Privacy Policy

1. Introduction

Welcome to JobMyIndia (hereinafter referred to as "JobMyIndia," "we," "us," or "our"), a product and service operated by Stockup Fintech Pvt Ltd. This Privacy Policy is published in compliance with:

• Section 43A of the Information Technology Act, 2000
• Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Digital Personal Data Protection Act (DPDPA), 2023
• General Data Protection Regulation (GDPR) for users in the European Economic Area
• Google API Services User Data Policy

This Privacy Policy applies to all users of our website (www.jobmyindia.com), mobile applications, and related services (collectively, the "Platform"). By accessing or using our Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect the following categories of personal data from our users:

• Identity Data: Full name, date of birth, gender, photograph, Aadhaar number (for KYC verification), PAN number
• Contact Data: Email address, mobile number, residential address, city, state, PIN code
• Professional Data: Resume/CV, educational qualifications, work experience, skills, certifications, job preferences, salary expectations
• Account Data: Username, password (stored in encrypted form), account settings, preferences
• Employer Data: Company name, GST number, CIN number, company registration documents, authorized signatory details
• HRMS Data: Employee records, attendance data, payroll information, leave records, performance data (as managed by employers through our HRMS features)

2.2 Automatically Collected Information

• Device Information: Device type, operating system, browser type, IP address, unique device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, search queries, job applications made
• Location Data: Approximate geographic location based on IP address or, with your consent, precise location for location-based job matching
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies

2.3 Third-Party Data

We may receive information about you from third-party services when you choose to authenticate via Google Sign-In or other social login providers. This includes your name, email address, and profile picture as authorized by you during the authentication process.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide job matching, employer services, HRMS features, and related platform functionalities
• Account Management: To create, maintain, and secure your account
• Communication: To send job alerts, application updates, OTP for authentication, invoices, and service-related notifications via email, SMS, or push notifications
• AI-Powered Features: To power our AI job matching algorithm, resume parsing, and smart recommendations using anonymized and aggregated data
• Payment Processing: To process subscription payments, generate invoices, and maintain financial records as required by Indian tax laws (GST compliance)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes including the IT Act, 2000, DPDPA 2023, and tax regulations
• Security: To detect, prevent, and address fraud, fake job postings, unauthorized access, and other security incidents
• Platform Improvement: To analyze usage patterns, improve our services, and develop new features

4. Google API Services - Limited Use Disclosure

JobMyIndia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the data that is necessary for the features you use (email and basic profile information for authentication)
• We do not use Google user data for advertising purposes
• We do not sell Google user data to third parties
• We do not use Google user data for purposes unrelated to the core functionality of JobMyIndia
• Human access to Google user data is limited to cases where explicit user consent is provided, for security investigations, legal compliance, or internal operations

5. Data Sharing and Disclosure

We may share your personal information in the following circumstances:

• With Employers: When you apply for a job, your profile information and resume are shared with the respective employer
• With Candidates: When employers search for candidates, limited profile information may be visible as per the employer's subscription plan
• Payment Processors: With Razorpay for processing payments securely. Razorpay's privacy policy applies to the payment data they collect
• Communication Services: With SendGrid (email) and Fast2SMS (OTP delivery) for service-related communications
• AI Services: With Google Gemini for AI-powered features. Data shared is anonymized and limited to what is necessary for the feature
• Legal Requirements: When required by law, court order, or government authority under the provisions of Indian law
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

6. Data Security

We implement industry-standard security measures to protect your personal data in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• All data transmission is encrypted using TLS/SSL (HTTPS)
• Passwords are stored using industry-standard hashing algorithms (bcrypt)
• Two-Factor Authentication (2FA) is available for all accounts
• Rate limiting and IP-based auto-blocking to prevent brute force attacks
• NoSQL injection detection and XSS prevention middleware
• Regular security audits and vulnerability assessments
• Content Security Policy (CSP) headers and HSTS enforcement
• Access controls with role-based permissions for all data

7. Data Retention

We retain your personal data as follows:

• Active Accounts: Data is retained as long as your account is active and for a period of 3 years after account deletion to comply with Indian tax and legal requirements
• Payment Records: Financial records are retained for 8 years as required under the Income Tax Act, 1961, and GST Act, 2017
• HRMS Data: Employee records managed through our HRMS are retained as per the employer's data retention policy and applicable labour laws
• Usage Logs: Server and access logs are retained for 90 days for security and debugging purposes
• Cookies: Session cookies expire when you close your browser. Persistent cookies expire within 1 year

8. Your Rights Under DPDPA, 2023

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You can request a summary of your personal data being processed and the processing activities
• Right to Correction: You can request correction of inaccurate or misleading personal data
• Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements
• Right to Grievance Redressal: You can raise a grievance with our Grievance Officer or the Data Protection Board of India
• Right to Nominate: You can nominate another individual to exercise your rights in the event of your death or incapacity

9. Cookies Policy

We use the following types of cookies:

• Essential Cookies: Required for authentication, security, and core platform functionality
• Analytics Cookies: To understand user behavior and improve our services
• Preference Cookies: To remember your language preferences and settings

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

10. Children's Privacy

JobMyIndia is not intended for use by individuals under the age of 18 years. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided personal data to us, please contact our Grievance Officer.

11. Cross-Border Data Transfer

Your data may be processed on servers located outside India for certain services (e.g., cloud hosting, AI processing). Such transfers are conducted in compliance with the DPDPA, 2023, and are limited to countries or entities that ensure adequate data protection as notified by the Central Government.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, the details of our Grievance Officer are as follows:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting a prominent notice on our Platform or by sending you an email notification. Your continued use of the Platform after such changes constitutes your acceptance of the updated Privacy Policy.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra, India.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: