Privacy Policy

Hirexa · Last updated [DATE]

Before you publish: replace every [BRACKETED] item below with your real details — legal company name, registered address, grievance officer, contact email and the date. Have a lawyer read it once; this is a solid starting draft, not legal advice.

Hirexa ("we", "us") connects jobseekers, apprentices and employers in India. This policy explains what personal data we collect, why we collect it, who sees it, and the choices you have. It follows India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

Hirexa is operated by [LEGAL COMPANY NAME], [REGISTERED ADDRESS], India. We are the Data Fiduciary for the data described here.

1. What we collect

Who	What
Jobseekers and apprentices	Mobile number (for sign-in), name, email if you give one, age, gender, city, education, work experience, skills, job preferences, languages, assets, profile photo and résumé file if you upload one.
Employers	Company name, contact person, mobile number, email, address, industry, GST or CIN number, and the KYC documents you upload (company document and personal/HR document).
Everyone	Activity on the service — jobs posted, applications sent, interview details, plan purchases — and basic technical logs needed to keep the service working and secure.

We do not ask jobseekers for Aadhaar, PAN, bank details or any payment information. Jobseekers never pay us.

2. Why we use it

To create and run your account, and to sign you in by OTP.
To show jobs and apprenticeships that match your profile.
To let employers see the profiles of people who apply to their jobs, so they can shortlist and schedule interviews.
To verify that an employer is a real business before it can post jobs.
To take payment from employers for paid plans, and to raise invoices.
To keep the service safe — preventing fraud, fake listings and misuse.
To meet legal obligations, including records required under apprenticeship schemes (NAPS, NATS, MAPS) where you use those services.

3. Consent

When you create your account you agree to this policy, and we record the date and time of that consent. You can withdraw consent at any time by writing to our Grievance Officer below. Once you withdraw, we stop processing your data and delete your profile, except what we must keep by law. Withdrawing consent does not undo anything already done lawfully before.

4. Who sees your data

Employers see your profile only when you apply to their job — your name, city, education, experience, skills and résumé. Your mobile number is shared with that employer so they can contact you about the role.
Jobseekers see a company's public details and its job posts. Employer KYC documents are never shown to anyone outside Hirexa.
Service providers. We run on Google Firebase (Google Cloud India, Mumbai region) for the database, file storage and OTP delivery, and we use a payment gateway for employer payments. They process data on our instructions only.
Authorities, where the law requires it.

We do not sell your data, and we do not share it with advertisers.

5. Where it is stored

Your data is stored in India (Mumbai region). Backups are kept in our own secured storage. If we ever need to transfer data outside India, we will do so only where Indian law permits it.

6. How long we keep it

Your profile stays while your account is active.
If you do not use the account for [24] months, we may delete it after telling you.
Applications and interview records are kept for [24] months so both sides have a history.
Payment and invoice records are kept as long as tax law requires (currently eight years).
Apprenticeship records are kept as long as the scheme requires.

7. Your rights

Under the DPDP Act you may: see what data we hold about you; correct or complete it; have it erased; nominate someone to exercise these rights if you cannot; and complain if we get it wrong. Most of this you can do yourself inside the app — your profile is editable at any time. For erasure or anything else, write to the Grievance Officer. We respond within [30] days.

8. Security

Sign-in is by OTP, so there is no password to leak. Data is encrypted in transit and at rest. Access is limited by database rules so one user cannot read another's data, and KYC documents are not publicly readable. No system is perfect; if a breach affects you, we will inform you and the Data Protection Board as the law requires.

9. Children

Hirexa is for people aged 18 and above. We do not knowingly collect data from children. If you believe a child has created an account, tell us and we will remove it.

10. Changes

If we change this policy we will update the date at the top and, for important changes, tell you in the app.

Grievance Officer

[OFFICER NAME]
Email: [privacy@hirexa.in]
Phone: [PHONE]
Address: [REGISTERED ADDRESS]

If you are not satisfied with our response, you may complain to the Data Protection Board of India.