Privacy Policy

Gayatri Infotech("RecruitVerse", "we", "us", or "our") operates the RecruitVerse platform (the "Service"). This Privacy Policy explains how we collect, use, store, and protect personal information when you use our Service, visit our website, or interact with us in any way.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you are a representative of a corporate client, your company's use of the Service is governed by your Master Service Agreement, which may supplement this policy.

1. Information We Collect

Information You Provide Directly:

• Account information: Name, company name, work email address, phone number, job title, and password when you register or contact us.
• Candidate information: Resume, skills, work history, education, certifications, contact details, and assessment results submitted through the platform or careers portal.
• Payment information: Payment references, bank details (not stored by us; processed by our payment partners).
• Communication data: Messages, support requests, feedback, and demo bookings.

Information Collected Automatically:

• Log data (IP address, browser type, pages visited, time stamps)
• Device information (hardware model, operating system, unique device identifiers)
• Usage data (features used, workflow interactions, session duration)
• Cookies and similar tracking technologies (see Section 7)

2. How We Use Your Information

• To provide, operate, and improve the RecruitVerse platform and its features
• To process job applications and manage the recruitment workflow on behalf of our corporate clients
• To send transactional communications (account setup, password reset, interview notifications)
• To respond to customer support enquiries and requests
• To analyse platform usage and improve user experience
• To detect, investigate, and prevent fraudulent or abusive activity
• To comply with legal obligations under the DPDP Act 2023 and other applicable laws
• With your explicit consent: to send marketing communications or product updates

3. Legal Basis for Processing

Under the Digital Personal Data Protection (DPDP) Act 2023 and applicable Indian data protection law, we process personal data on the following bases:

• Consent: Where you have given explicit consent (e.g., for marketing communications or cookie placement)
• Contractual necessity: To fulfil our obligations under our service agreement with corporate clients
• Legitimate interests: For platform security, fraud prevention, and product improvement
• Legal obligation: To comply with applicable laws and regulatory requirements

4. Data Sharing & Third Parties

We do not sell your personal data. We may share your information with:

• Corporate clients: Candidate data is shared with the employer using RecruitVerse to manage the hiring process for which you applied
• Service providers: Cloud hosting (server infrastructure), email delivery, SMS/WhatsApp gateway, and analytics tools acting as processors on our behalf under data processing agreements
• Legal authorities: When required by law, court order, or to protect the rights and safety of RecruitVerse, its users, or the public
• Business transfers: In connection with a merger, acquisition, or asset sale, with appropriate notice to you

5. Data Retention

We retain personal data for as long as necessary to provide the Service and fulfil the purposes described in this policy, or as required by law. Specifically:

• Candidate application data: Retained for 2 years from the date of application, or until deletion is requested
• Corporate client account data: Retained for the duration of the service contract plus 1 year
• Log and analytics data: Retained for 12 months
• Consent records: Retained for 5 years to demonstrate compliance

You may request deletion of your personal data at any time, subject to our legal retention obligations. See Section 6 for how to exercise this right.

6. Your Rights

Under the DPDP Act 2023, you have the following rights as a data principal:

• Right of access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to withdraw consent: Withdraw consent at any time for processing based on consent, without affecting prior processing
• Right to grievance redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India
• Right to nominate: Nominate another individual to exercise rights on your behalf in the event of death or incapacity

To exercise these rights, contact us at privacy@recruitverse.in. We will respond within 30 days.

7. Cookies

We use cookies and similar technologies to operate the platform, remember preferences, analyse usage, and deliver relevant content. You can manage cookie preferences through our Cookie Consent banner or your browser settings. See our Cookie Policy for full details.

8. Security

We implement industry-standard technical and organisational measures to protect your personal data including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls limiting data access to authorised personnel
• Regular security assessments and penetration testing
• Audit logging of all data access and modifications
• Secure cloud hosting infrastructure with certified data centres in India

No system is entirely secure. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.

9. Children's Privacy

The RecruitVerse platform is intended for professional use by adults aged 18 and above. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 14 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related queries, data requests, or complaints, contact our Data Protection Officer: