Privacy policy

Version 2026-11. This policy explains what we collect when you use JobIsYour, why, who sees it, how long we keep it, and how you control it. [DRAFT: replace every [bracketed] item and have a lawyer review this page before launch.]

Who we are

JobIsYour is run by [legal name of the operator], [registered address]. Contact: [privacy email]. Grievance Officer: [name], [email], [phone]. We reply to a complaint within [number] days.

What we collect, and why

• Account. Name, email or mobile number, a password (stored only as a hash), your language, qualifications and district. To run your account, your alerts and your saved jobs.
• Alerts. The channels you choose (email, web push, Telegram, SMS, WhatsApp), your preferences, and a log of what was sent to you and whether you opened it.
• Applicant profile and documents (only if you use the application kit or "Apply through JobIsYour"). Personal details, education, a photo, signature and certificates. Documents are encrypted when stored, are used only for the applications you ask for, and are shown only to you and to the team members handling a request you send (each time one opens a document it is written to an activity log). You can delete a document or your whole account at any time, except while an apply request that uses it is still open.
• Community. Questions, answers, comments, votes and files you post. They are shown with your name. Automated checks (and, where switched on, an AI service) look at posts to flag spam and abuse; a person decides what happens.
• Jobs sent in by visitors. The job details and the sender name, email and phone, kept so the editors can review and contact the sender.
• Technical data. IP address, browser and sign-in sessions, kept for security and to find faults.
• What you search for and click. We keep a de-identified record of the words typed into our search box (with links, email addresses and long numbers removed, and no link to your account), and a count of which buttons on a post (such as "Apply online") and which share options people use. A mark that changes every day, made from your address and browser, is used only to avoid counting the same thing twice. No cookies are used for this. We use it to see what content is missing and what is useful.
• Cookies. Necessary cookies (sign-in, security checks, language and theme) are always used. Analytics cookies (Google Analytics) and advertising cookies (Google AdSense) are used only if you agree in the cookie banner; you can change your choice at any time with "Cookie settings" in the footer. We keep an anonymous record of your choice, with a random number and no name or address, for three years.

Why we may use it (consent and other grounds)

Where the law asks for your consent (optional cookies, alerts on a channel you add, the application service, public posts) we ask first and you can withdraw it. Some use is needed to run the service you asked for or to keep it secure. [Lawyer: confirm the grounds under the Digital Personal Data Protection Act, 2023.]

Who else sees it

We do not sell your data. Companies that handle data for us, and only for the purposes above: [hosting provider], [email provider], [SMS and WhatsApp providers], Cloudflare (security checks on forms), Google (analytics and adverts, only with your consent) and [AI provider] (drafting and translating public notices; no account details are sent). We may disclose data when the law requires it.

How long we keep it

• Your account and what you saved: until you delete the account.
• Sign-in sessions: up to 30 days after the last use.
• Alert delivery logs and notifications: 180 days.
• Activity log (what staff and users did, with address and browser): 400 days; when you delete your account the address and browser are removed from your entries.
• Searches: 90 days. Counts of views, shares and clicks: 120 days.
• Cookie choice records: three years.
• Backups: copies of the above can remain in encrypted backups for up to [number] weeks after you delete something, then are overwritten.

Your rights

• See and download your data: Account, then "Download my data".
• Correct it: edit your profile, or write to us.
• Delete your account and data: Account, then "Delete my account". Questions and answers you posted in the community stay on the site without your name [decision: or are removed on request].
• Withdraw consent: "Cookie settings" in the footer, or unsubscribe from any alert.
• Complain to our Grievance Officer above; if you are not satisfied, to the Data Protection Board of India.
• Nominate a person to exercise your rights if you die or cannot.

Children

[Decision needed: JobIsYour is meant for people aged 18 or over. If you are under 18, use it with a parent or guardian, who must agree to your account. We do not show targeted adverts to people we know are under 18.]

Security

Connections use HTTPS; documents and two-factor secrets are encrypted at rest; staff sign in with two-factor authentication; access to private documents is logged. No system is perfectly safe: tell us at once if you think your account was used by someone else.

Changes

When this policy changes in a way that matters we change the version above and, for cookies, ask you again.