Comprehensive Privacy, Data Governance & Security Policy

Document Ref: RPJ-PRIV-2026-V5 | Effective Date: August 11, 2026 | Last Revision: August 11, 2026

1. Preamble, Legal Binding & Scope of Agreement

This Comprehensive Privacy, Data Governance & Security Policy (“Policy”) constitutes a legally binding agreement between the individual user, job applicant, or employer representative (“User”, “Candidate”, “Data Principal”) accessing or utilizing the digital platform accessible via https://rapidjobs.in (“Website”, “Platform”) and RapidJobs, its Parent Holding Entity, subsidiary corporations, group affiliates, joint venture partners, successors, and permitted assigns (collectively referred to as “Company”, “RapidJobs”, “We”, “Us”, or “Our”).

By accessing, browsing, creating a profile, submitting any web form, uploading credentials, or engaging with our recruitment facilities, the User signifies their unconditional, irrevocable acceptance of all provisions, waivers, data sharing authorizations, cybersecurity liability disclaimers, and disclosures articulated herein, pursuant to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable regulatory statutes of the Republic of India.

2. Express Irrevocable Communication Authorization & DND Waiver

The User acknowledges and agrees that submission of any contact information (including mobile telephone number, WhatsApp contact, or electronic mail address) onto the Platform constitutes an express affirmative action granting the Company and its authorized personnel an unencumbered, perpetual license and authorization to communicate with the User for recruitment pre-screening, interview coordination, salary benchmarking, job opportunity alerts, and onboarding procedures.

Notwithstanding the registration of the User's telephonic contact on the National Do Not Call (NDNC) Registry, National Customer Preference Register (NCPR), or any statutory “Do Not Disturb” portal managed by the Telecom Regulatory Authority of India (TRAI), the User hereby explicitly waives all statutory rights to file telemarketing or spam complaints against the Company, its recruitment coordinators, or client employer HR panels. Communications may be initiated via direct voice calls, automated telephonic dialing systems, Short Message Service (SMS), WhatsApp Business messaging, Rich Communication Services (RCS), electronic mail, or push notifications.

3. Exhaustive Categories of Collected Personal Data & Compensation Metrics

To facilitate volume candidate evaluation, talent matching, and corporate employer placement, the Company collects, indexes, and processes comprehensive categories of personal data, including without limitation:

  • Personal Identifiers & Demographic Markers: Full legal name, preferred alias, biological gender, date of birth, age, residential address, current municipality, postal code, preferred deployment location, photograph, and statutory identity numbers (PAN, Aadhar, Voter ID, or Passport details where required for background verification).
  • Compensation, Financial & Remuneration Records: Current Cost-to-Company (CTC), fixed monthly salary breakdown, variable compensation structures, performance incentive metrics, historical pay slips, bank account details (for payroll initiation upon placement), tax withholding slabs, expected monthly remuneration, notice period buy-out expectations, and historical salary progression documentation.
  • Educational, Professional & Skill Attributes: Academic degrees, educational institutions attended, year of graduation, cumulative marks/grades, prior employer history, designations held, key responsibility areas, technical proficiencies, language fluencies, shift availability (including 24/7 rotational and night shifts), and two-wheeler/transportation ownership status.
  • Automated Technical & Behavioral Telemetry: Internet Protocol (IP) address, browser type, operating system parameters, device hardware signatures, session timestamps, referral URL paths, form field interaction metrics, geolocation coordinates, and clickstream analytics.

4. Intra-Group, Parent Holding Entity & Corporate Affiliate Data Transfers

The User hereby grants express, irrevocable consent for the Company to transfer, transmit, replicate, consolidate, and share any or all submitted personal, professional, and financial compensation data with the Company's Parent Holding Entity, ultimate parent corporation, sister subsidiaries, joint venture entities, cross-border corporate affiliates, and newly acquired enterprise divisions (collectively, “Group Entities”).

Data transmitted across Group Entities may be utilized for centralized candidate database maintenance, consolidated cross-platform job matching, internal talent analytics, strategic workforce planning, corporate auditing, cross-selling of career development services, and executive reporting. Group Entities operate under unified corporate data governance standards ensuring equivalent data handling protocols.

5. Disclosures to Third-Party Employers, Sub-Processors & Service Intermediaries

In furtherance of the recruitment services offered by the Platform, the User authorizes the disclosure of their candidate profile, resume artifacts, skill matrix, and compensation expectations to:

  • Verified Corporate Hiring Employers: Enterprise HR panels, BPO operators, banking institutions, and commercial clients seeking candidate talent for active hiring mandates.
  • Outsourced Background Verification Agencies: Third-party screening agencies engaged to verify employment credentials, academic qualifications, and identity records.
  • Payroll & Financial Intermediaries: Banking partners, salary account processing institutions, and benefits providers facilitating candidate onboarding.
  • Infrastructure & Technology Sub-Processors: Cloud server hosting providers, database management vendors, automated communication gateway operators, and analytical software platforms.

6. Algorithmic Candidate Scoring, Resume Parsing & Market Benchmarking

The Company utilizes automated algorithmic software tools, machine-learning resume parsers, and statistical modeling algorithms to evaluate candidate profiles. Personal data, historical salary markers, and career trajectories may be aggregated, anonymized, or pseudo-anonymized to construct market salary benchmarks, hiring velocity models, industry compensation reports, and predictive recruitment metrics.

The User explicitly acknowledges that algorithmic candidate scoring does not constitute a legal guarantee of job interview selection, placement offer, or minimum salary package securing.

7. Commercial Structure & 100% Free Candidate Placement Clause

The Platform operates under a Business-to-Business (“B2B”) commercial framework wherein client hiring employers compensate the Company for recruitment sourcing, candidate pre-screening, and placement fulfillment services.

Placement services are provided to candidate job seekers on a 100% free-of-charge basis. The Company strictly prohibits any employee, recruiter, or third-party representative from demanding, soliciting, or collecting candidate registration fees, interview deposits, medical examination charges, or uniform costs. Candidates are instructed to immediately report any unauthorized monetary solicitation to [email protected].

8. Cybersecurity Safeguards, Data Protection Commitment & Risk Disclaimers

The Company is deeply dedicated to protecting user data and makes every proactive commercial, administrative, and technical effort—employing transport layer security (SSL/TLS encryption), server-side input sanitization, web application firewalls, and strict role-based access protocols—to secure candidate and recruiter records against unauthorized disclosure, loss, or alteration.

However, because no digital storage infrastructure or internet data transmission can be guaranteed to be 100% immune from technical vulnerabilities or sophisticated external cyber threats, the User acknowledges and agrees that electronic data transmission is performed with an awareness of these inherent digital risks (“Assumption of Risk”).

The User expressly agrees that all transmission, submission, and uploading of personal data, financial markers, and resume credentials onto the Platform is performed at the User's sole risk (“Assumption of Risk”).

In the event of any unauthorized data leak, cybersecurity intrusion, zero-day software exploit, state-sponsored cyberattack, server compromise, ransomware event, hardware failure, or third-party data interception beyond the Company's reasonable commercial control (collectively, a “Force Majeure Cybersecurity Event”), the Company, its Parent Entity, directors, officers, employees, cloud vendors, and affiliates shall be completely released and held harmless from any and all civil damages, statutory penalties under the DPDP Act or IT Act, identity theft claims, financial losses, or reputational liabilities.

9. Disclaimers Regarding Third-Party Employers, Impersonators & External Links

  • Independent Third-Party Employer Operations: RapidJobs transmits candidate profiles to verified client employer HR panels for interview shortlisting. The Company exercises no direct operational ownership over independent client employers and shall not be held liable if a client employer misuses, leaks, or fails to safeguard candidate details after receiving candidate shortlists.
  • Fraudulent Impersonation Disclaimer: Official communications are conducted solely via the domain rapidjobs.in and email [email protected]. The Company accepts zero legal or financial liability for losses incurred by candidates who communicate with unauthorized impersonators, fraudulent Telegram/WhatsApp groups, or fake agents soliciting money outside official channels.
  • External Hyperlinks: The Website may contain links to external employer career portals, assessment tools, or partner websites. The Company disclaims all responsibility for the privacy practices, content, or security posture of third-party external links.

10. Limitation of Liability & Class Action Waiver

The User acknowledges and agrees that because the Company provides candidate placement services, job matching facilities, and recruitment coordination to candidate job seekers on a gratuitous, 100% free-of-charge basis (wherein candidates pay zero monetary consideration to the Company), this nominal financial liability limitation reflects a fair, reasonable, and proportional allocation of legal risk under contract law.

To the maximum extent permitted by applicable law in the Republic of India, the total cumulative aggregate financial liability of the Company, its Parent Entity, directors, officers, employees, and affiliates for any and all claims, disputes, legal demands, actions, or causes of action across all users, candidates, employers, incidents, data breaches, and leaks combined—regardless of the volume of data records or number of profiles affected (including scale up to 10 Lakh / 1,000,000 candidates or more)—shall strictly not exceed INR ₹0 (Nil / Zero Monetary Compensation) in total or the absolute minimum statutory amount permitted by law.

The User explicitly waives all rights to initiate, join, consolidate, or participate as a plaintiff or class member in any class action lawsuit, collective arbitration, or multi-party representative proceeding against the Company or its Parent Entity.

11. Data Retention, Archival Systems & Statutory Exceptions

Personal data collected by the Company is stored within secure production databases and enterprise backup archives for the duration necessary to fulfill recruitment matching objectives, maintain historical audit trails, comply with statutory tax and labor regulations, and resolve potential legal disputes.

Even following profile deactivation or candidate deletion requests, the Company reserves the absolute legal right to retain immutable database transaction logs, anonymized analytical records, statutory compliance filings, and audit artifacts required pursuant to Indian legal mandates.

12. Candidate Data Subject Rights & Formal Erasure Protocol

Subject to statutory limitations under the DPDP Act 2023, Data Principals possess conditional rights regarding their personal data, including the right to request access, correction of inaccuracies, and erasure of active profile records.

To initiate a formal Data Erasure Request (“Right to be Forgotten”), the Data Principal must dispatch a written notice from their registered electronic mail account containing the subject line “Statutory Data Erasure Request” to [email protected], providing mandatory verification details (Full Name, Registered Mobile Number, Current Location). Upon identity verification, the Company will process profile removal from active sourcing databases within 72 business hours, subject to statutory retention exceptions outlined in Section 11.

13. Statutory Grievance Redressal & Dispute Jurisdiction

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and DPDP Act mandates, grievances or statutory notices concerning data processing should be submitted to the designated Grievance Desk:

Statutory Privacy Grievance Desk — RapidJobs Inc.

Official Website: https://rapidjobs.in

Support & Privacy Email: [email protected]

Governing Law: Laws of the Republic of India | Exclusive Jurisdiction: Courts of Mumbai, Maharashtra.