2. Scope of the Policy

This privacy policy applies to all users of the Naukri360 platform. This involves job seekers, recruiters, HR professionals, employers, and administrative users across all services, including:

• The official website (www.naukri360.in).
• Integrated resume-building tools.
• Hiring management systems and applicant tracking systems (ATS).
• Communication tools such as email alerts, messages, and notifications.

It includes data collected via browsing, account registration, resume uploads, job applications, job postings, and customer support interactions.

3. What Data We Collect

Understanding the types of information we gather helps you stay in control. Depending on how you use Naukri360, we may collect:

a. Personally Identifiable Information (PII)

• Full Name, Gender (optional), Date of Birth.
• Contact Info: Email address, phone number, physical address (if submitted).
• Nationality, languages known, LinkedIn, and social links (optional).

b. Career and Educational Details

• Educational qualifications, universities attended, certifications.
• Work experience, internships, and job roles.
• Resume/CV content (uploaded or built via our tools).
• Skill sets, professional summaries, and achievements.
• Portfolio links and project documents (if submitted).

c. Recruiter & Employer Data

• Company name, registration/verification documents.
• Designation, official business email IDs.
• Job postings, hiring activities, and candidate notes.
• Analytics on hiring preferences and trends.

d. Technical & Device Data

• IP address, browser type, OS, device identifiers.
• Cookies, log files, session durations, and referral pages.
• Navigation behavior across pages.

e. Communication Records

• Emails exchanged with support.
• Chat transcripts (via live chat or chatbot).
• Feedback forms and user surveys.

We never collect financial data directly (e.g., credit card numbers). Payment processing is handled by secure third-party gateways.

4. Why We Collect Your Data

According to Naukri360, data should serve you, not the other way around.

We collect and use data to provide a personalized, secure, and effective experience, including:

• Creating resumes quickly with auto-filled suggestions
• Matching your skills to relevant job openings
• Enabling recruiters to shortlist and contact candidates
• Sending tailored job recommendations, reminders, and alerts
• Improving platform features through user behavior insights
• Ensuring compliance, fraud prevention, and legal audit trails
• Verifying accounts and identifying misuse

We never engage in surveillance, tracking for third-party ads, or data brokering.

5. Legal Basis for Processing

We operate on lawfulness, fairness, and transparency.

Your data is processed based on one or more of the following legal grounds:

• Consent: Explicit agreement when you register or submit information
• Contractual Obligation: To deliver services you request (e.g., resume builder or job application tracker)
• Legal Obligation: When the law requires us to retain or disclose information
• Legitimate Interest: For business improvement, provided it doesn’t infringe on your rights

Where special categories of data are involved (e.g., disability-related information for inclusive hiring), we’ll always ask for explicit, informed consent.

6. Data Security Protocols

We don’t just promise security, we invest in it.

Our platform uses multiple layers of digital and organizational security to protect your information:

• Data Encryption: AES-256 encryption in storage and TLS/SSL encryption in transit
• Firewall Protection: Against unauthorized traffic and potential intrusions
• Access Controls: Role-based access to data for internal teams
• Multi-Factor Authentication (MFA): For sensitive operations
• Activity Monitoring & Logging: Real-time alerts for suspicious activity
• Regular Penetration Testing: To identify and fix vulnerabilities
• Compliance: Our practices align with the DPDP Act, GDPR (for global users), and industry norms

Staff are trained on privacy-by-design principles, and all data processing vendors are vetted rigorously.

7. Data Retention & Deletion

Your data doesn’t stay forever, unless you want it to.

We retain your data only as long as it serves its intended purpose:

• Active Accounts: Data is retained as long as the account is in use.
• Inactive Accounts: After 2 years of inactivity, we anonymize or delete data unless required by law.
• Manual Deletion: You may request deletion at any time, fulfilled within 2 weeks.
• Recruiter Data: Retained as long as job postings and candidate activity require.
• Legal Records: Retained up to 7 years for audits and compliance.

Upon account deletion, all associated resumes, applications, and activity logs are securely erased from our production servers.

8. Sharing & Third-Party Access

Only those who need it get it.

We never sell user data. We only share limited data under strict agreements with:

• Resume enhancement and parsing tools (for formatting or optimization)
• Secure payment providers (Razorpay, PayU, etc.—no card data stored)
• Cloud storage & hosting (AWS, Azure, or equivalents)
• Analytics platforms (Google Analytics, Hotjar — anonymized data)
• Recruiters/Employers: Only when you apply to their jobs or opt in to resume visibility

All third parties sign Data Processing Agreements (DPAs) ensuring data confidentiality, purpose limitation, and legal compliance.

9. International Transfers

When your data crosses borders, we raise the security.

In rare cases, your data may be stored or processed outside India. We ensure:

• Adequacy Decisions: Transfers only to countries with adequate data protection laws
• Standard Contractual Clauses (SCCs): Used when required
• Encryption & Segmentation: Data is encrypted and logically isolated across regions
• Transparency: You'll be notified of major changes in storage locations

We ensure your rights remain fully enforceable, regardless of server geography.

10. Your Data Rights

It’s your data. You control it, always. You can exercise the following rights at any time:

• Right to Access: Know what data we have about you
• Right to Correction: Request updates or fix inaccurate details
• Right to Deletion: Ask us to erase your data permanently
• Right to Restrict Use: Limit how we use your data (e.g., for recommendations)
• Right to Portability: Request your data in downloadable formats
• Right to Withdraw Consent: Revoke permissions previously granted
• Right to Lodge Complaint: File grievances with regulatory authorities or our Data Protection Officer (DPO)

To initiate any request, email us at support@naukri360.in. Identity verification is mandatory for security.

11. Cookie Usage

We use cookies to serve you, not to spy on you.

Cookies help us offer a smoother experience and personalized browsing. We use:

• Essential Cookies: To keep your session secure and logged in
• Performance Cookies: To understand usage and optimize pages
• Preference Cookies: To remember user settings (e.g., dark mode, language)

No third-party marketing or retargeting cookies are used. You can manage cookie settings from your browser anytime.

12. Children’s Data

Built for professionals, not for minors.

Our platform is meant for users aged 18+. We do not knowingly collect data from anyone under 18. If you believe a minor’s data is accidentally stored, notify us, and we will delete it immediately.

13. Data Breach Policy

If something ever goes wrong, you’ll be the first to know.

In the unlikely event of a breach:

• We’ll investigate, isolate, and fix the issue promptly
• Notify affected users within 72 hours
• Inform regulatory authorities as required
• Offer guidance to users on securing accounts
• Document and publicly share post-incident reports and improvements

Breach incidents are treated as top-level emergencies with dedicated response teams.

14. Policy Changes

This policy will evolve — always in your favor.

If there are material changes to this policy:

• We’ll inform you via email, alerts, or banners
• Changes will be summarized in simple language
• You’ll have a chance to review and update your preferences
• The “Last Updated” date will reflect the most recent version