This Privacy Policy explains how EJOBBOOK, the operator of the website www.jobjod.com, the JobJod mobile application and related services (together, the “Platform”), collects, uses, discloses, retains and protects personal data. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). Please read this Policy together with our Terms and Conditions of Use. By using the Platform and giving your consent where sought, you acknowledge the practices described here.
Part 1
The basics
1 Introduction and Application
(a) The Platform is an online job portal that connects job seekers (“Candidates”) with employers and recruiters (“Employers”). To provide this service we process certain personal data of our Users.
(b) This Policy applies to personal data we process about Candidates, Employers, and visitors to the Platform. It does not apply to the practices of third parties whom we do not control.
2 Territorial Scope
(a) The Platform is established in, directed at, and intended for use within India, and this Policy is framed in accordance with Indian law, principally the DPDP Act and the Information Technology Act, 2000.
(b) The Platform may be accessed from outside India. Where you access the Platform from another jurisdiction, you do so on your own initiative, and you are responsible for compliance with your local laws. By using the Platform you understand that your personal data will be processed in India in accordance with Indian law. We do not represent that the Platform or this Policy complies with the data-protection laws of any jurisdiction other than India.
3 Definitions
- “Personal Data” means any data about an individual who is identifiable by or in relation to such data;
- “Data Principal” means the individual to whom the Personal Data relates;
- “Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, and erasure;
- “Consent Notice” means the notice we provide when seeking your consent to process your Personal Data.
Part 2
What we collect and why
4 What Information We Collect
Depending on how you use the Platform, we may collect:
(a) Identity and contact data — name, email address, telephone number, and login credentials;
(b) Candidate profile data — resume/curriculum vitae, educational qualifications, work experience, skills, current and expected remuneration, and other information you choose to include in your profile;
(c) Employer data — company name, business address, GSTIN, CIN, PAN, authorised-signatory details and other business-verification information;
(d) Transaction data — subscription, billing and payment-reference details (full card or bank credentials are handled by our payment service providers, not stored by us);
(e) Usage, device and technical data — as described in Clauses 7 and 8; and
(f) Communications — messages, applications, and correspondence made through or with the Platform.
You must not upload sensitive information that is not required for recruitment. Providing information about any person other than yourself is your responsibility, and you must have the authority to do so.
5 Why We Collect Information (Purposes)
We process your Personal Data for the following purposes:
(a) to create and administer your account and provide the Platform’s services;
(b) to enable Candidates to apply for Vacancies and Employers to post Vacancies and evaluate applications;
(c) to verify identity and, for Employers, to carry out business (KYC) verification;
(d) to process subscriptions and payments;
(e) to communicate with you about your account, applications, and service updates;
(f) to maintain the security, integrity and proper functioning of the Platform, and to detect and prevent fraud, fake profiles and fraudulent Vacancies;
(g) to comply with Applicable Law and to respond to lawful requests from authorities; and
(h) with your separate consent, to send you promotional communications, which you may opt out of at any time.
6 Consent and Its Withdrawal
(a) Where the DPDP Act requires consent, we process your Personal Data on the basis of your free, specific, informed, unconditional and unambiguous consent, given by a clear affirmative action, after a Consent Notice. We do not use pre-ticked boxes and we do not bundle unrelated purposes.
(b) We may also process Personal Data for certain legitimate uses permitted by the DPDP Act, such as where you voluntarily provide it for a specified purpose, or as required to comply with law.
(c) You may withdraw your consent at any time, with effect for the future, through your account settings or by contacting the Grievance Officer. Withdrawal will not affect processing carried out before withdrawal, and may mean we can no longer provide some or all of the services. On withdrawal, we will cease processing and cause our Data Processors to cease processing, unless retention is required by law.
7 Cookies and Tracking Technologies
(a) We use cookies and similar technologies to operate the Platform, remember your preferences, maintain sessions, analyse usage, and improve our services. Some cookies are strictly necessary; others are used only with your consent.
(b) You can manage non-essential cookies through the consent banner or your browser settings. Disabling certain cookies may affect the functioning of the Platform. Further details are set out in our Cookie Policy, where published.
8 Location, Device and IP Information
When you use the Platform, we may automatically collect your IP address, device identifiers, browser type, operating system, approximate location derived from your IP address, and log data such as pages viewed and time of access. We use this information for security, fraud prevention, analytics, and to provide location-relevant Vacancies. We do not collect precise GPS location unless you separately enable it.
Part 3
How it is used and shared
9 Use of Employer and Candidate Information
(a) Candidate information is made available to Employers only for bona fide recruitment, and subject to the visibility settings in Clause 10. Employers are contractually required to use such information only for recruitment, in accordance with law, and not to sell, rent or misuse it.
(b) Employer information is used to verify the Employer, publish Vacancies, and enable Candidates to identify the source of a Vacancy. We are not responsible for how an Employer subsequently handles Candidate data once it has been lawfully shared for recruitment; the Employer is responsible as an independent Data Fiduciary for its own processing.
10 Resume Visibility Policy
(a) By default, your resume and profile are made searchable and visible to registered and verified Employers so that they can consider you for Vacancies. You can adjust your visibility settings, including making your profile private or hiding specified fields, through your account, subject to the functionality available.
(b) When you apply to a Vacancy, the relevant Employer will receive the information necessary to consider your application. Information you choose to disclose directly to an Employer is thereafter also held by that Employer.
11 Data Security
(a) We implement reasonable security safeguards designed to protect Personal Data against unauthorised access, use, disclosure, alteration and loss, including access controls, encryption in transit, and organisational measures, and we require our Data Processors to do the same.
(b) No method of transmission or storage is completely secure. While we strive to protect your Personal Data, we cannot guarantee absolute security, and any transmission is at your own risk to that extent permitted by law.
12 Data Sharing and Disclosure
We do not sell your Personal Data. We may share it:
(a) with Employers, as described in Clauses 9 and 10, for recruitment;
(b) with Data Processors and service providers who process data on our behalf under written contracts (Clause 13);
(c) with payment service providers to process transactions;
(d) where required by Applicable Law, or in response to a lawful request by a court or government authority; and
(e) in connection with a merger, acquisition or reorganisation, subject to this Policy continuing to apply.
13 Third-Party Services and Processors
We engage third-party service providers such as cloud hosting, analytics, communication (email/SMS), resume-parsing and payment providers. These providers process Personal Data only on our instructions, for specified purposes, under agreements that require appropriate security and confidentiality. The Platform may also link to third-party sites which are governed by their own privacy policies, for which we are not responsible.
14 Data Retention
(a) We retain Personal Data only for as long as necessary for the purposes for which it was collected, to provide the services, and to comply with legal, accounting and record-keeping obligations.
(b) Where you withdraw consent, close your account, or where the purpose is no longer served, we will erase or anonymise your Personal Data, unless retention is required or permitted by Applicable Law (for example, retention of certain records under the Information Technology Act, 2000 and rules, and financial records under tax law). Certain logs and records may be retained for the periods prescribed by law.
Part 4
Your rights and our duties
15 Your Rights as a Data Principal
Subject to Applicable Law, you have the right to:
(a) access — obtain a summary of the Personal Data we process about you and the processing activities;
(b) correction and updating — request correction, completion or updating of inaccurate or incomplete data;
(c) erasure — request erasure of your Personal Data where it is no longer required and retention is not mandated by law;
(d) obtain a copy — request a copy of the information you have provided, to the extent available;
(e) grievance redressal — have your grievance addressed by us in the first instance; and
(f) nomination — nominate another individual to exercise your rights in the event of death or incapacity.
You may exercise these rights through your account or by contacting the Grievance Officer named in Clause 18. We will respond within the timelines prescribed by Applicable Law. We may need to verify your identity before acting on a request. If you remain unsatisfied, you may approach the Data Protection Board of India.
16 Children’s Data — Platform Not Intended for Minors
(a) The Platform is intended solely for persons aged eighteen (18) years and above. We do not knowingly collect Personal Data of any person below eighteen (18) years of age.
(b) If we become aware that we have collected Personal Data of a person below eighteen (18), we will delete it and close the associated account. If you believe a minor has provided us data, please contact the Grievance Officer.
17 Data Breach Notification
In the event of a personal-data breach, we will take steps to contain and assess it, and will intimate the Data Protection Board of India and each affected Data Principal in the manner and within the timelines required under the DPDP Act and rules, and will comply with applicable directions of CERT-In. Our internal incident-response procedure governs escalation and remediation.
18 Grievance Officer and Contact Details
If you have any question, concern or grievance about this Policy or your Personal Data, or wish to exercise your rights, please contact our Grievance Officer:
We will acknowledge your communication and respond within the timelines prescribed by Applicable Law.
19 Changes to this Privacy Policy
We may update this Policy from time to time to reflect changes in our practices or in the law. We will post the revised Policy on the Platform with a new effective date and, where required, notify you. Your continued use of the Platform after the revised Policy takes effect signifies your acknowledgement of the changes.
20 Governing Law
This Policy is governed by and construed in accordance with the laws of India, and any dispute relating to it is subject to Clauses 32 and 33 of the Terms and Conditions of Use.
This Privacy Policy should be read together with the JobJod.com Terms and Conditions of Use.