Privacy Policy.
Version v1.0-2026-02 · Last updated 15 February 2026 · Compliant with India's DPDPA 2023 and GDPR
1. What we collect
When you use NaukriDaddy, we collect:
- Identity — name, email, phone number, password (hashed).
- Profile — resume text, work history, skills, current title, location, LinkedIn URL, years of experience.
- Application activity — jobs you apply to, referrals you share, testimonials you submit.
- Technical — IP address, browser/device fingerprint, timestamps — collected to fight abuse and audit consent.
- Payments — for paid plans, we store the plan and transaction ID. Card details never touch our servers; they go directly to Razorpay.
2. Why we process it (legal basis)
- Contract — to run your account, match you to jobs, deliver paid features.
- Consent — to share your profile with specific recruiters when you apply, send job alerts, marketing.
- Legitimate interest — fraud prevention, product analytics (aggregated, non-identifying).
- Legal obligation — tax records for paid transactions.
3. Who we share it with
- Recruiters on jobs you apply to — your full profile becomes visible to that recruiter's team.
- Our AI matching engine — profile text is processed by our AI models to compute match scores. This runs on our infrastructure; content is not used to train third-party models.
- Razorpay — payment processing.
- Google (opt-in) — when a recruiter connects Gmail/Calendar, that recruiter's tokens are stored to send interview invites.
- Never sold — we do not sell your data to advertisers or list brokers.
4. Retention
We retain profile data while your account is active. If you delete your account, we purge personal data within 30 days, except: (a) invoices and payment records kept for 7 years per tax law, and (b) anonymized aggregate metrics.
5. Your rights
- Access — request a copy of everything we hold on you.
- Correction — fix inaccurate data via your profile page.
- Erasure — delete your account and personal data.
- Withdraw consent — unsubscribe from alerts, revoke marketing consent.
- Portability — export your profile + application history.
To exercise any of these, email privacy@naukridaddy.com — we respond within 30 days.
6. Security
Passwords are hashed with bcrypt. Data is encrypted in transit (HTTPS) and at rest. We keep audit trails of consent, logins, and privileged actions.
7. Cookies
We use strictly-necessary cookies for authentication (httpOnly, SameSite=None+Secure). We do not use tracking cookies or ad pixels on candidate flows.
8. Cross-border transfers
Data is primarily stored in India. Backups and some processing (e.g., anti-abuse) may occur in the EU. All transfers rely on appropriate safeguards (standard contractual clauses).
9. Children
NaukriDaddy is not intended for anyone under 18. We do not knowingly collect data from minors.
10. Changes to this policy
If we materially change this policy, we'll notify you by email and require re-consent inside the app.
11. Grievance officer (India DPDPA)
Grievance Officer — Data Protection · NaukriDaddy · grievance@naukridaddy.com
