, feedback, chat messages	Customer support, platform improvement

2.2 Information Collected Automatically

Data Type	Purpose
IP address, browser type, device info	Security, fraud prevention
Usage logs (pages visited, features used)	Analytics, platform improvement
Mock interview responses	AI scoring, skill assessment
Cookies and session data	Authentication, preferences

3. How We Use Your Data

• Job Matching: Our AI algorithms analyze your skills, experience, and preferences to match you with relevant opportunities.
• SmartHire Score: Calculate your comprehensive career score based on verified credentials, skills, interview performance, and profile completeness.
• Verification: Validate your identity and credentials through Aadhaar/DigiLocker (with your explicit consent).
• Communication: Send notifications about applications, interviews, placements, and platform updates.
• Fraud Prevention: Detect fake profiles, fraudulent job listings, and platform abuse using AI scanning.
• Analytics: Generate anonymized, aggregated insights for platform improvement (no individual identification).
• Legal Compliance: Fulfill legal obligations, respond to lawful requests, and enforce our terms.

4. Data Sharing

4.1 We Share Data With

• Employers: Only when you apply for a job or explicitly consent to profile sharing. Shared data includes: name, skills, experience, resume, SmartHire Score, and verification status.
• Franchise Partners: For training placement coordination — limited to batch enrollment and placement data.
• Payment Processors: Razorpay (or equivalent) for secure payment processing. We do not store card numbers.
• Government/Legal: When legally required by court orders, regulatory authorities, or law enforcement.

4.2 We Never

• Sell your personal data to third parties.
• Share your Aadhaar or identity documents without your explicit consent.
• Allow bulk downloading or scraping of candidate profiles.
• Use your data for purposes unrelated to the SmartHire247 platform.

5. Your Rights (DPDPA Compliance)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a complete copy of all personal data we hold about you.
• Right to Correction: Update or correct inaccurate data through your dashboard or by contacting us.
• Right to Erasure: Request permanent deletion of your account and all associated data.
• Right to Portability: Export your data in a machine-readable format (JSON/CSV).
• Right to Withdraw Consent: Revoke consent for optional data processing at any time without affecting core account functionality.
• Right to Grievance Redressal: File complaints with our Grievance Officer or the Data Protection Board of India.

6. Data Security

• All data transmitted via HTTPS/TLS encryption.
• Passwords stored using bcrypt hashing (never in plaintext).
• Database access restricted to authorized personnel with role-based access controls.
• Regular security audits and vulnerability assessments.
• Two-factor authentication available for all account types.
• Aadhaar data processed through government-authorized APIs only — not stored locally.

7. Data Retention

Data Type	Retention Period
Active account data	As long as your account is active
Deleted account data	Permanently erased within 30 days of deletion request
Payment records	7 years (as required by Indian tax laws)
Fraud investigation data	3 years or until legal proceedings conclude
Anonymized analytics	Indefinitely (no personal identification possible)

8. Cookies

8.1 Essential Cookies

Required for authentication, session management, and security. Cannot be disabled.

8.2 Analytics Cookies

Used to understand how users interact with the platform. Opt-in only — you can manage preferences via the cookie banner on the homepage.

8.3 Marketing Cookies

We do not use third-party marketing or advertising cookies.

9. Children's Privacy

SmartHire247 is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we discover that a minor has registered, we will immediately delete their account and associated data.

10. International Data Transfers

Your data is primarily stored on servers located in India. If data is transferred internationally (e.g., for international hiring features), we ensure adequate safeguards are in place including contractual protections and encryption.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email and/or a prominent notice on the platform. Continued use after notification constitutes acceptance of the updated policy.

12. Contact & Grievance Officer