Privacy policy · JobsHub

Short version: we collect what is needed to match you with jobs, we never sell it, we encrypt the sensitive parts, and you can withdraw consent or delete everything yourself at any time.

Who we are

JobsHub is run by JobsHub, the Data Fiduciary for your personal data under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Our details and grievance officer are listed at the end of this policy.

What we collect, and why

Account details (name, email, password stored only as a hash, phone if you add it): to run your account and contact you about your applications. Phone is optional and used only for WhatsApp alerts you switch on and for employers who shortlist you.
Student profile (course, institution, graduation year, city, skills, projects, links, intro, and a career gap only if you choose to add one): to match you with jobs and show employers you apply to.
Résumé text you upload or tailor: to score it against listings and tailor it for a job. The file itself is read in your browser; only its text reaches us.
Verification evidence (GitHub username, view-only links to education proof or projects): to mark items as checked.
Applications: which listings you applied to, your note, and every status change.
Employer details (business registration or GST number, office phone, address, company email, website): to verify the business before it can post.
Consent records: what you agreed to, when, and under which version of this policy.
Reports and messages you send us.
Technical data: short-lived records of sign-in attempts and IP address, to block abuse.

We do not collect Aadhaar, PAN, date of birth, gender, religion, caste or bank details, and we do not use advertising trackers.

Our basis for using it

Your consent, given when you sign up and when you switch on optional features (job alerts, WhatsApp alerts, auto-apply). We also use data without fresh consent where the DPDP Act allows it: to reply to a message you sent us, to comply with law, and to respond to a court or government order.

Who we share it with

Employers you apply to see your profile and application. Your phone and email are shown only after they shortlist you.
Service providers who process data for us under contract and only to run the service: hosting, our PostgreSQL database provider, our email provider, Meta’s WhatsApp Business Platform (only if you turn on WhatsApp alerts), and GitHub’s public API (only your username, to check it).
Authorities, when the law requires it.

We do not sell personal data, and we do not share it for advertising.

Your rights

Access and correction: see and edit your profile and account at any time in your dashboard.
Withdraw consent, as easily as you gave it: in Account settings, under Privacy & consent, untick any optional use and it stops straight away. Your consent history is shown there too.
Erasure: delete your account yourself from the same page. This erases your profile, résumés, applications, notifications, messages to us and consent history. Can’t sign in? Use our data deletion request.
Nominate someone to exercise these rights if you die or become unable to: write to the grievance officer.
Grievances: write to the grievance officer below. We reply within 7 days and resolve within 30. If you are not satisfied, you can complain to the Data Protection Board of India.

Age

JobsHub is for people aged 18 and over, and everyone confirms this when signing up. We do not knowingly process children’s data; if we learn an account belongs to someone under 18, we delete it.

Retention

We keep your data while your account is active and erase it when you delete your account or withdraw consent, except records the law requires us to keep. Messages sent through the contact form are erased a year after we have handled them. Sign-in abuse records expire within an hour.

Security

Data travels over encrypted connections. Phone numbers, résumés, cover letters, career gap notes, employer verification details and messages to us are also encrypted in our database (AES-256). Sessions use secure, HTTP-only cookies and passwords are hashed.

If a breach ever affects your personal data, we will tell you and the Data Protection Board of India promptly, and within 48 hours of finding it: what happened, what data was involved, what we are doing and what you can do.

Where data is stored

Our providers may store data outside India, only in countries the Government of India has not restricted under the DPDP Act.

Cookies

See our cookie policy. We use no advertising or analytics cookies.

Changes

If we change this policy in a way that matters, we will tell you by email before it takes effect and ask for consent again where needed.

Contact and grievance officer

Operated by: JobsHub
Grievance officer: Grievance officer, via the contact form

What we collect, and why

Account details (name, email, password stored only as a hash, phone if you add it): to run your account and contact you about your applications. Phone is optional and used only for WhatsApp alerts you switch on and for employers who shortlist you.

Student profile (course, institution, graduation year, city, skills, projects, links, intro, and a career gap only if you choose to add one): to match you with jobs and show employers you apply to.

Résumé text you upload or tailor: to score it against listings and tailor it for a job. The file itself is read in your browser; only its text reaches us.

Verification evidence (GitHub username, view-only links to education proof or projects): to mark items as checked.

Applications: which listings you applied to, your note, and every status change.

Employer details (business registration or GST number, office phone, address, company email, website): to verify the business before it can post.

Consent records: what you agreed to, when, and under which version of this policy.

Reports and messages you send us.

Technical data: short-lived records of sign-in attempts and IP address, to block abuse.

We do not collect Aadhaar, PAN, date of birth, gender, religion, caste or bank details, and we do not use advertising trackers.

Who we share it with

Employers you apply to see your profile and application. Your phone and email are shown only after they shortlist you.

Service providers who process data for us under contract and only to run the service: hosting, our PostgreSQL database provider, our email provider, Meta’s WhatsApp Business Platform (only if you turn on WhatsApp alerts), and GitHub’s public API (only your username, to check it).

Authorities, when the law requires it.

We do not sell personal data, and we do not share it for advertising.

Your rights

Access and correction: see and edit your profile and account at any time in your dashboard.

Withdraw consent, as easily as you gave it: in Account settings, under Privacy & consent, untick any optional use and it stops straight away. Your consent history is shown there too.

Erasure: delete your account yourself from the same page. This erases your profile, résumés, applications, notifications, messages to us and consent history. Can’t sign in? Use our data deletion request.

Nominate someone to exercise these rights if you die or become unable to: write to the grievance officer.

Grievances: write to the grievance officer below. We reply within 7 days and resolve within 30. If you are not satisfied, you can complain to the Data Protection Board of India.

Security