Legal
Privacy notice
Summary
- We use your data to help you find work or hire, and for nothing you would not expect.
- Your profile and resume go to an employer only when you apply, or when you choose to make your profile visible to employers.
- We never sell personal data, and we do not use advertising cookies.
- You can access, correct, or erase your data, withdraw consent, and nominate someone to act for you. We respond within 90 days at most, and usually much sooner.
- hiARed is for people aged 18 and over.
Who we are
hiARed is operated by hiARed (legal entity name to be confirmed) ("hiARed", "we"), Registered office address to be published before launch. For personal data processed through hiARed we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Questions about this notice or our processing: hiared.in@gmail.com.
Personal data we collect
| Who | Personal data |
|---|---|
| Candidates | Name, email, phone number (if provided), password (stored only as a salted hash), location, work experience, skills, education, employment history, current and expected compensation, notice period, work-style and location preferences, resumes and the text extracted from them, profile visibility settings, saved jobs, job alerts, applications and their status, messages, interview schedules and feedback you see, offers and offer documents, reviews you write, companies or recruiters you block, and safety reports you file. |
| Employers and their team members | Company name, website domain, CIN or GSTIN, registered address, verification documents, names, work emails and roles of team members, job posts, candidate evaluations and notes, interview schedules, offers and approval records, billing profile (legal name, GSTIN, billing address, finance email), and payment order references. Card and bank details are handled by Razorpay; we never receive or store them. |
| Reviewers | The review, your rating, the role and tenure you choose to show, and the link to your account (never displayed). |
| Everyone, including visitors | IP address, device and browser information, pages requested, security and error logs, the cookie consent choice you make, and, only if you allow it, first-party analytics events such as page views and searches. Messages you send to support. |
Why we use it, and on what basis
| Purpose | What it enables | Basis |
|---|---|---|
| Account and sign-in | Creating and securing your account, email verification, password reset, and two-factor authentication. | Consent given when you create an account |
| Applying to jobs | Sending your application, resume, and answers to the employer you choose, and tracking its status. | Data you voluntarily provide for this purpose (DPDP Act s.7(a)) |
| Job Match and resume feedback | Comparing your profile and resume with jobs to show skills matched and gaps. | Consent |
| Profile visibility to employers | Letting verified employers find and invite you. Off unless you turn it on. | Consent, which you can withdraw in settings |
| Service emails | Verification codes, application updates, interview and offer notices. | Necessary to provide the service you asked for |
| Job alerts and product news | Emails about new jobs or features. | Consent; unsubscribe from any email |
| Company Transparency Reports | Computing response rates, timelines, and salary accuracy from aggregated hiring activity. No candidate is identified. | Consent given when you use the platform; reports use aggregated data only |
| Analytics | Understanding which pages and searches help people, to improve hiARed. | Consent through the cookie banner; off by default |
| Safety, fraud prevention, and security | Verifying employers, detecting fake jobs and abuse, and protecting accounts. | Legitimate uses permitted by law, and our legal obligations |
| Billing and tax | Processing purchases and issuing GST invoices to employers. | Legal obligation |
| Legal compliance | Responding to lawful requests and keeping records the law requires. | Legal obligation (DPDP Act s.7) |
We do not use your data to make decisions about you that have legal or similarly significant effects without human involvement. Job Match is guidance for you; employers make their own decisions.
Data outside India
Some processors store or process data outside India, including in the European Union and the United States. Transfers follow the DPDP Act, which permits transfers except to countries the Government of India restricts by notification. We will stop any transfer that becomes restricted.
How long we keep data
| Data | Kept for |
|---|---|
| Account and profile | While your account is active. When you ask us to delete your account (on the your data rights page), it is hidden within 48 hours and erased within 30 days, except as below. |
| Inactive accounts | Erased after 24 months without sign-in, after an email warning at least 48 hours before. |
| Applications sent to employers | Our copy follows your account. Employers keep their copy under their own retention policies. |
| Security, traffic, and processing logs | At least 1 year, as required by the DPDP Rules, 2025 (Rule 8(3)), then erased. |
| Content removed under the IT Rules and registration data of closed accounts | 180 days, as required by the IT (Intermediary Guidelines) Rules, 2021. |
| Invoices and payment records | As long as GST and tax laws require, generally 8 years. |
| Analytics events (only with consent) | 13 months, then deleted or kept only as anonymous totals. |
| Consent records | For as long as the consent applies and 1 year after, to show what you agreed to. |
Your rights
Under the DPDP Act you can ask us to:
- Access: a summary of your personal data, how we process it, and every employer or processor we shared it with.
- Correct, complete, or update inaccurate or incomplete data. Most profile data can be edited directly in your workspace.
- Erase data that is no longer needed or that you no longer consent to, except where the law requires us to keep it.
- Withdraw consent at any time, as easily as you gave it: in your settings, through the "Cookie settings" link, or by unsubscribing from emails. Withdrawal does not affect processing already done.
- Nominate a person to exercise these rights if you die or become unable to.
- Have grievances redressed by our Grievance Officer.
Make a request on the your data rights page or by email to hiared.in@gmail.com from your registered email address. We verify your identity before acting and respond within 90 days at most. We aim to respond within 30 days.
Complaints
Contact our Grievance Officer first: hiared.in@gmail.com. See grievance redressal for timelines. If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act.
Children
hiARed is only for people aged 18 or over. We do not knowingly process the personal data of children. If we learn that an account belongs to someone under 18, we close it and erase its data. Tell us at hiared.in@gmail.com if you believe this has happened.
How we protect data
We use encryption in transit (HTTPS), salted password hashing, role-based access so employers see only the applications sent to them, access logging, regular backups, and contracts that bind our processors to equivalent safeguards. If a personal data breach occurs, we will inform affected users without delay and notify the Data Protection Board and CERT-In as the law requires.
Changes to this notice
When we make material changes we will notify you by email or in the product before they take effect, and ask for fresh consent where the law requires it. Each version is dated at the top of this page.
This document is available in Hindi and in any other language listed in the Eighth Schedule to the Constitution of India on request. Write to hiared.in@gmail.com.